Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a31303a3a2f34382d3438203d3e203336323336.roa
File: 326130303a646438303a31303a3a2f34382d3438203d3e203336323336.roa (raw, json)
Hash identifier: /N83UZ6mnAivgZq4QXdQ7eTugO5lKQZSZLG8RgNmHYg=
Subject key identifier: EE:91:C4:2F:CC:CA:15:00:CB:74:F2:8F:DA:C4:44:D5:B1:31:0D:6D
Certificate issuer: /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial: 53F3F80FA2084F7B11ED5A6FB26D90DD4CFF50BF
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a31303a3a2f34382d3438203d3e203336323336.roa
Signing time: Mon 04 Aug 2025 20:13:53 +0000
ROA not before: Mon 04 Aug 2025 20:08:53 +0000
ROA not after: Mon 03 Aug 2026 20:13:53 +0000
asID: 36236
IP address blocks: 2a00:dd80:10::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 01:08:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:f3:f8:0f:a2:08:4f:7b:11:ed:5a:6f:b2:6d:90:dd:4c:ff:50:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Validity
Not Before: Aug 4 20:08:53 2025 GMT
Not After : Aug 3 20:13:53 2026 GMT
Subject: CN=EE91C42FCCCA1500CB74F28FDAC444D5B1310D6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a1:e8:89:fd:fc:31:bc:0c:2f:2b:96:a6:3b:
1c:21:ed:13:2e:c1:0c:88:40:8a:22:d9:ce:55:2f:
06:b8:8e:f1:31:92:aa:48:07:15:e5:01:a5:31:0b:
64:b3:a8:a5:ea:af:38:32:a4:8e:f0:02:59:2e:dc:
98:de:bd:45:fb:8b:a6:37:13:0d:68:74:a3:6c:77:
32:5d:3c:41:ca:44:94:ca:54:f0:13:2b:f0:6e:13:
79:e3:bc:e7:c6:52:c3:1e:6b:09:c5:e7:af:07:dd:
b0:f2:f1:22:c9:fa:b0:15:61:ab:ed:eb:48:91:f2:
e0:92:5c:e7:fd:6b:7c:c3:87:e2:eb:35:26:d6:d0:
b1:97:f7:90:17:f9:4c:03:23:90:80:63:f4:39:6d:
0a:b2:c1:3f:6d:99:99:ed:fd:b2:c4:f5:af:ea:5f:
55:aa:50:0a:6e:68:48:f6:d1:8c:60:10:b6:71:f9:
35:18:f0:bf:23:84:95:7e:d3:3b:6f:6c:ee:4f:32:
72:c3:d6:22:89:cc:a0:8f:bc:47:60:5d:7b:ef:25:
90:25:e8:1e:33:86:62:b9:15:4f:7b:60:ea:f7:ff:
bf:55:a7:e2:3f:aa:8a:a9:88:2b:04:50:12:18:12:
29:ed:da:51:8e:c2:ea:40:5b:39:e4:47:cb:5c:b7:
6f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:91:C4:2F:CC:CA:15:00:CB:74:F2:8F:DA:C4:44:D5:B1:31:0D:6D
X509v3 Authority Key Identifier:
keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a31303a3a2f34382d3438203d3e203336323336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:dd80:10::/48
Signature Algorithm: sha256WithRSAEncryption
0d:11:07:83:5a:ab:4d:e4:66:36:77:b2:0e:4a:2c:26:e5:5a:
30:17:af:29:ad:9c:57:a6:41:f7:cd:4a:e4:4e:ef:89:38:de:
3a:e2:4a:3d:4b:8f:2a:42:48:0d:42:6b:f8:d9:bc:b0:bc:9f:
d5:8b:e1:5e:e7:af:cf:20:1e:e4:95:7e:74:d6:d8:a9:d0:8e:
41:c2:d7:14:cc:42:e1:7d:0b:2b:40:9f:84:e3:4b:db:31:f6:
46:28:61:23:14:b3:ad:24:be:5e:36:e8:29:d5:d8:dd:73:7c:
06:9b:ea:09:59:f0:f4:5a:cc:52:bf:d2:9c:52:4f:68:e0:06:
81:ab:bb:b8:25:29:b4:75:67:b2:0e:ac:dc:6f:05:f1:2c:44:
fe:59:55:5d:ed:31:c0:c3:bc:77:dd:9e:39:79:b2:d1:59:31:
63:82:46:a1:6e:51:17:f2:d4:7c:9a:d1:5b:fb:fd:73:d3:c3:
51:b7:a6:f0:f8:b2:c6:6c:16:f9:5b:06:66:f7:28:37:c1:d2:
2e:2c:16:eb:a2:06:1c:c7:29:6d:1e:9a:ed:8d:91:d4:05:59:
ce:85:f9:98:be:6e:d5:ef:81:1f:5d:29:90:5a:43:7e:78:ef:
4e:5d:1b:70:8c:08:48:dd:da:b8:f3:3f:b9:be:30:c4:5a:50:
3b:ca:35:64
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgIUU/P4D6IIT3sR7Vpvsm2Q3Uz/UL8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZWIyYzdlNjI1MDNiMDYzNGViNGFiNTNmODhjMDY5NTBh
Yzc2ZGNkMTAeFw0yNTA4MDQyMDA4NTNaFw0yNjA4MDMyMDEzNTNaMDMxMTAvBgNV
BAMTKEVFOTFDNDJGQ0NDQTE1MDBDQjc0RjI4RkRBQzQ0NEQ1QjEzMTBENkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCroeiJ/fwxvAwvK5amOxwh7RMu
wQyIQIoi2c5VLwa4jvExkqpIBxXlAaUxC2SzqKXqrzgypI7wAlku3JjevUX7i6Y3
Ew1odKNsdzJdPEHKRJTKVPATK/BuE3njvOfGUsMeawnF568H3bDy8SLJ+rAVYavt
60iR8uCSXOf9a3zDh+LrNSbW0LGX95AX+UwDI5CAY/Q5bQqywT9tmZnt/bLE9a/q
X1WqUApuaEj20YxgELZx+TUY8L8jhJV+0ztvbO5PMnLD1iKJzKCPvEdgXXvvJZAl
6B4zhmK5FU97YOr3/79Vp+I/qoqpiCsEUBIYEint2lGOwupAWznkR8tct29xAgMB
AAGjggIpMIICJTAdBgNVHQ4EFgQU7pHEL8zKFQDLdPKP2sRE1bExDW0wHwYDVR0j
BBgwFoAU6yx+YlA7BjTrSrU/iMBpUKx23NEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODNmNjg2NjEwODRiODYvMS9FQjJDN0U2MjUw
M0IwNjM0RUI0QUI1M0Y4OEMwNjk1MEFDNzZEQ0QxLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNnl4LVlsQTdCalRyU3JVX2lNQnBVS3gyM05FLmNlcjCBpgYIKwYB
BQUHAQsEgZkwgZYwgZMGCCsGAQUFBzALhoGGcnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzZjY4NjYxMDg0Yjg2
LzEvMzI2MTMwMzAzYTY0NjQzODMwM2EzMTMwM2EzYTJmMzQzODJkMzQzODIwM2Qz
ZTIwMzMzNjMyMzMzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoA3YAAEDANBgkqhkiG9w0BAQsFAAOC
AQEADREHg1qrTeRmNneyDkosJuVaMBevKa2cV6ZB981K5E7viTjeOuJKPUuPKkJI
DUJr+Nm8sLyf1YvhXuevzyAe5JV+dNbYqdCOQcLXFMxC4X0LK0CfhONL2zH2Rihh
IxSzrSS+XjboKdXY3XN8BpvqCVnw9FrMUr/SnFJPaOAGgau7uCUptHVnsg6s3G8F
8SxE/llVXe0xwMO8d92eOXmy0VkxY4JGoW5RF/LUfJrRW/v9c9PDUbem8PiyxmwW
+VsGZvcoN8HSLiwW66IGHMcpbR6a7Y2R1AVZzoX5mL5u1e+BH10pkFpDfnjvTl0b
cIwISN3auPM/ub4wxFpQO8o1ZA==
-----END CERTIFICATE-----
Generated at Fri Aug 8 12:59:23 2025 by rpki-client