Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/8/326130363a34313a343030303a3a2f34302d3438203d3e20313532313834.roa
File: 326130363a34313a343030303a3a2f34302d3438203d3e20313532313834.roa (raw, json)
Hash identifier: iUQrYne5XZsyxeJjuJ/PguKksYYeR1AM8lolyzrUIv4=
Subject key identifier: 2F:EB:8C:7B:6E:49:19:FD:BC:50:CF:90:51:1B:75:05:8E:42:B0:A7
Certificate issuer: /CN=e3dcc9700181940fb31c01ea795ecfbc31492afa
Certificate serial: 3700DB71AF22C345534E2414B92E453ABAE93F4B
Authority key identifier: E3:DC:C9:70:01:81:94:0F:B3:1C:01:EA:79:5E:CF:BC:31:49:2A:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49zJcAGBlA-zHAHqeV7PvDFJKvo.cer
Subject info access: rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/8/326130363a34313a343030303a3a2f34302d3438203d3e20313532313834.roa
Signing time: Fri 04 Jul 2025 04:42:23 +0000
ROA not before: Fri 04 Jul 2025 04:37:23 +0000
ROA not after: Fri 03 Jul 2026 04:42:23 +0000
asID: 152184
IP address blocks: 2a06:41:4000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/8/E3DCC9700181940FB31C01EA795ECFBC31492AFA.crl
rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/8/E3DCC9700181940FB31C01EA795ECFBC31492AFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/49zJcAGBlA-zHAHqeV7PvDFJKvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:00:db:71:af:22:c3:45:53:4e:24:14:b9:2e:45:3a:ba:e9:3f:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3dcc9700181940fb31c01ea795ecfbc31492afa
Validity
Not Before: Jul 4 04:37:23 2025 GMT
Not After : Jul 3 04:42:23 2026 GMT
Subject: CN=2FEB8C7B6E4919FDBC50CF90511B75058E42B0A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5e:32:73:05:4e:12:df:3e:61:49:ee:28:60:
99:11:f8:91:1d:31:17:66:60:f1:d1:f3:0e:e7:5d:
e7:ec:33:a3:b0:ae:76:56:92:d6:d1:90:d7:e2:7b:
cd:c3:40:19:96:6b:f7:9e:7c:38:40:c4:d3:a1:79:
3b:d6:08:b4:94:b8:37:af:90:18:e8:c3:af:ed:38:
ed:36:09:39:4c:cc:15:3b:50:67:02:b0:90:86:93:
0d:ef:26:3c:b4:b9:e5:d7:73:e8:e4:95:b0:c0:96:
c7:1c:c6:6f:7c:62:46:ed:ff:8f:29:1d:93:d2:7a:
6e:f4:cb:7a:48:db:86:a7:f2:0c:7d:4c:73:5d:37:
ce:c7:40:0a:58:77:24:a9:40:cb:66:d0:38:c2:71:
19:aa:93:d4:56:70:cd:f5:2f:9d:d7:79:11:33:b9:
66:d4:ce:97:cb:67:17:07:f7:22:02:d5:29:bc:cd:
44:5b:81:d0:ba:bd:c2:bd:78:d5:b2:20:f2:01:40:
60:a2:a6:30:d2:83:28:12:f9:3d:fe:e4:98:77:05:
e3:69:94:14:8a:61:4b:42:62:a4:d0:fc:41:b5:d3:
ec:85:81:c8:c4:48:4c:96:db:dd:6e:ee:21:c5:0d:
d0:b2:6d:57:15:cc:6d:37:1f:cb:64:56:87:6e:24:
04:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:EB:8C:7B:6E:49:19:FD:BC:50:CF:90:51:1B:75:05:8E:42:B0:A7
X509v3 Authority Key Identifier:
keyid:E3:DC:C9:70:01:81:94:0F:B3:1C:01:EA:79:5E:CF:BC:31:49:2A:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/8/E3DCC9700181940FB31C01EA795ECFBC31492AFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49zJcAGBlA-zHAHqeV7PvDFJKvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/8/326130363a34313a343030303a3a2f34302d3438203d3e20313532313834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:41:4000::/40
Signature Algorithm: sha256WithRSAEncryption
55:a6:6b:32:e4:06:aa:46:24:da:5e:7c:be:84:5a:0f:39:c9:
06:c2:28:41:dc:71:df:44:f8:30:c2:f2:f8:25:a3:eb:b0:29:
fd:b6:36:92:24:1f:1d:6c:48:10:e2:43:3a:6a:6a:89:bf:ba:
b0:47:d1:db:e9:ec:5e:4c:bd:1a:4e:5a:26:51:60:01:92:00:
a5:55:e8:d2:ba:fd:71:13:de:8a:48:ae:d6:c0:7d:86:de:a1:
31:c3:19:a2:96:89:65:c4:81:0f:cb:1a:b6:b7:6c:96:9c:e8:
22:27:fe:7b:34:a7:ed:95:d4:5b:4d:9a:99:50:85:e0:4a:fc:
48:dc:63:80:58:25:40:be:37:67:0c:b4:f1:ad:b6:60:9e:d0:
2a:bb:76:d1:ce:b7:54:d3:f5:f9:d6:e4:70:41:bc:10:95:f7:
be:d6:e7:e5:e6:4c:4e:4e:71:2f:8d:53:7e:3c:d4:34:b8:77:
b8:59:9e:f0:dd:7f:c4:ae:d4:78:65:cb:87:b1:79:0c:dc:97:
68:73:1f:0d:23:1a:ec:99:4a:ea:8e:6a:cf:9b:4a:20:a8:71:
b2:2f:65:0a:cd:62:71:4a:4b:4b:f9:62:69:68:59:cb:0b:83:
65:6c:d8:54:f1:e2:c4:97:8c:56:f3:09:71:cc:0b:93:73:7d:
19:12:a9:67
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgIUNwDbca8iw0VTTiQUuS5FOrrpP0swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZTNkY2M5NzAwMTgxOTQwZmIzMWMwMWVhNzk1ZWNmYmMz
MTQ5MmFmYTAeFw0yNTA3MDQwNDM3MjNaFw0yNjA3MDMwNDQyMjNaMDMxMTAvBgNV
BAMTKDJGRUI4QzdCNkU0OTE5RkRCQzUwQ0Y5MDUxMUI3NTA1OEU0MkIwQTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJXjJzBU4S3z5hSe4oYJkR+JEd
MRdmYPHR8w7nXefsM6OwrnZWktbRkNfie83DQBmWa/eefDhAxNOheTvWCLSUuDev
kBjow6/tOO02CTlMzBU7UGcCsJCGkw3vJjy0ueXXc+jklbDAlsccxm98Ykbt/48p
HZPSem70y3pI24an8gx9THNdN87HQApYdySpQMtm0DjCcRmqk9RWcM31L53XeREz
uWbUzpfLZxcH9yIC1Sm8zURbgdC6vcK9eNWyIPIBQGCipjDSgygS+T3+5Jh3BeNp
lBSKYUtCYqTQ/EG10+yFgcjESEyW291u7iHFDdCybVcVzG03H8tkVoduJAR5AgMB
AAGjggIqMIICJjAdBgNVHQ4EFgQUL+uMe25JGf28UM+QURt1BY5CsKcwHwYDVR0j
BBgwFoAU49zJcAGBlA+zHAHqeV7PvDFJKvowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvNmFiOTZlN2E2MTMwNDk4YWE5ODEzZDdlZTViYmVkMzEvOC9FM0RDQzk3MDAx
ODE5NDBGQjMxQzAxRUE3OTVFQ0ZCQzMxNDkyQUZBLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDl6SmNBR0JsQS16SEFIcWVWN1B2REZKS3ZvLmNlcjCBqAYIKwYB
BQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzZhYjk2ZTdhNjEzMDQ5OGFhOTgxM2Q3ZWU1YmJlZDMx
LzgvMzI2MTMwMzYzYTM0MzEzYTM0MzAzMDMwM2EzYTJmMzQzMDJkMzQzODIwM2Qz
ZTIwMzEzNTMyMzEzODM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEG
CCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgYAQUAwDQYJKoZIhvcNAQELBQAD
ggEBAFWmazLkBqpGJNpefL6EWg85yQbCKEHccd9E+DDC8vglo+uwKf22NpIkHx1s
SBDiQzpqaom/urBH0dvp7F5MvRpOWiZRYAGSAKVV6NK6/XET3opIrtbAfYbeoTHD
GaKWiWXEgQ/LGra3bJac6CIn/ns0p+2V1FtNmplQheBK/EjcY4BYJUC+N2cMtPGt
tmCe0Cq7dtHOt1TT9fnW5HBBvBCV977W5+XmTE5OcS+NU3481DS4d7hZnvDdf8Su
1Hhly4exeQzcl2hzHw0jGuyZSuqOas+bSiCocbIvZQrNYnFKS0v5YmloWcsLg2Vs
2FTx4sSXjFbzCXHMC5NzfRkSqWc=
-----END CERTIFICATE-----
Generated at Sun Jul 20 09:55:49 2025 by rpki-client