Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33663a3a2f34382d3438203d3e203336323336.roa
File: 326130303a646438303a33663a3a2f34382d3438203d3e203336323336.roa (raw, json)
Hash identifier: sYiddbtemeNIbFyJQgXDU5DEn44o0349yTZfr4Kjk4Y=
Subject key identifier: 4A:60:6C:49:63:33:8A:D8:A1:DB:93:35:D3:C9:69:47:04:2F:0A:10
Certificate issuer: /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial: 3D2B96DA3DCFB55DF6AEB95AFF485BFD2F9F78E8
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33663a3a2f34382d3438203d3e203336323336.roa
Signing time: Mon 04 Aug 2025 20:13:53 +0000
ROA not before: Mon 04 Aug 2025 20:08:53 +0000
ROA not after: Mon 03 Aug 2026 20:13:53 +0000
asID: 36236
IP address blocks: 2a00:dd80:3f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:2b:96:da:3d:cf:b5:5d:f6:ae:b9:5a:ff:48:5b:fd:2f:9f:78:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Validity
Not Before: Aug 4 20:08:53 2025 GMT
Not After : Aug 3 20:13:53 2026 GMT
Subject: CN=4A606C4963338AD8A1DB9335D3C96947042F0A10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:95:a3:26:39:6a:59:93:cc:30:e6:85:55:28:
d7:cf:b5:83:8d:26:f7:90:23:cf:6f:8e:bd:f9:1e:
be:a7:39:23:1e:24:b7:1b:7c:d2:33:a8:ee:d9:1b:
73:c5:db:26:2c:77:6f:c6:a6:b2:81:d2:1a:3a:44:
f8:08:d7:0b:62:e2:96:0d:3e:23:41:b9:9d:f4:f4:
70:cc:89:15:3a:af:c9:27:20:2e:19:1b:7c:5e:82:
7a:39:dd:32:df:86:64:12:23:7d:82:48:5d:e0:dd:
d9:d7:6f:93:2f:49:e6:2e:e0:f4:06:16:23:93:84:
54:d4:a5:a1:30:ba:fd:ba:e4:9b:64:4f:5e:fa:d8:
25:f0:db:58:aa:8f:c5:bb:d4:13:7f:01:93:bc:82:
08:7e:e0:d9:64:50:4b:78:7e:2f:48:ef:f5:fe:2d:
08:63:e0:03:c4:5c:cf:fa:3d:c3:72:15:44:53:8a:
f3:43:8f:6f:22:69:09:ce:e6:06:3b:1b:ab:da:05:
01:c1:b6:7e:ba:7f:77:82:51:f9:10:48:a4:65:e0:
ec:99:74:d1:60:48:15:fd:d6:03:4f:7d:dc:cc:5c:
2d:c5:03:c9:34:83:69:2e:22:52:10:10:5a:91:65:
73:de:7f:10:47:2a:87:48:b3:0b:a2:9b:93:f3:fe:
26:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:60:6C:49:63:33:8A:D8:A1:DB:93:35:D3:C9:69:47:04:2F:0A:10
X509v3 Authority Key Identifier:
keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33663a3a2f34382d3438203d3e203336323336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:dd80:3f::/48
Signature Algorithm: sha256WithRSAEncryption
6b:08:df:55:4a:20:6d:5b:81:29:ff:96:1a:42:9a:1f:a4:ec:
28:9a:25:27:b4:67:ca:50:e9:76:e1:f3:c2:6b:d3:c3:b6:13:
34:22:81:03:28:b5:78:7e:26:26:1c:38:c6:ce:02:06:bf:81:
d1:f1:58:61:72:9d:e4:c5:11:0a:ce:5c:0c:0d:26:df:66:fd:
14:4e:95:52:2d:34:63:28:d1:25:02:08:8a:b7:81:6e:b1:80:
a1:c6:ac:f5:92:51:42:5d:1b:0d:d2:3c:06:15:e7:b4:22:d0:
51:60:ae:a4:2e:46:51:a6:22:b2:98:ba:72:54:d3:56:27:d8:
3d:70:d4:55:7b:e6:3c:ab:7e:41:01:fa:f9:b6:e4:19:92:67:
a6:61:7b:75:cc:40:62:26:ec:77:66:f0:07:37:96:4c:fc:57:
6e:d8:c6:a1:32:3b:f3:6f:63:cf:f8:f1:0c:91:67:08:04:1e:
cb:e9:56:b8:c5:12:38:04:4e:f8:30:95:60:00:da:3e:98:15:
94:75:07:88:73:ed:25:36:6e:1d:7e:c0:6b:ad:ce:2e:df:97:
26:32:23:ec:0a:37:f8:76:cb:d8:a1:cd:5c:0a:0f:61:76:f5:
98:bb:6a:ec:e5:8e:d6:2e:0a:2b:75:e8:a9:6a:fb:20:92:14:
cb:e3:00:17
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgIUPSuW2j3PtV32rrla/0hb/S+feOgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZWIyYzdlNjI1MDNiMDYzNGViNGFiNTNmODhjMDY5NTBh
Yzc2ZGNkMTAeFw0yNTA4MDQyMDA4NTNaFw0yNjA4MDMyMDEzNTNaMDMxMTAvBgNV
BAMTKDRBNjA2QzQ5NjMzMzhBRDhBMURCOTMzNUQzQzk2OTQ3MDQyRjBBMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhlaMmOWpZk8ww5oVVKNfPtYON
JveQI89vjr35Hr6nOSMeJLcbfNIzqO7ZG3PF2yYsd2/GprKB0ho6RPgI1wti4pYN
PiNBuZ309HDMiRU6r8knIC4ZG3xegno53TLfhmQSI32CSF3g3dnXb5MvSeYu4PQG
FiOThFTUpaEwuv265JtkT1762CXw21iqj8W71BN/AZO8ggh+4NlkUEt4fi9I7/X+
LQhj4APEXM/6PcNyFURTivNDj28iaQnO5gY7G6vaBQHBtn66f3eCUfkQSKRl4OyZ
dNFgSBX91gNPfdzMXC3FA8k0g2kuIlIQEFqRZXPefxBHKodIswuim5Pz/ib1AgMB
AAGjggIpMIICJTAdBgNVHQ4EFgQUSmBsSWMzitih25M108lpRwQvChAwHwYDVR0j
BBgwFoAU6yx+YlA7BjTrSrU/iMBpUKx23NEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODNmNjg2NjEwODRiODYvMS9FQjJDN0U2MjUw
M0IwNjM0RUI0QUI1M0Y4OEMwNjk1MEFDNzZEQ0QxLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNnl4LVlsQTdCalRyU3JVX2lNQnBVS3gyM05FLmNlcjCBpgYIKwYB
BQUHAQsEgZkwgZYwgZMGCCsGAQUFBzALhoGGcnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzZjY4NjYxMDg0Yjg2
LzEvMzI2MTMwMzAzYTY0NjQzODMwM2EzMzY2M2EzYTJmMzQzODJkMzQzODIwM2Qz
ZTIwMzMzNjMyMzMzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoA3YAAPzANBgkqhkiG9w0BAQsFAAOC
AQEAawjfVUogbVuBKf+WGkKaH6TsKJolJ7RnylDpduHzwmvTw7YTNCKBAyi1eH4m
Jhw4xs4CBr+B0fFYYXKd5MURCs5cDA0m32b9FE6VUi00YyjRJQIIireBbrGAocas
9ZJRQl0bDdI8BhXntCLQUWCupC5GUaYispi6clTTVifYPXDUVXvmPKt+QQH6+bbk
GZJnpmF7dcxAYibsd2bwBzeWTPxXbtjGoTI7829jz/jxDJFnCAQey+lWuMUSOARO
+DCVYADaPpgVlHUHiHPtJTZuHX7Aa63OLt+XJjIj7Ao3+HbL2KHNXAoPYXb1mLtq
7OWO1i4KK3XoqWr7IJIUy+MAFw==
-----END CERTIFICATE-----
Generated at Wed Aug 6 14:20:08 2025 by rpki-client