Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/34352e3135392e39372e302f32342d3234203d3e203336323336.roa
File: 34352e3135392e39372e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier: vtS00v0EqkVwz9IyEhLaQMzjP1OptNpclSc0Z+LBbOo=
Subject key identifier: E6:4D:9C:B0:19:7F:F5:41:6B:83:D2:2D:4C:11:E0:F0:39:8E:FD:F3
Certificate issuer: /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial: 39C71DFEDEC4A5B5FC5E03BCDDE8EA1CEE0F4AD1
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/34352e3135392e39372e302f32342d3234203d3e203336323336.roa
Signing time: Mon 04 Aug 2025 22:13:58 +0000
ROA not before: Mon 04 Aug 2025 22:08:58 +0000
ROA not after: Mon 03 Aug 2026 22:13:58 +0000
asID: 36236
IP address blocks: 45.159.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 12:42:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:c7:1d:fe:de:c4:a5:b5:fc:5e:03:bc:dd:e8:ea:1c:ee:0f:4a:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Validity
Not Before: Aug 4 22:08:58 2025 GMT
Not After : Aug 3 22:13:58 2026 GMT
Subject: CN=E64D9CB0197FF5416B83D22D4C11E0F0398EFDF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d8:01:8b:d4:07:11:88:7b:79:64:aa:60:d4:
45:e4:8c:ff:9b:8a:d7:c0:61:86:2e:09:e1:95:80:
ff:a4:cb:38:a0:0b:92:3e:d2:ab:6e:d0:4d:18:82:
a7:fd:8a:b4:e0:d2:74:3b:11:06:15:64:0c:c2:44:
03:6f:61:4c:6b:b0:0e:ce:b2:30:1e:be:6b:e5:c1:
4a:1c:cf:86:f5:97:17:c5:88:33:dd:35:e6:ae:ed:
9c:5a:d6:73:b1:28:4a:21:16:e6:71:7f:e8:91:cd:
ca:90:50:1b:ce:73:7c:d5:8c:d5:34:fc:b1:e5:ce:
df:2f:53:bd:65:de:f5:fe:52:b3:9c:80:07:ac:2e:
72:80:44:0c:a9:39:4a:8d:00:a0:74:a6:42:cb:84:
80:80:38:c1:a8:fa:22:a7:67:c7:db:77:28:3c:c3:
20:6c:a8:5c:fa:3e:78:81:b8:34:f6:11:10:0d:fa:
72:6d:f4:13:75:a5:06:f2:69:47:72:b7:bb:f4:c9:
22:94:c0:29:a7:8a:f9:ce:de:ce:0b:91:ae:e4:01:
9a:2c:d5:c2:ed:2c:37:5f:96:c9:11:01:fd:8a:11:
6b:1a:37:ce:79:7c:27:8f:85:3d:ef:72:9b:8f:96:
4c:f7:60:fa:e2:70:86:ee:5d:e4:d6:ce:83:82:32:
b7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:4D:9C:B0:19:7F:F5:41:6B:83:D2:2D:4C:11:E0:F0:39:8E:FD:F3
X509v3 Authority Key Identifier:
keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/34352e3135392e39372e302f32342d3234203d3e203336323336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.97.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:ee:ed:fa:7b:5c:d9:64:d6:48:0a:24:7a:e2:2f:f8:78:da:
f3:a5:f0:e3:93:ec:8b:b4:ed:f2:4a:9a:3d:b6:ac:33:1b:fa:
96:0e:f6:51:86:08:53:53:6b:9e:42:c5:95:18:07:85:d8:3b:
dc:f4:d3:2b:de:50:c4:9f:35:5f:86:6e:34:21:ca:bb:95:de:
dc:62:81:e6:a3:e7:34:b1:0c:90:f8:1b:5d:f8:f0:7c:3e:42:
c8:6e:2d:a5:fb:61:9d:b9:d6:77:08:eb:42:1e:fe:27:ff:c9:
6a:70:ab:77:0f:22:7c:f6:39:6a:80:d8:18:cf:08:ed:eb:bc:
b3:5a:57:b0:ab:9f:40:ae:cf:f9:0a:59:da:d8:45:1f:7f:00:
ff:28:d8:b6:4e:44:17:4b:d1:03:7e:8a:f4:ae:16:b6:ba:35:
3d:aa:e4:71:6e:e6:a2:dd:27:c3:80:6c:4c:ed:7e:a4:00:90:
4c:fd:69:02:84:ab:a4:80:05:0d:76:d4:47:35:01:58:03:fe:
f6:0c:40:86:d6:8c:31:cb:51:61:cd:df:03:9e:f4:d9:d8:9e:
51:e8:1f:75:ef:11:be:73:20:76:71:e3:79:cd:5a:23:d8:2f:
18:16:e0:f3:82:78:30:b2:80:7c:06:26:36:6a:c3:65:1b:e2:
ed:2c:c4:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgIUOccd/t7EpbX8XgO83ejqHO4PStEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZWIyYzdlNjI1MDNiMDYzNGViNGFiNTNmODhjMDY5NTBh
Yzc2ZGNkMTAeFw0yNTA4MDQyMjA4NThaFw0yNjA4MDMyMjEzNThaMDMxMTAvBgNV
BAMTKEU2NEQ5Q0IwMTk3RkY1NDE2QjgzRDIyRDRDMTFFMEYwMzk4RUZERjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi2AGL1AcRiHt5ZKpg1EXkjP+b
itfAYYYuCeGVgP+kyzigC5I+0qtu0E0Ygqf9irTg0nQ7EQYVZAzCRANvYUxrsA7O
sjAevmvlwUocz4b1lxfFiDPdNeau7Zxa1nOxKEohFuZxf+iRzcqQUBvOc3zVjNU0
/LHlzt8vU71l3vX+UrOcgAesLnKARAypOUqNAKB0pkLLhICAOMGo+iKnZ8fbdyg8
wyBsqFz6PniBuDT2ERAN+nJt9BN1pQbyaUdyt7v0ySKUwCmnivnO3s4Lka7kAZos
1cLtLDdflskRAf2KEWsaN855fCePhT3vcpuPlkz3YPricIbuXeTWzoOCMrdhAgMB
AAGjggIgMIICHDAdBgNVHQ4EFgQU5k2csBl/9UFrg9ItTBHg8DmO/fMwHwYDVR0j
BBgwFoAU6yx+YlA7BjTrSrU/iMBpUKx23NEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODNmNjg2NjEwODRiODYvMS9FQjJDN0U2MjUw
M0IwNjM0RUI0QUI1M0Y4OEMwNjk1MEFDNzZEQ0QxLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNnl4LVlsQTdCalRyU3JVX2lNQnBVS3gyM05FLmNlcjCBoAYIKwYB
BQUHAQsEgZMwgZAwgY0GCCsGAQUFBzALhoGAcnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzZjY4NjYxMDg0Yjg2
LzEvMzQzNTJlMzEzNTM5MmUzOTM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMz
NjMyMzMzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAC2fYTANBgkqhkiG9w0BAQsFAAOCAQEAou7t+ntc
2WTWSAokeuIv+Hja86Xw45Psi7Tt8kqaPbasMxv6lg72UYYIU1NrnkLFlRgHhdg7
3PTTK95QxJ81X4ZuNCHKu5Xe3GKB5qPnNLEMkPgbXfjwfD5CyG4tpfthnbnWdwjr
Qh7+J//JanCrdw8ifPY5aoDYGM8I7eu8s1pXsKufQK7P+QpZ2thFH38A/yjYtk5E
F0vRA36K9K4Wtro1ParkcW7mot0nw4BsTO1+pACQTP1pAoSrpIAFDXbURzUBWAP+
9gxAhtaMMctRYc3fA5702dieUegfde8RvnMgdnHjec1aI9gvGBbg84J4MLKAfAYm
NmrDZRvi7SzETw==
-----END CERTIFICATE-----
Generated at Thu Aug 7 04:42:46 2025 by rpki-client