Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33633a3a2f34382d3438203d3e203336323336.roa
File: 326130303a646438303a33633a3a2f34382d3438203d3e203336323336.roa (raw, json)
Hash identifier: /5iZKCsy6ZZ3yyGjRU9FWy43o9ZMbxb6EJ/pWxcPFn0=
Subject key identifier: BE:3E:20:1C:FE:D0:57:BA:00:9A:92:3E:B7:3B:21:E7:59:BA:E6:51
Certificate issuer: /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial: 1D9F1B8D991984A66CC66E31FC20B558C30C4678
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33633a3a2f34382d3438203d3e203336323336.roa
Signing time: Mon 04 Aug 2025 20:13:53 +0000
ROA not before: Mon 04 Aug 2025 20:08:53 +0000
ROA not after: Mon 03 Aug 2026 20:13:53 +0000
asID: 36236
IP address blocks: 2a00:dd80:3c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:9f:1b:8d:99:19:84:a6:6c:c6:6e:31:fc:20:b5:58:c3:0c:46:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Validity
Not Before: Aug 4 20:08:53 2025 GMT
Not After : Aug 3 20:13:53 2026 GMT
Subject: CN=BE3E201CFED057BA009A923EB73B21E759BAE651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:37:9b:11:3f:67:95:7a:c2:a3:a1:92:01:2a:
be:25:b4:3e:9d:37:a8:19:28:ab:3f:81:b5:d0:11:
2f:93:28:14:bf:9d:bc:cc:ab:ee:bf:39:d6:b9:b4:
3b:ac:a7:29:f3:f0:82:4b:7f:91:6e:a4:65:cb:aa:
e9:69:5c:e6:35:e2:c7:e5:eb:20:28:5a:7c:0c:a7:
e0:21:a9:cc:83:3a:c0:d1:7b:8a:b0:f1:cc:77:5a:
25:d9:92:de:42:77:82:b6:8b:19:b6:27:5f:bd:96:
fd:f3:4a:12:46:08:c9:79:2f:5c:b1:e7:4c:f4:aa:
c9:c6:1e:59:03:a0:6c:12:d4:07:c2:a7:28:89:f4:
c6:e3:ba:4b:59:fb:fa:c6:7e:4b:65:36:1c:e1:9b:
3c:8b:c9:81:43:69:d6:c5:e6:0e:cc:90:31:06:40:
c5:a9:02:da:3f:a8:65:81:92:16:bf:45:87:92:5f:
3c:a5:cb:f0:17:c2:39:a4:b5:8d:d6:19:c3:f4:1e:
dd:bd:28:a5:ed:e2:db:58:06:3d:5a:ab:0b:c6:04:
49:a7:08:d1:01:64:3e:e0:57:d3:f3:7e:bf:10:d3:
84:e2:6f:6f:5b:a1:eb:d5:a8:d5:a7:22:32:7a:fd:
e7:c4:d5:23:e0:38:c2:7f:2e:ce:a3:f3:59:1e:ff:
07:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:3E:20:1C:FE:D0:57:BA:00:9A:92:3E:B7:3B:21:E7:59:BA:E6:51
X509v3 Authority Key Identifier:
keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33633a3a2f34382d3438203d3e203336323336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:dd80:3c::/48
Signature Algorithm: sha256WithRSAEncryption
3e:b2:87:5e:0e:a0:87:6a:d8:88:eb:e8:d2:37:f9:cd:69:8b:
5d:97:e5:12:d5:88:4f:b8:68:ba:8d:d9:c3:91:27:1c:34:dd:
38:04:53:d9:89:52:81:2c:57:ff:23:3d:53:13:80:8b:92:8a:
40:9d:7b:b9:85:15:0c:4d:b3:47:6c:3a:be:ae:ae:ba:40:e8:
6e:83:cb:4a:59:2f:e8:a0:ee:76:8d:03:69:0c:cd:ee:57:de:
a4:b0:41:20:e6:da:9a:aa:79:eb:02:33:15:0c:fe:36:09:f5:
86:61:4e:1b:e9:12:0d:a9:81:74:1b:4d:42:85:79:46:6f:e6:
93:25:cb:f0:f2:90:de:ca:c8:f9:20:1e:9e:24:26:a4:05:90:
d8:2c:5c:5c:99:8b:82:60:82:38:95:ad:c2:69:59:36:ff:c0:
3f:5f:5a:62:86:4c:a1:7c:95:33:4c:c8:18:d3:fa:bf:31:c7:
f1:0b:84:8c:28:4f:29:c5:89:e0:04:7e:df:fc:81:7f:4f:04:
cb:5a:08:08:98:8b:43:1b:61:9a:b9:97:97:0e:4a:6a:ae:e3:
47:51:04:88:93:d0:7a:dc:48:92:28:ca:97:f5:79:a0:0d:13:
e4:1a:da:05:3d:58:2f:61:90:bd:d0:99:d9:1c:c3:29:81:ed:
ae:78:f7:4c
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgIUHZ8bjZkZhKZsxm4x/CC1WMMMRngwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZWIyYzdlNjI1MDNiMDYzNGViNGFiNTNmODhjMDY5NTBh
Yzc2ZGNkMTAeFw0yNTA4MDQyMDA4NTNaFw0yNjA4MDMyMDEzNTNaMDMxMTAvBgNV
BAMTKEJFM0UyMDFDRkVEMDU3QkEwMDlBOTIzRUI3M0IyMUU3NTlCQUU2NTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFN5sRP2eVesKjoZIBKr4ltD6d
N6gZKKs/gbXQES+TKBS/nbzMq+6/Oda5tDuspynz8IJLf5FupGXLqulpXOY14sfl
6yAoWnwMp+AhqcyDOsDRe4qw8cx3WiXZkt5Cd4K2ixm2J1+9lv3zShJGCMl5L1yx
50z0qsnGHlkDoGwS1AfCpyiJ9MbjuktZ+/rGfktlNhzhmzyLyYFDadbF5g7MkDEG
QMWpAto/qGWBkha/RYeSXzyly/AXwjmktY3WGcP0Ht29KKXt4ttYBj1aqwvGBEmn
CNEBZD7gV9Pzfr8Q04Tib29boevVqNWnIjJ6/efE1SPgOMJ/Ls6j81ke/wf5AgMB
AAGjggIpMIICJTAdBgNVHQ4EFgQUvj4gHP7QV7oAmpI+tzsh51m65lEwHwYDVR0j
BBgwFoAU6yx+YlA7BjTrSrU/iMBpUKx23NEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODNmNjg2NjEwODRiODYvMS9FQjJDN0U2MjUw
M0IwNjM0RUI0QUI1M0Y4OEMwNjk1MEFDNzZEQ0QxLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNnl4LVlsQTdCalRyU3JVX2lNQnBVS3gyM05FLmNlcjCBpgYIKwYB
BQUHAQsEgZkwgZYwgZMGCCsGAQUFBzALhoGGcnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzZjY4NjYxMDg0Yjg2
LzEvMzI2MTMwMzAzYTY0NjQzODMwM2EzMzYzM2EzYTJmMzQzODJkMzQzODIwM2Qz
ZTIwMzMzNjMyMzMzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoA3YAAPDANBgkqhkiG9w0BAQsFAAOC
AQEAPrKHXg6gh2rYiOvo0jf5zWmLXZflEtWIT7houo3Zw5EnHDTdOART2YlSgSxX
/yM9UxOAi5KKQJ17uYUVDE2zR2w6vq6uukDoboPLSlkv6KDudo0DaQzN7lfepLBB
IObamqp56wIzFQz+Ngn1hmFOG+kSDamBdBtNQoV5Rm/mkyXL8PKQ3srI+SAeniQm
pAWQ2CxcXJmLgmCCOJWtwmlZNv/AP19aYoZMoXyVM0zIGNP6vzHH8QuEjChPKcWJ
4AR+3/yBf08Ey1oICJiLQxthmrmXlw5Kaq7jR1EEiJPQetxIkijKl/V5oA0T5Bra
BT1YL2GQvdCZ2RzDKYHtrnj3TA==
-----END CERTIFICATE-----
Generated at Wed Aug 6 14:22:02 2025 by rpki-client