Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/34352e3135392e39382e302f32342d3234203d3e203336323336.roa
File: 34352e3135392e39382e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier: w46KYMTO08cwNxhhB4/K+s+mvwVgA+rGLdwMBGjytw4=
Subject key identifier: 19:E5:CC:AF:24:65:3F:54:87:2C:FE:69:67:46:94:C0:88:EB:D9:DE
Certificate issuer: /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial: 2ADD7A3A5D6B90E7E7321EA0F7E9EB395C993883
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/34352e3135392e39382e302f32342d3234203d3e203336323336.roa
Signing time: Mon 04 Aug 2025 22:13:57 +0000
ROA not before: Mon 04 Aug 2025 22:08:57 +0000
ROA not after: Mon 03 Aug 2026 22:13:57 +0000
asID: 36236
IP address blocks: 45.159.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:dd:7a:3a:5d:6b:90:e7:e7:32:1e:a0:f7:e9:eb:39:5c:99:38:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Validity
Not Before: Aug 4 22:08:57 2025 GMT
Not After : Aug 3 22:13:57 2026 GMT
Subject: CN=19E5CCAF24653F54872CFE69674694C088EBD9DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d6:28:d7:f0:7c:8b:03:32:6c:2d:0b:f3:c1:
e4:fe:7f:41:41:59:d8:27:b4:6f:9d:96:8c:b3:69:
2f:9b:2e:83:6d:60:11:c2:31:7e:24:3f:3d:86:87:
91:7a:d9:28:c9:f8:0a:30:02:d7:3c:e6:69:04:1c:
39:4c:12:f2:26:e3:9e:cf:e5:0d:7f:d7:45:92:eb:
be:ba:09:4f:38:fe:a2:30:02:4d:82:8a:3d:48:e5:
09:07:35:6a:37:73:a6:24:2d:7d:36:52:aa:91:0a:
2e:a3:50:66:c1:8b:ee:a8:af:ca:fc:5c:c7:99:62:
82:36:05:58:4f:eb:a0:03:53:30:ee:9c:6a:c0:7d:
03:5f:a9:5b:0c:1a:38:d3:39:15:52:ce:d6:db:fb:
16:a2:fe:4a:c1:64:38:21:bd:51:16:b1:59:6a:47:
c8:0e:bc:b2:bf:15:a1:73:ae:ae:98:a1:85:bb:fc:
c2:56:3a:03:a7:b8:fa:05:d6:95:3c:11:2c:9b:7d:
ca:8a:cb:c8:5a:8c:ab:ed:f3:ae:df:85:ec:9e:14:
8e:89:66:b6:8d:44:50:8c:75:04:c4:e7:e7:0d:6c:
da:36:84:cd:b1:26:1d:28:08:a1:3a:19:eb:47:d5:
63:1c:01:d3:31:4d:83:d9:cb:23:21:9d:a1:f2:96:
66:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E5:CC:AF:24:65:3F:54:87:2C:FE:69:67:46:94:C0:88:EB:D9:DE
X509v3 Authority Key Identifier:
keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/34352e3135392e39382e302f32342d3234203d3e203336323336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.98.0/24
Signature Algorithm: sha256WithRSAEncryption
84:1f:cd:b3:ae:e0:23:af:62:95:a6:64:a5:e4:9c:a7:82:6d:
e8:43:b5:cc:9e:55:56:fd:0a:84:a4:71:78:d7:b1:4c:90:ea:
96:f3:bf:da:64:c2:b3:1d:f6:b9:93:70:46:97:6d:46:1c:5b:
41:4e:5e:47:d1:95:81:12:b8:27:86:d6:d1:19:2d:64:40:a9:
da:e8:f1:97:c6:d6:d6:cf:89:37:c2:61:88:3f:ff:b7:76:1d:
38:b3:0f:51:f0:9c:65:68:cb:37:1f:46:51:e7:fb:1a:09:d8:
df:de:f2:ba:d0:7d:48:c3:6c:0b:fe:58:97:b3:74:30:76:6f:
6d:e9:da:0f:c2:37:a7:01:19:b0:f9:b1:e3:e5:69:55:4d:4a:
a5:de:a0:96:ec:e6:79:c2:31:87:4c:c1:88:1d:08:50:04:5e:
11:5e:a5:5e:4c:ef:21:39:70:6a:7f:59:4e:81:e5:7d:c9:67:
c9:a8:1a:c0:06:85:7c:5b:59:1f:02:2c:e8:42:63:39:8d:26:
c5:e4:ff:bf:4d:c0:ea:cd:35:9c:ec:84:bd:3d:48:ca:12:5c:
4e:b0:37:bf:a6:fb:94:11:9e:3a:42:8e:9d:63:a3:7f:26:0b:
09:2b:c6:c6:6f:27:a3:1f:a2:64:ae:31:43:dd:ee:7c:2f:07:
58:69:66:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgIUKt16Ol1rkOfnMh6g9+nrOVyZOIMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZWIyYzdlNjI1MDNiMDYzNGViNGFiNTNmODhjMDY5NTBh
Yzc2ZGNkMTAeFw0yNTA4MDQyMjA4NTdaFw0yNjA4MDMyMjEzNTdaMDMxMTAvBgNV
BAMTKDE5RTVDQ0FGMjQ2NTNGNTQ4NzJDRkU2OTY3NDY5NEMwODhFQkQ5REUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA1ijX8HyLAzJsLQvzweT+f0FB
WdgntG+dloyzaS+bLoNtYBHCMX4kPz2Gh5F62SjJ+AowAtc85mkEHDlMEvIm457P
5Q1/10WS6766CU84/qIwAk2Cij1I5QkHNWo3c6YkLX02UqqRCi6jUGbBi+6or8r8
XMeZYoI2BVhP66ADUzDunGrAfQNfqVsMGjjTORVSztbb+xai/krBZDghvVEWsVlq
R8gOvLK/FaFzrq6YoYW7/MJWOgOnuPoF1pU8ESybfcqKy8hajKvt867fheyeFI6J
ZraNRFCMdQTE5+cNbNo2hM2xJh0oCKE6GetH1WMcAdMxTYPZyyMhnaHylmYTAgMB
AAGjggIgMIICHDAdBgNVHQ4EFgQUGeXMryRlP1SHLP5pZ0aUwIjr2d4wHwYDVR0j
BBgwFoAU6yx+YlA7BjTrSrU/iMBpUKx23NEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODNmNjg2NjEwODRiODYvMS9FQjJDN0U2MjUw
M0IwNjM0RUI0QUI1M0Y4OEMwNjk1MEFDNzZEQ0QxLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNnl4LVlsQTdCalRyU3JVX2lNQnBVS3gyM05FLmNlcjCBoAYIKwYB
BQUHAQsEgZMwgZAwgY0GCCsGAQUFBzALhoGAcnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzZjY4NjYxMDg0Yjg2
LzEvMzQzNTJlMzEzNTM5MmUzOTM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMz
NjMyMzMzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAC2fYjANBgkqhkiG9w0BAQsFAAOCAQEAhB/Ns67g
I69ilaZkpeScp4Jt6EO1zJ5VVv0KhKRxeNexTJDqlvO/2mTCsx32uZNwRpdtRhxb
QU5eR9GVgRK4J4bW0RktZECp2ujxl8bW1s+JN8JhiD//t3YdOLMPUfCcZWjLNx9G
Uef7GgnY397yutB9SMNsC/5Yl7N0MHZvbenaD8I3pwEZsPmx4+VpVU1Kpd6gluzm
ecIxh0zBiB0IUAReEV6lXkzvITlwan9ZToHlfclnyagawAaFfFtZHwIs6EJjOY0m
xeT/v03A6s01nOyEvT1IyhJcTrA3v6b7lBGeOkKOnWOjfyYLCSvGxm8nox+iZK4x
Q93ufC8HWGlm+Q==
-----END CERTIFICATE-----
Generated at Fri Aug 8 19:21:12 2025 by rpki-client