Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS3320.roa
File: AS3320.roa (raw, json)
Hash identifier: cxDPxiB30eq2W+cNkJGm9BCfM/pqOAalfrUOWsQi0aU=
Subject key identifier: 13:21:AC:EB:5B:5E:F8:D8:2B:B1:3E:13:B3:0C:43:84:9D:BA:4E:B5
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 1DFFD3F2990734436D32CDD98DD6B3E0D0A9C807
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS3320.roa
Signing time: Thu 16 Apr 2026 19:03:07 +0000
ROA not before: Thu 16 Apr 2026 18:58:07 +0000
ROA not after: Thu 15 Apr 2027 19:03:07 +0000
asID: 3320
IP address blocks: 81.31.210.0/23 maxlen: 24
185.195.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:ff:d3:f2:99:07:34:43:6d:32:cd:d9:8d:d6:b3:e0:d0:a9:c8:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Apr 16 18:58:07 2026 GMT
Not After : Apr 15 19:03:07 2027 GMT
Subject: CN=1321ACEB5B5EF8D82BB13E13B30C43849DBA4EB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:11:d0:8a:a5:fb:2c:45:b9:ce:d2:13:4e:da:
b2:a7:2b:51:6b:27:c3:c5:bc:89:20:c6:4c:29:95:
15:cc:97:e9:74:6d:cd:02:68:00:67:a1:87:56:cf:
d7:08:80:86:ea:c8:61:09:39:da:57:20:2b:ba:9e:
2b:b0:03:10:a8:1d:9e:6b:d6:36:a9:a3:82:4b:60:
87:c8:13:89:92:6e:67:10:b0:5f:1b:69:dc:df:d7:
f5:4d:19:13:c8:0e:11:bd:72:b2:1b:79:8c:c0:1d:
0f:39:72:cf:a9:09:5a:8c:9e:3a:2a:27:06:10:c4:
79:82:8c:f2:05:bc:32:9a:f1:df:16:d8:df:82:f3:
0b:79:18:b9:73:af:2f:65:22:67:16:07:c1:63:42:
a4:60:fd:8b:34:f7:b8:21:c9:67:ab:13:f8:c5:59:
ce:e0:88:56:5e:0d:5b:ca:8c:0f:1d:97:2d:b7:cb:
64:bf:1c:8c:e6:08:15:3a:84:1e:18:56:53:12:9a:
bc:87:6f:ae:9f:09:ee:38:dd:4a:e0:eb:99:2e:36:
29:0d:7c:8a:1f:17:4f:1c:03:c2:09:e4:ec:ac:c5:
6a:20:f7:9e:08:2a:1d:ba:35:cf:22:26:97:71:f6:
63:bd:30:72:c2:4f:02:88:81:62:39:ce:5d:06:0a:
9b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:21:AC:EB:5B:5E:F8:D8:2B:B1:3E:13:B3:0C:43:84:9D:BA:4E:B5
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS3320.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.210.0/23
185.195.239.0/24
Signature Algorithm: sha256WithRSAEncryption
68:80:37:95:0c:db:6c:b6:93:cf:a1:91:1e:c3:73:33:ec:4e:
6f:07:bf:94:79:75:0e:8f:de:9a:4f:db:26:86:29:15:b7:99:
ea:ae:1b:ba:bc:81:55:20:1f:44:5e:73:96:51:17:32:74:62:
93:e7:39:31:43:b7:b3:b4:c1:c0:5f:05:42:09:bb:72:17:1a:
af:07:53:9b:5c:21:48:38:3a:cb:3c:14:be:be:00:49:5c:83:
5b:de:82:d8:f2:a7:11:c6:19:91:98:f6:0b:cf:75:75:3c:87:
7c:85:32:e5:23:5e:3a:90:0d:e0:a7:76:50:1c:56:86:12:27:
a5:ca:a8:25:4c:73:08:5a:1b:90:67:76:2f:a7:e7:58:3f:0b:
1d:75:9c:e7:55:9c:40:6e:5c:c3:b2:2f:84:55:e2:aa:87:da:
d7:38:eb:af:75:0e:ca:4a:8f:99:b9:b3:b6:a6:04:a0:78:27:
9e:11:68:69:38:8a:28:d0:2d:f1:db:f7:ff:e1:82:ed:53:4e:
98:44:ce:73:79:fe:c5:1c:02:18:73:0c:6d:52:b6:42:d1:21:
4a:b8:3e:00:e3:57:42:f0:06:63:80:7a:e5:5b:6d:87:c2:52:
c4:d0:36:dd:1b:8e:96:a0:03:99:fc:10:09:a8:09:8f:f6:64:
95:a6:5a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:17:18 2026 by rpki-client