Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/8/326130363a34313a3a2f34302d3438203d3e20323133343731.roa
File: 326130363a34313a3a2f34302d3438203d3e20323133343731.roa (raw, json)
Hash identifier: zGw+27gWpN3i+BOpeywnju0oI0GKxlxJTmJ/f+OmUTY=
Subject key identifier: 0A:33:84:55:34:9B:18:C9:44:F9:F6:89:77:82:EB:81:65:98:A1:66
Certificate issuer: /CN=e3dcc9700181940fb31c01ea795ecfbc31492afa
Certificate serial: 7009B74E1C256AF0B7DF3CD6A1A383A857F46AA4
Authority key identifier: E3:DC:C9:70:01:81:94:0F:B3:1C:01:EA:79:5E:CF:BC:31:49:2A:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49zJcAGBlA-zHAHqeV7PvDFJKvo.cer
Subject info access: rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/8/326130363a34313a3a2f34302d3438203d3e20323133343731.roa
Signing time: Sat 17 May 2025 07:25:07 +0000
ROA not before: Sat 17 May 2025 07:20:07 +0000
ROA not after: Sat 16 May 2026 07:25:07 +0000
asID: 213471
IP address blocks: 2a06:41::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/8/E3DCC9700181940FB31C01EA795ECFBC31492AFA.crl
rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/8/E3DCC9700181940FB31C01EA795ECFBC31492AFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/49zJcAGBlA-zHAHqeV7PvDFJKvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 14:31:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:09:b7:4e:1c:25:6a:f0:b7:df:3c:d6:a1:a3:83:a8:57:f4:6a:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3dcc9700181940fb31c01ea795ecfbc31492afa
Validity
Not Before: May 17 07:20:07 2025 GMT
Not After : May 16 07:25:07 2026 GMT
Subject: CN=0A338455349B18C944F9F6897782EB816598A166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a5:64:56:98:7c:ec:09:2a:8f:55:93:cc:d9:
dd:ae:89:62:c1:03:c1:5a:89:20:72:c7:4c:02:af:
be:72:2e:d0:54:07:47:32:ff:12:47:ce:eb:44:63:
40:5d:8e:53:e2:d5:b4:1a:d0:8b:ea:fb:ef:5c:29:
e3:8e:2d:69:c3:b0:80:74:9b:c6:de:70:c9:d0:74:
68:3b:1b:8b:e3:c1:ac:bc:45:ed:bc:09:88:91:41:
f8:b8:c3:7b:a8:af:d3:2d:2b:be:a2:77:78:0b:74:
6d:6b:05:b5:ff:c6:12:b7:90:4e:c2:17:7f:4b:20:
9b:fb:19:90:05:81:f5:04:b9:51:c0:2b:31:19:41:
ac:c6:d8:12:a1:1d:ed:ae:a1:b9:96:a6:89:49:21:
2d:e1:7f:49:86:31:ba:e5:69:13:c5:32:38:b8:ab:
6e:e0:32:e4:f1:fb:a6:91:5c:7c:de:50:4b:93:af:
93:f1:8c:38:14:84:2b:d0:86:63:1e:ce:5f:77:be:
35:63:b8:db:85:4b:f6:80:67:a8:e9:41:4d:e2:3a:
5c:17:5b:87:e1:5c:4a:17:7d:82:ec:6c:46:7e:c9:
99:b6:ab:e5:6b:7e:b4:c8:7e:fe:b5:86:ca:62:30:
87:a5:e1:e0:b1:03:5e:2d:26:1d:17:a4:c3:09:2d:
87:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:33:84:55:34:9B:18:C9:44:F9:F6:89:77:82:EB:81:65:98:A1:66
X509v3 Authority Key Identifier:
keyid:E3:DC:C9:70:01:81:94:0F:B3:1C:01:EA:79:5E:CF:BC:31:49:2A:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/8/E3DCC9700181940FB31C01EA795ECFBC31492AFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49zJcAGBlA-zHAHqeV7PvDFJKvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/8/326130363a34313a3a2f34302d3438203d3e20323133343731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:41::/40
Signature Algorithm: sha256WithRSAEncryption
9b:52:b1:37:cf:8d:31:8c:ca:03:9b:1f:e2:5e:f8:ef:28:19:
e4:0b:e1:22:8e:34:69:65:79:84:96:3f:1e:0e:5b:c8:ba:22:
df:af:e2:fc:27:b5:1a:14:2a:8a:57:c4:2d:ce:dc:86:2b:f8:
6b:98:7b:a3:8a:97:be:73:4f:55:8c:10:6a:0b:cc:43:52:d9:
51:71:e2:98:e7:a8:7a:36:fe:2c:eb:cc:11:8e:ba:f7:9e:e1:
91:b8:49:37:89:b5:b2:cf:b9:7c:91:58:b4:b6:c2:93:82:fd:
3c:ee:e2:58:96:2e:74:11:5b:99:02:ae:7d:a8:7f:37:a3:3a:
6e:78:bc:fe:3e:19:d3:ff:fe:65:45:96:f7:47:7e:2d:fa:4a:
4e:56:32:43:60:ed:74:30:d1:66:79:87:6a:4c:39:15:c2:49:
48:90:df:6a:64:2a:02:6a:58:d8:25:57:23:1c:51:9c:dc:4f:
7a:15:df:78:b9:c3:52:73:79:2c:d2:a2:59:06:97:3a:73:c2:
3f:be:25:85:21:74:8c:72:fb:1a:9f:9f:66:51:ab:f7:15:e8:
1f:a0:e7:43:b1:09:3c:ca:40:2c:39:34:fa:07:f9:d9:29:27:
ce:52:54:bc:29:28:38:f1:fa:5b:6e:73:60:cc:f7:52:28:f6:
be:85:fb:d5
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgIUcAm3ThwlavC33zzWoaODqFf0aqQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZTNkY2M5NzAwMTgxOTQwZmIzMWMwMWVhNzk1ZWNmYmMz
MTQ5MmFmYTAeFw0yNTA1MTcwNzIwMDdaFw0yNjA1MTYwNzI1MDdaMDMxMTAvBgNV
BAMTKDBBMzM4NDU1MzQ5QjE4Qzk0NEY5RjY4OTc3ODJFQjgxNjU5OEExNjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhpWRWmHzsCSqPVZPM2d2uiWLB
A8FaiSByx0wCr75yLtBUB0cy/xJHzutEY0BdjlPi1bQa0Ivq++9cKeOOLWnDsIB0
m8becMnQdGg7G4vjway8Re28CYiRQfi4w3uor9MtK76id3gLdG1rBbX/xhK3kE7C
F39LIJv7GZAFgfUEuVHAKzEZQazG2BKhHe2uobmWpolJIS3hf0mGMbrlaRPFMji4
q27gMuTx+6aRXHzeUEuTr5PxjDgUhCvQhmMezl93vjVjuNuFS/aAZ6jpQU3iOlwX
W4fhXEoXfYLsbEZ+yZm2q+VrfrTIfv61hspiMIel4eCxA14tJh0XpMMJLYfNAgMB
AAGjggIfMIICGzAdBgNVHQ4EFgQUCjOEVTSbGMlE+faJd4LrgWWYoWYwHwYDVR0j
BBgwFoAU49zJcAGBlA+zHAHqeV7PvDFJKvowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvNmFiOTZlN2E2MTMwNDk4YWE5ODEzZDdlZTViYmVkMzEvOC9FM0RDQzk3MDAx
ODE5NDBGQjMxQzAxRUE3OTVFQ0ZCQzMxNDkyQUZBLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDl6SmNBR0JsQS16SEFIcWVWN1B2REZKS3ZvLmNlcjCBnQYIKwYB
BQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzovL3Jwa2ktcnBzLmFyaW4u
bmV0L3JlcG9zaXRvcnkvNmFiOTZlN2E2MTMwNDk4YWE5ODEzZDdlZTViYmVkMzEv
OC8zMjYxMzAzNjNhMzQzMTNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzEzMzM0
MzczMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB
/wQSMBAwDgQCAAIwCAMGACoGAEEAMA0GCSqGSIb3DQEBCwUAA4IBAQCbUrE3z40x
jMoDmx/iXvjvKBnkC+EijjRpZXmElj8eDlvIuiLfr+L8J7UaFCqKV8QtztyGK/hr
mHujipe+c09VjBBqC8xDUtlRceKY56h6Nv4s68wRjrr3nuGRuEk3ibWyz7l8kVi0
tsKTgv087uJYli50EVuZAq59qH83ozpueLz+PhnT//5lRZb3R34t+kpOVjJDYO10
MNFmeYdqTDkVwklIkN9qZCoCaljYJVcjHFGc3E96Fd94ucNSc3ks0qJZBpc6c8I/
viWFIXSMcvsan59mUav3FegfoOdDsQk8ykAsOTT6B/nZKSfOUlS8KSg48fpbbnNg
zPdSKPa+hfvV
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:16:35 2025 by rpki-client