Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/8/326130363a34313a383030303a3a2f34302d3438203d3e20323133363034.roa
File: 326130363a34313a383030303a3a2f34302d3438203d3e20323133363034.roa (raw, json)
Hash identifier: IhJhFE18LKNheXNHYseDMWBZPF2yzqYAsMBxTsmvNxk=
Subject key identifier: EB:2C:88:89:29:4F:DD:54:D9:D7:AD:A6:8F:53:EB:7A:54:04:00:AB
Certificate issuer: /CN=e3dcc9700181940fb31c01ea795ecfbc31492afa
Certificate serial: 7DAD45110A43EB05925F8865B40902BCD014EEBC
Authority key identifier: E3:DC:C9:70:01:81:94:0F:B3:1C:01:EA:79:5E:CF:BC:31:49:2A:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49zJcAGBlA-zHAHqeV7PvDFJKvo.cer
Subject info access: rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/8/326130363a34313a383030303a3a2f34302d3438203d3e20323133363034.roa
Signing time: Sat 17 May 2025 07:25:16 +0000
ROA not before: Sat 17 May 2025 07:20:16 +0000
ROA not after: Sat 16 May 2026 07:25:16 +0000
asID: 213604
IP address blocks: 2a06:41:8000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/8/E3DCC9700181940FB31C01EA795ECFBC31492AFA.crl
rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/8/E3DCC9700181940FB31C01EA795ECFBC31492AFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/49zJcAGBlA-zHAHqeV7PvDFJKvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:ad:45:11:0a:43:eb:05:92:5f:88:65:b4:09:02:bc:d0:14:ee:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3dcc9700181940fb31c01ea795ecfbc31492afa
Validity
Not Before: May 17 07:20:16 2025 GMT
Not After : May 16 07:25:16 2026 GMT
Subject: CN=EB2C8889294FDD54D9D7ADA68F53EB7A540400AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:af:91:c8:4f:1f:c9:0c:8b:64:27:c6:ce:06:
50:6f:91:71:06:43:60:0f:0f:ef:d4:30:85:fb:40:
5f:86:98:11:d4:d8:38:6c:b4:93:b3:2e:07:bc:e3:
3f:0b:f7:48:39:ec:86:71:93:4e:63:f6:ba:a2:d8:
cf:a4:1c:bd:61:22:2e:ca:63:f6:c7:c8:00:fd:94:
70:e9:64:e5:d5:ed:86:ec:74:9f:8a:ef:0c:7d:b2:
0a:23:21:d9:05:fb:7e:4e:fb:ca:99:79:df:30:ef:
85:b3:d2:a4:8e:e9:37:17:c7:2d:0c:70:91:c5:d8:
29:ee:f6:7b:d3:dd:33:09:d7:2b:2c:d8:6a:72:45:
87:fa:ab:e5:98:49:96:94:5b:58:60:35:b0:70:69:
ae:df:e9:4b:7b:35:fb:23:71:ac:50:35:0d:07:0e:
35:8d:93:fc:2e:ef:7e:5e:42:ab:38:cb:09:9c:2f:
94:f6:10:33:7d:b7:26:9f:ee:01:14:06:4d:51:04:
a9:af:14:7d:31:43:70:2c:70:f4:a6:21:23:e4:16:
13:7d:b2:15:e3:59:c5:0f:2a:d2:86:0d:59:a0:44:
e3:de:37:a4:8c:4a:4d:74:6d:e6:d6:b3:ab:84:f3:
10:e0:a1:d2:19:02:e5:84:91:be:b9:e5:32:0e:bb:
d4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:2C:88:89:29:4F:DD:54:D9:D7:AD:A6:8F:53:EB:7A:54:04:00:AB
X509v3 Authority Key Identifier:
keyid:E3:DC:C9:70:01:81:94:0F:B3:1C:01:EA:79:5E:CF:BC:31:49:2A:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/8/E3DCC9700181940FB31C01EA795ECFBC31492AFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49zJcAGBlA-zHAHqeV7PvDFJKvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/8/326130363a34313a383030303a3a2f34302d3438203d3e20323133363034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:41:8000::/40
Signature Algorithm: sha256WithRSAEncryption
39:cb:36:12:61:d1:79:70:58:64:dc:35:2b:f6:5d:aa:0d:1b:
71:71:b9:bd:e3:ae:6d:04:10:cf:8b:07:35:d6:e1:6b:ed:fa:
b0:b6:5b:2b:d5:f3:22:6d:fb:ab:4c:36:dd:21:a6:e7:c8:7b:
6a:6a:9d:8f:53:a0:40:72:79:d8:91:b3:45:b3:3a:1d:c5:69:
a4:98:71:95:74:54:1e:e4:8e:38:f2:0c:93:c8:d8:48:61:48:
cc:24:3f:ce:cf:8c:6f:70:f0:0d:ad:28:37:23:9e:55:e3:55:
03:7f:21:15:c5:a0:5d:9f:58:b4:ee:2f:91:83:3b:a5:81:e3:
f8:4d:8a:85:08:0d:11:9d:53:ee:5d:ad:68:2e:11:42:22:f6:
13:a2:17:05:b2:89:85:eb:21:74:1d:f9:c6:b0:70:c6:9f:aa:
2c:1f:a6:19:a7:d9:97:39:e2:e5:94:34:2c:18:48:2c:a0:9c:
3a:5d:58:2a:5e:4c:88:c4:92:13:b4:41:99:11:8f:d5:7e:3e:
44:3b:12:72:57:f1:c1:bd:14:bc:23:e0:a7:3b:5e:e1:13:00:
f7:78:fa:86:a1:50:23:3a:23:68:ba:86:6e:5e:e2:5f:68:88:
d2:ae:29:77:3b:9b:df:d5:cd:03:84:a6:9c:b8:53:2d:f9:0d:
6b:49:21:35
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgIUfa1FEQpD6wWSX4hltAkCvNAU7rwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZTNkY2M5NzAwMTgxOTQwZmIzMWMwMWVhNzk1ZWNmYmMz
MTQ5MmFmYTAeFw0yNTA1MTcwNzIwMTZaFw0yNjA1MTYwNzI1MTZaMDMxMTAvBgNV
BAMTKEVCMkM4ODg5Mjk0RkRENTREOUQ3QURBNjhGNTNFQjdBNTQwNDAwQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUr5HITx/JDItkJ8bOBlBvkXEG
Q2APD+/UMIX7QF+GmBHU2DhstJOzLge84z8L90g57IZxk05j9rqi2M+kHL1hIi7K
Y/bHyAD9lHDpZOXV7YbsdJ+K7wx9sgojIdkF+35O+8qZed8w74Wz0qSO6TcXxy0M
cJHF2Cnu9nvT3TMJ1yss2GpyRYf6q+WYSZaUW1hgNbBwaa7f6Ut7NfsjcaxQNQ0H
DjWNk/wu735eQqs4ywmcL5T2EDN9tyaf7gEUBk1RBKmvFH0xQ3AscPSmISPkFhN9
shXjWcUPKtKGDVmgROPeN6SMSk10bebWs6uE8xDgodIZAuWEkb655TIOu9RhAgMB
AAGjggIqMIICJjAdBgNVHQ4EFgQU6yyIiSlP3VTZ162mj1PrelQEAKswHwYDVR0j
BBgwFoAU49zJcAGBlA+zHAHqeV7PvDFJKvowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvNmFiOTZlN2E2MTMwNDk4YWE5ODEzZDdlZTViYmVkMzEvOC9FM0RDQzk3MDAx
ODE5NDBGQjMxQzAxRUE3OTVFQ0ZCQzMxNDkyQUZBLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDl6SmNBR0JsQS16SEFIcWVWN1B2REZKS3ZvLmNlcjCBqAYIKwYB
BQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzZhYjk2ZTdhNjEzMDQ5OGFhOTgxM2Q3ZWU1YmJlZDMx
LzgvMzI2MTMwMzYzYTM0MzEzYTM4MzAzMDMwM2EzYTJmMzQzMDJkMzQzODIwM2Qz
ZTIwMzIzMTMzMzYzMDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEG
CCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgYAQYAwDQYJKoZIhvcNAQELBQAD
ggEBADnLNhJh0XlwWGTcNSv2XaoNG3Fxub3jrm0EEM+LBzXW4Wvt+rC2WyvV8yJt
+6tMNt0hpufIe2pqnY9ToEByediRs0WzOh3FaaSYcZV0VB7kjjjyDJPI2EhhSMwk
P87PjG9w8A2tKDcjnlXjVQN/IRXFoF2fWLTuL5GDO6WB4/hNioUIDRGdU+5drWgu
EUIi9hOiFwWyiYXrIXQd+cawcMafqiwfphmn2Zc54uWUNCwYSCygnDpdWCpeTIjE
khO0QZkRj9V+PkQ7EnJX8cG9FLwj4Kc7XuETAPd4+oahUCM6I2i6hm5e4l9oiNKu
KXc7m9/VzQOEppy4Uy35DWtJITU=
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:31:19 2025 by rpki-client