Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a34313a3a2f34382d3438203d3e203336323336.roa
File: 326130303a646438303a34313a3a2f34382d3438203d3e203336323336.roa (raw, json)
Hash identifier: TZcmb3hF50fwmQHt9jx1qz2uhZcY8+rvLlZI53+feUQ=
Subject key identifier: 01:00:3D:1B:A0:98:75:3F:39:7F:DB:EA:89:6F:D4:76:1C:21:80:FA
Certificate issuer: /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial: 24A0C5F1EFDE2F4F12F72ADA08E24CABB0D8BDA7
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a34313a3a2f34382d3438203d3e203336323336.roa
Signing time: Mon 04 Aug 2025 20:13:54 +0000
ROA not before: Mon 04 Aug 2025 20:08:54 +0000
ROA not after: Mon 03 Aug 2026 20:13:54 +0000
asID: 36236
IP address blocks: 2a00:dd80:41::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 01:08:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:a0:c5:f1:ef:de:2f:4f:12:f7:2a:da:08:e2:4c:ab:b0:d8:bd:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Validity
Not Before: Aug 4 20:08:54 2025 GMT
Not After : Aug 3 20:13:54 2026 GMT
Subject: CN=01003D1BA098753F397FDBEA896FD4761C2180FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8b:21:54:46:15:0a:56:2f:e8:b6:67:b4:9c:
c5:a1:36:3c:b1:9e:3b:c7:10:cd:a1:ea:e0:58:80:
19:29:9d:ac:e9:83:77:8a:65:21:e0:d4:fa:f2:05:
73:fb:11:cf:51:92:1b:3c:65:be:a0:95:f9:86:06:
70:60:73:58:ad:08:83:1e:48:00:d1:01:b3:4e:c0:
8d:e2:bc:74:7a:d9:18:1e:1a:11:37:e0:52:c4:9d:
a1:db:02:2b:f4:8b:74:82:a9:07:e3:1a:eb:33:ce:
f4:28:fc:8e:51:c5:0a:9e:60:b7:fd:c2:a1:5a:84:
05:8d:88:f0:15:b7:5a:00:69:d6:a0:23:4f:a7:61:
b7:60:ad:a7:ad:94:8e:dc:43:3b:82:ac:72:19:89:
d3:c3:a8:5f:74:50:58:2f:c4:b9:de:7f:41:ff:19:
d0:15:a0:82:65:2f:96:7c:9a:9a:bd:4a:7b:a1:af:
19:f7:4e:9e:d2:fb:bd:a8:f9:b6:06:64:bd:9b:c1:
60:de:cc:6e:13:c2:a8:d9:b8:e9:03:f1:5f:91:9b:
7e:52:96:47:35:4c:df:8b:59:6b:07:fa:03:c6:4e:
43:fc:54:60:47:01:69:ed:39:eb:ed:74:97:0d:c1:
c3:45:6f:a2:40:d2:4e:35:05:a5:48:9a:cb:03:65:
80:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:00:3D:1B:A0:98:75:3F:39:7F:DB:EA:89:6F:D4:76:1C:21:80:FA
X509v3 Authority Key Identifier:
keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a34313a3a2f34382d3438203d3e203336323336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:dd80:41::/48
Signature Algorithm: sha256WithRSAEncryption
9e:5e:7c:60:fd:0c:63:43:59:a7:0c:7d:cc:f9:eb:18:71:bf:
1a:ae:66:ac:78:14:b2:46:fa:9f:ed:94:2c:a9:68:bc:f0:ae:
55:12:34:e9:6e:fa:d3:1b:10:27:6a:cc:f7:84:fc:89:47:73:
b4:e8:b0:f0:dc:5c:cb:c7:17:6f:99:ff:43:86:b0:48:53:85:
49:c3:bb:34:ab:35:b9:d8:26:9c:c1:2d:e2:4e:10:12:d5:81:
81:b5:a7:18:db:c8:4a:be:4e:23:c1:19:c7:a0:5f:ce:ea:90:
a4:be:2e:ae:d7:a7:b0:94:c9:82:55:25:ac:a8:58:23:49:4b:
21:b9:6a:8e:90:00:44:f0:e0:56:b7:1e:27:e5:57:f0:b6:1f:
74:bc:a9:b5:34:e5:b7:7f:97:cb:a0:c8:34:1d:6c:31:d0:1f:
25:47:e9:f4:19:1b:f6:bd:74:e3:a6:fc:75:bb:4e:4a:cf:ef:
f0:27:f6:09:df:cd:0a:68:58:14:88:d9:32:56:e0:53:a9:dd:
3a:27:b0:46:0d:37:29:04:12:55:17:af:ae:69:4a:20:ca:23:
86:f9:e2:d9:1c:2b:d4:f4:2a:9a:1f:7b:48:c3:1d:94:7a:c7:
eb:d0:23:6e:b1:e5:e8:2f:18:1f:39:f6:c3:6d:a9:11:a4:f6:
a6:09:a4:30
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgIUJKDF8e/eL08S9yraCOJMq7DYvacwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZWIyYzdlNjI1MDNiMDYzNGViNGFiNTNmODhjMDY5NTBh
Yzc2ZGNkMTAeFw0yNTA4MDQyMDA4NTRaFw0yNjA4MDMyMDEzNTRaMDMxMTAvBgNV
BAMTKDAxMDAzRDFCQTA5ODc1M0YzOTdGREJFQTg5NkZENDc2MUMyMTgwRkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDViyFURhUKVi/otme0nMWhNjyx
njvHEM2h6uBYgBkpnazpg3eKZSHg1PryBXP7Ec9Rkhs8Zb6glfmGBnBgc1itCIMe
SADRAbNOwI3ivHR62RgeGhE34FLEnaHbAiv0i3SCqQfjGuszzvQo/I5RxQqeYLf9
wqFahAWNiPAVt1oAadagI0+nYbdgraetlI7cQzuCrHIZidPDqF90UFgvxLnef0H/
GdAVoIJlL5Z8mpq9Snuhrxn3Tp7S+72o+bYGZL2bwWDezG4TwqjZuOkD8V+Rm35S
lkc1TN+LWWsH+gPGTkP8VGBHAWntOevtdJcNwcNFb6JA0k41BaVImssDZYCHAgMB
AAGjggIpMIICJTAdBgNVHQ4EFgQUAQA9G6CYdT85f9vqiW/UdhwhgPowHwYDVR0j
BBgwFoAU6yx+YlA7BjTrSrU/iMBpUKx23NEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODNmNjg2NjEwODRiODYvMS9FQjJDN0U2MjUw
M0IwNjM0RUI0QUI1M0Y4OEMwNjk1MEFDNzZEQ0QxLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNnl4LVlsQTdCalRyU3JVX2lNQnBVS3gyM05FLmNlcjCBpgYIKwYB
BQUHAQsEgZkwgZYwgZMGCCsGAQUFBzALhoGGcnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzZjY4NjYxMDg0Yjg2
LzEvMzI2MTMwMzAzYTY0NjQzODMwM2EzNDMxM2EzYTJmMzQzODJkMzQzODIwM2Qz
ZTIwMzMzNjMyMzMzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoA3YAAQTANBgkqhkiG9w0BAQsFAAOC
AQEAnl58YP0MY0NZpwx9zPnrGHG/Gq5mrHgUskb6n+2ULKlovPCuVRI06W760xsQ
J2rM94T8iUdztOiw8Nxcy8cXb5n/Q4awSFOFScO7NKs1udgmnMEt4k4QEtWBgbWn
GNvISr5OI8EZx6BfzuqQpL4urtensJTJglUlrKhYI0lLIblqjpAARPDgVrceJ+VX
8LYfdLyptTTlt3+Xy6DINB1sMdAfJUfp9Bkb9r1046b8dbtOSs/v8Cf2Cd/NCmhY
FIjZMlbgU6ndOiewRg03KQQSVRevrmlKIMojhvni2Rwr1PQqmh97SMMdlHrH69Aj
brHl6C8YHzn2w22pEaT2pgmkMA==
-----END CERTIFICATE-----
Generated at Fri Aug 8 10:17:32 2025 by rpki-client