Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e20323033363139.roa
File: 326130373a353463303a666665653a3a2f34382d3438203d3e20323033363139.roa (raw, json)
Hash identifier: RpX+SnW9OqE3RHHAXJHLCnucZdFtkrSA9+x0t5REzZs=
Subject key identifier: 20:BB:0B:7A:CA:1B:02:7A:9C:03:D9:21:F7:69:CA:C9:17:41:3D:3E
Certificate issuer: /CN=88973C39A1ED43B10DFABD6EBCDB6B4810BED41D
Certificate serial: 63BDB0B29A31375A5F8206ECDA0FBAAB7AC62497
Authority key identifier: 88:97:3C:39:A1:ED:43:B1:0D:FA:BD:6E:BC:DB:6B:48:10:BE:D4:1D
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e20323033363139.roa
Signing time: Fri 05 Jun 2026 10:01:09 +0000
ROA not before: Fri 05 Jun 2026 09:56:09 +0000
ROA not after: Fri 04 Jun 2027 10:01:09 +0000
asID: 203619
IP address blocks: 2a07:54c0:ffee::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:bd:b0:b2:9a:31:37:5a:5f:82:06:ec:da:0f:ba:ab:7a:c6:24:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88973C39A1ED43B10DFABD6EBCDB6B4810BED41D
Validity
Not Before: Jun 5 09:56:09 2026 GMT
Not After : Jun 4 10:01:09 2027 GMT
Subject: CN=20BB0B7ACA1B027A9C03D921F769CAC917413D3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c5:28:88:dc:b6:21:fd:52:ec:8d:51:a9:45:
1e:b1:da:17:ad:de:93:57:3e:0b:6b:06:be:dd:ca:
f4:04:38:ff:eb:ee:ad:6c:e7:ca:99:d3:6b:f5:e9:
1c:4c:4e:80:ed:17:fc:4c:92:91:f9:52:48:46:d8:
35:98:84:cb:6f:b3:a6:89:e8:38:54:76:82:ba:67:
dd:91:0b:17:cf:e1:40:41:ba:af:0e:7f:4b:6a:de:
98:d7:1f:d5:e5:a3:57:22:47:3c:0a:5a:fb:0d:44:
36:f9:12:56:1a:2f:1c:8a:a0:0a:0b:9a:4e:51:34:
dd:f7:ef:f2:1b:75:51:1f:e0:c8:9b:cd:b6:09:bb:
ff:2d:fc:46:f5:b7:c6:26:09:f8:95:cb:b8:a9:14:
2d:0c:de:bc:6f:75:40:be:ef:a5:a5:a1:46:38:04:
3d:f5:8e:b2:c9:04:4c:b6:24:fc:17:98:6d:3f:2e:
13:55:a2:72:de:df:81:75:cd:72:be:56:25:4e:1f:
46:b2:de:91:6c:58:b7:e7:01:07:c2:e2:70:e5:9a:
81:7b:11:87:cd:54:9a:23:c5:bf:2c:49:55:61:fb:
a1:c8:ba:44:cb:13:ea:35:13:df:08:bb:30:e3:a0:
8d:1f:1e:84:c1:31:52:f7:5c:bf:da:9b:fd:33:f3:
05:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:BB:0B:7A:CA:1B:02:7A:9C:03:D9:21:F7:69:CA:C9:17:41:3D:3E
X509v3 Authority Key Identifier:
keyid:88:97:3C:39:A1:ED:43:B1:0D:FA:BD:6E:BC:DB:6B:48:10:BE:D4:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e20323033363139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c0:ffee::/48
Signature Algorithm: sha256WithRSAEncryption
1c:76:90:10:79:c3:eb:df:33:f1:6c:e9:86:1b:1a:7a:54:97:
e2:67:69:fe:44:59:b4:94:66:95:63:52:5f:6e:59:14:ec:0f:
59:06:fa:cf:0b:85:05:7a:db:d0:98:e9:ab:fd:14:5c:fc:89:
ee:1f:5e:83:8c:ee:2f:fb:db:a0:d4:6d:31:59:62:14:ba:4e:
19:9f:27:25:62:15:0e:11:e5:eb:eb:6c:7a:d3:1b:16:0d:74:
84:59:89:24:57:3b:6a:82:18:c6:05:f5:15:bf:74:f5:91:24:
16:cf:36:a9:3e:67:13:6b:a0:1d:fc:54:f9:a6:5e:d0:1b:9c:
f2:a2:0c:d0:b4:f3:bb:ed:e6:ac:0e:86:44:c7:bb:3a:fc:7d:
27:7b:e0:68:eb:e5:af:5f:96:e7:67:d1:00:81:58:c4:40:99:
8f:6e:4e:a3:d2:9d:86:5c:45:a1:6b:da:af:1d:bf:ec:ab:44:
56:af:e8:42:dc:f0:55:d3:91:43:dc:6b:fa:59:21:c1:d6:29:
0e:f1:32:98:89:12:38:05:9e:bd:0f:ea:de:37:da:0c:99:3c:
c7:9f:4f:96:ba:84:7f:92:8d:f8:29:33:2a:fd:2a:a8:d2:2f:
95:ba:2c:b4:a4:2e:74:90:de:44:70:72:43:eb:85:35:e9:fd:
56:81:5e:99
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUY72wspoxN1pfggbs2g+6q3rGJJcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODg5NzNDMzlBMUVENDNCMTBERkFCRDZFQkNEQjZCNDgx
MEJFRDQxRDAeFw0yNjA2MDUwOTU2MDlaFw0yNzA2MDQxMDAxMDlaMDMxMTAvBgNV
BAMTKDIwQkIwQjdBQ0ExQjAyN0E5QzAzRDkyMUY3NjlDQUM5MTc0MTNEM0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrxSiI3LYh/VLsjVGpRR6x2het
3pNXPgtrBr7dyvQEOP/r7q1s58qZ02v16RxMToDtF/xMkpH5UkhG2DWYhMtvs6aJ
6DhUdoK6Z92RCxfP4UBBuq8Of0tq3pjXH9Xlo1ciRzwKWvsNRDb5ElYaLxyKoAoL
mk5RNN337/IbdVEf4MibzbYJu/8t/Eb1t8YmCfiVy7ipFC0M3rxvdUC+76WloUY4
BD31jrLJBEy2JPwXmG0/LhNVonLe34F1zXK+ViVOH0ay3pFsWLfnAQfC4nDlmoF7
EYfNVJojxb8sSVVh+6HIukTLE+o1E98IuzDjoI0fHoTBMVL3XL/am/0z8wW9AgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQUILsLesobAnqcA9kh92nKyRdBPT4wHwYDVR0j
BBgwFoAUiJc8OaHtQ7EN+r1uvNtrSBC+1B0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGU4OGUzOWJmYTAxODkwYzlmZWVjMTI0OWUvNS84ODk3M0MzOUEx
RUQ0M0IxMERGQUJENkVCQ0RCNkI0ODEwQkVENDFELmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWItNGRiNS1iYmQzLTVjY2E2MzNj
YWUzZi80Lzg4OTczQzM5QTFFRDQzQjEwREZBQkQ2RUJDREI2QjQ4MTBCRUQ0MUQu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4OGUzOWJmYTAxODkw
YzlmZWVjMTI0OWUvNS8zMjYxMzAzNzNhMzUzNDYzMzAzYTY2NjY2NTY1M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzIzMDMzMzYzMTM5LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdUwP/u
MA0GCSqGSIb3DQEBCwUAA4IBAQAcdpAQecPr3zPxbOmGGxp6VJfiZ2n+RFm0lGaV
Y1JfblkU7A9ZBvrPC4UFetvQmOmr/RRc/InuH16DjO4v+9ug1G0xWWIUuk4Znycl
YhUOEeXr62x60xsWDXSEWYkkVztqghjGBfUVv3T1kSQWzzapPmcTa6Ad/FT5pl7Q
G5zyogzQtPO77easDoZEx7s6/H0ne+Bo6+WvX5bnZ9EAgVjEQJmPbk6j0p2GXEWh
a9qvHb/sq0RWr+hC3PBV05FD3Gv6WSHB1ikO8TKYiRI4BZ69D+reN9oMmTzHn0+W
uoR/ko34KTMq/Sqo0i+Vuiy0pC50kN5EcHJD64U16f1WgV6Z
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:41:06 2026 by rpki-client