Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a34323a3a2f34382d3438203d3e203336323336.roa
File: 326130303a646438303a34323a3a2f34382d3438203d3e203336323336.roa (raw, json)
Hash identifier: 0R8k7APvj3UCh4NKYNJmV1BLi7uRXag1Jt+wHqnCN/g=
Subject key identifier: 47:12:4E:BA:3A:6B:07:09:1B:63:AF:E3:C7:AE:94:14:77:CD:AF:9C
Certificate issuer: /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial: 192724F9EB9807A07F989B13F260BF5ED16233B0
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a34323a3a2f34382d3438203d3e203336323336.roa
Signing time: Mon 04 Aug 2025 20:13:54 +0000
ROA not before: Mon 04 Aug 2025 20:08:54 +0000
ROA not after: Mon 03 Aug 2026 20:13:54 +0000
asID: 36236
IP address blocks: 2a00:dd80:42::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 12:42:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:27:24:f9:eb:98:07:a0:7f:98:9b:13:f2:60:bf:5e:d1:62:33:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Validity
Not Before: Aug 4 20:08:54 2025 GMT
Not After : Aug 3 20:13:54 2026 GMT
Subject: CN=47124EBA3A6B07091B63AFE3C7AE941477CDAF9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:89:0a:c6:01:26:c8:eb:a2:19:15:b0:80:8e:
4b:25:db:07:59:72:7c:be:42:a7:db:b7:d8:90:b4:
45:50:03:02:7b:87:e9:a1:b8:69:c8:af:20:49:78:
68:39:87:be:ab:ee:0e:ab:1e:66:fd:ef:a5:69:01:
cc:c1:d8:ea:be:40:8f:84:af:75:d5:aa:84:2f:44:
bd:80:42:8c:ea:6e:03:73:2d:12:05:de:06:41:ba:
59:fe:40:67:b7:e5:77:59:b7:26:e6:eb:d2:d2:d1:
ce:da:50:80:47:25:82:d5:b8:5b:55:2e:6a:88:f9:
63:45:05:d2:2f:cd:03:13:45:82:a1:08:34:12:be:
6f:cf:ba:0d:df:43:90:97:95:de:8a:51:b6:1f:b1:
e4:9e:56:b1:89:a3:32:0f:81:f1:ef:22:a8:5b:00:
33:37:0f:33:23:df:e0:4d:62:56:a1:3f:5e:9b:4b:
42:6a:a7:db:7c:cb:a5:80:0d:88:cf:43:90:48:ed:
74:08:49:76:4e:36:90:44:b4:7d:0c:be:17:72:a1:
cf:dc:01:0b:a9:fc:31:3b:a5:bc:07:d2:4b:f8:6a:
1b:ee:33:94:3c:cf:67:53:95:9e:1a:81:bb:3c:58:
d4:7d:0f:1e:49:e0:f2:85:30:ae:a2:1b:2a:7b:6d:
53:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:12:4E:BA:3A:6B:07:09:1B:63:AF:E3:C7:AE:94:14:77:CD:AF:9C
X509v3 Authority Key Identifier:
keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a34323a3a2f34382d3438203d3e203336323336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:dd80:42::/48
Signature Algorithm: sha256WithRSAEncryption
ae:eb:73:1c:fb:8f:0d:00:7a:61:28:38:74:dd:35:aa:68:eb:
72:c5:25:4e:f3:a4:e0:2d:3e:0e:d0:dc:e4:61:34:c0:7c:c2:
d0:7e:4b:e3:16:31:4d:42:9a:9a:9b:7a:ed:bc:46:99:d3:df:
fd:b0:10:b2:75:5e:c3:0b:a2:78:ed:10:9e:eb:02:3c:a3:a3:
a8:ae:50:fc:b4:a0:56:20:85:92:da:8e:13:f1:49:61:08:56:
60:58:d5:d1:5f:f9:12:2e:b7:b6:45:42:45:cc:e7:10:57:47:
6b:95:f1:a4:2f:37:50:3e:5a:27:2c:4c:82:11:60:40:91:3e:
84:3f:c3:f7:aa:d4:16:4c:49:e4:85:29:26:81:0e:b7:fc:ea:
88:fe:ff:a9:d8:71:0e:83:ad:f7:d2:ed:94:9b:4a:06:94:ee:
e0:74:65:f4:41:f9:76:58:9f:b2:34:24:d7:50:a6:81:0e:26:
7c:fe:fe:01:e4:18:cc:00:05:d5:cb:27:c8:90:9b:1d:18:43:
32:26:48:6f:a1:46:2c:ac:eb:2a:01:d4:29:44:46:7c:2f:9f:
bd:b3:54:64:92:22:ba:e9:7e:4f:1e:14:6c:c8:7e:2f:93:36:
b2:8b:7c:79:2f:ba:62:fa:5b:37:b6:56:a9:f3:78:c1:88:1a:
89:d8:77:b7
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgIUGSck+euYB6B/mJsT8mC/XtFiM7AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZWIyYzdlNjI1MDNiMDYzNGViNGFiNTNmODhjMDY5NTBh
Yzc2ZGNkMTAeFw0yNTA4MDQyMDA4NTRaFw0yNjA4MDMyMDEzNTRaMDMxMTAvBgNV
BAMTKDQ3MTI0RUJBM0E2QjA3MDkxQjYzQUZFM0M3QUU5NDE0NzdDREFGOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7iQrGASbI66IZFbCAjksl2wdZ
cny+Qqfbt9iQtEVQAwJ7h+mhuGnIryBJeGg5h76r7g6rHmb976VpAczB2Oq+QI+E
r3XVqoQvRL2AQozqbgNzLRIF3gZBuln+QGe35XdZtybm69LS0c7aUIBHJYLVuFtV
LmqI+WNFBdIvzQMTRYKhCDQSvm/Pug3fQ5CXld6KUbYfseSeVrGJozIPgfHvIqhb
ADM3DzMj3+BNYlahP16bS0Jqp9t8y6WADYjPQ5BI7XQISXZONpBEtH0Mvhdyoc/c
AQup/DE7pbwH0kv4ahvuM5Q8z2dTlZ4agbs8WNR9Dx5J4PKFMK6iGyp7bVP7AgMB
AAGjggIpMIICJTAdBgNVHQ4EFgQURxJOujprBwkbY6/jx66UFHfNr5wwHwYDVR0j
BBgwFoAU6yx+YlA7BjTrSrU/iMBpUKx23NEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODNmNjg2NjEwODRiODYvMS9FQjJDN0U2MjUw
M0IwNjM0RUI0QUI1M0Y4OEMwNjk1MEFDNzZEQ0QxLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNnl4LVlsQTdCalRyU3JVX2lNQnBVS3gyM05FLmNlcjCBpgYIKwYB
BQUHAQsEgZkwgZYwgZMGCCsGAQUFBzALhoGGcnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzZjY4NjYxMDg0Yjg2
LzEvMzI2MTMwMzAzYTY0NjQzODMwM2EzNDMyM2EzYTJmMzQzODJkMzQzODIwM2Qz
ZTIwMzMzNjMyMzMzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoA3YAAQjANBgkqhkiG9w0BAQsFAAOC
AQEArutzHPuPDQB6YSg4dN01qmjrcsUlTvOk4C0+DtDc5GE0wHzC0H5L4xYxTUKa
mpt67bxGmdPf/bAQsnVewwuieO0QnusCPKOjqK5Q/LSgViCFktqOE/FJYQhWYFjV
0V/5Ei63tkVCRcznEFdHa5XxpC83UD5aJyxMghFgQJE+hD/D96rUFkxJ5IUpJoEO
t/zqiP7/qdhxDoOt99LtlJtKBpTu4HRl9EH5dlifsjQk11CmgQ4mfP7+AeQYzAAF
1csnyJCbHRhDMiZIb6FGLKzrKgHUKURGfC+fvbNUZJIiuul+Tx4UbMh+L5M2sot8
eS+6YvpbN7ZWqfN4wYgaidh3tw==
-----END CERTIFICATE-----
Generated at Thu Aug 7 04:34:34 2025 by rpki-client