Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e203630373433.roa
File: 326130373a353463303a666665653a3a2f34382d3438203d3e203630373433.roa (raw, json)
Hash identifier: 5BGotA0saITIe/3H61hfIHY0kn8or1h5bnZPaj2WKrQ=
Subject key identifier: 2A:7C:A4:2C:7E:C8:57:14:D9:12:F5:48:55:B9:09:B7:24:2B:E4:EC
Certificate issuer: /CN=88973C39A1ED43B10DFABD6EBCDB6B4810BED41D
Certificate serial: 0A9C21CB7C27FF72D6AC3B4533F405BCCE0ED10E
Authority key identifier: 88:97:3C:39:A1:ED:43:B1:0D:FA:BD:6E:BC:DB:6B:48:10:BE:D4:1D
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e203630373433.roa
Signing time: Fri 05 Jun 2026 10:01:10 +0000
ROA not before: Fri 05 Jun 2026 09:56:10 +0000
ROA not after: Fri 04 Jun 2027 10:01:10 +0000
asID: 60743
IP address blocks: 2a07:54c0:ffee::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:9c:21:cb:7c:27:ff:72:d6:ac:3b:45:33:f4:05:bc:ce:0e:d1:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88973C39A1ED43B10DFABD6EBCDB6B4810BED41D
Validity
Not Before: Jun 5 09:56:10 2026 GMT
Not After : Jun 4 10:01:10 2027 GMT
Subject: CN=2A7CA42C7EC85714D912F54855B909B7242BE4EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ca:d9:f9:c0:9b:29:34:29:38:3b:6f:69:98:
d9:36:ae:ce:05:5f:c2:50:ae:e8:b9:3f:0e:df:a1:
b5:99:de:fe:65:e3:cc:43:6d:41:83:91:44:2f:86:
21:18:0b:7f:31:22:3e:db:9a:f4:80:89:24:b2:ff:
73:4c:39:e5:c9:1c:c3:ce:b4:a2:66:3b:28:72:e7:
d0:5f:94:0c:96:a4:7f:d8:50:6f:67:80:f2:e8:42:
96:4e:4c:c2:cb:52:db:b8:d5:55:63:25:34:4a:7d:
8a:45:e1:ab:90:76:b2:98:3b:d1:00:d0:19:62:71:
e5:47:49:77:ea:9a:d7:d7:a5:67:1b:fc:2b:97:e0:
bd:44:d8:8b:cf:1e:7b:85:69:be:ea:25:cd:f9:3d:
4f:bf:da:2a:c9:b4:27:db:37:ec:b4:50:ba:90:24:
31:89:19:08:4a:3d:95:34:ce:78:97:ce:c4:9c:e8:
be:99:15:ee:2e:ea:bb:9c:3c:b5:d2:17:e2:e0:af:
5f:d1:84:70:4a:39:ad:29:f0:cc:4f:16:cd:03:05:
9b:90:40:a4:4b:4e:e7:82:84:da:29:e6:6e:98:82:
11:9e:76:86:e1:88:1a:3d:d6:ac:d7:1f:55:cf:8a:
23:a0:3f:8e:ec:e4:9c:a9:61:c8:0c:ce:0c:1c:fc:
7c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:7C:A4:2C:7E:C8:57:14:D9:12:F5:48:55:B9:09:B7:24:2B:E4:EC
X509v3 Authority Key Identifier:
keyid:88:97:3C:39:A1:ED:43:B1:0D:FA:BD:6E:BC:DB:6B:48:10:BE:D4:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e203630373433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c0:ffee::/48
Signature Algorithm: sha256WithRSAEncryption
7b:c4:a2:60:28:53:4b:13:0f:ae:5c:5f:d2:91:ed:52:c4:07:
5a:ca:61:3c:63:12:ad:49:b6:6c:6b:5a:d8:95:f2:dd:af:51:
8e:4d:37:90:d9:db:a3:5d:9b:9f:ae:f9:8f:ba:9e:2d:14:6d:
51:03:bc:4b:c7:88:37:17:c3:8b:74:b1:42:31:2f:66:ee:bf:
f6:b6:7c:50:c8:36:05:a0:78:d3:99:a0:08:82:fa:3e:1f:5b:
a1:d0:2a:94:12:71:a2:e3:a7:a5:7a:50:9e:f7:ee:07:4e:d8:
e1:16:21:0e:66:3f:2a:de:c0:fe:43:81:68:ad:35:8a:60:71:
ba:d3:82:bf:c3:ff:aa:c0:81:78:0d:18:59:c1:e2:ef:86:0d:
a8:3e:16:63:3d:61:1e:fb:f3:81:67:a3:12:5f:2c:d4:ef:47:
c5:dd:ac:05:92:ac:ae:ea:8c:83:d4:4c:90:0a:eb:af:f0:fd:
a0:20:19:d7:75:1c:39:28:3d:dd:db:c4:dc:20:b9:af:86:8f:
b9:f9:06:61:c1:b6:a5:88:45:18:4f:32:86:cf:f6:82:d4:d0:
2f:bd:8d:b4:bf:73:db:1c:bf:6d:e9:be:65:9d:51:c8:98:ff:
57:08:4e:32:67:55:bf:23:19:43:ae:f9:16:e4:60:3d:e8:ac:
b9:12:c1:54
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUCpwhy3wn/3LWrDtFM/QFvM4O0Q4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODg5NzNDMzlBMUVENDNCMTBERkFCRDZFQkNEQjZCNDgx
MEJFRDQxRDAeFw0yNjA2MDUwOTU2MTBaFw0yNzA2MDQxMDAxMTBaMDMxMTAvBgNV
BAMTKDJBN0NBNDJDN0VDODU3MTREOTEyRjU0ODU1QjkwOUI3MjQyQkU0RUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0ytn5wJspNCk4O29pmNk2rs4F
X8JQrui5Pw7fobWZ3v5l48xDbUGDkUQvhiEYC38xIj7bmvSAiSSy/3NMOeXJHMPO
tKJmOyhy59BflAyWpH/YUG9ngPLoQpZOTMLLUtu41VVjJTRKfYpF4auQdrKYO9EA
0BliceVHSXfqmtfXpWcb/CuX4L1E2IvPHnuFab7qJc35PU+/2irJtCfbN+y0ULqQ
JDGJGQhKPZU0zniXzsSc6L6ZFe4u6rucPLXSF+Lgr1/RhHBKOa0p8MxPFs0DBZuQ
QKRLTueChNop5m6YghGedobhiBo91qzXH1XPiiOgP47s5JypYcgMzgwc/Hz7AgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUKnykLH7IVxTZEvVIVbkJtyQr5OwwHwYDVR0j
BBgwFoAUiJc8OaHtQ7EN+r1uvNtrSBC+1B0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGU4OGUzOWJmYTAxODkwYzlmZWVjMTI0OWUvNS84ODk3M0MzOUEx
RUQ0M0IxMERGQUJENkVCQ0RCNkI0ODEwQkVENDFELmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWItNGRiNS1iYmQzLTVjY2E2MzNj
YWUzZi80Lzg4OTczQzM5QTFFRDQzQjEwREZBQkQ2RUJDREI2QjQ4MTBCRUQ0MUQu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4OGUzOWJmYTAxODkw
YzlmZWVjMTI0OWUvNS8zMjYxMzAzNzNhMzUzNDYzMzAzYTY2NjY2NTY1M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzYzMDM3MzQzMy5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoHVMD/7jAN
BgkqhkiG9w0BAQsFAAOCAQEAe8SiYChTSxMPrlxf0pHtUsQHWsphPGMSrUm2bGta
2JXy3a9Rjk03kNnbo12bn675j7qeLRRtUQO8S8eINxfDi3SxQjEvZu6/9rZ8UMg2
BaB405mgCIL6Ph9bodAqlBJxouOnpXpQnvfuB07Y4RYhDmY/Kt7A/kOBaK01imBx
utOCv8P/qsCBeA0YWcHi74YNqD4WYz1hHvvzgWejEl8s1O9Hxd2sBZKsruqMg9RM
kArrr/D9oCAZ13UcOSg93dvE3CC5r4aPufkGYcG2pYhFGE8yhs/2gtTQL72NtL9z
2xy/bem+ZZ1RyJj/VwhOMmdVvyMZQ675FuRgPeisuRLBVA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:22:01 2026 by rpki-client