Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/326130343a646338303a3a2f32392d3438203d3e20313937353337.roa
File: 326130343a646338303a3a2f32392d3438203d3e20313937353337.roa (raw, json)
Hash identifier: ArUfILTVdPV/xNgrUMZFDYhaVkRFzlTnphTzuDha7tw=
Subject key identifier: 65:BF:F7:C4:2F:2C:53:7E:64:73:64:32:C0:2F:22:39:C8:A9:0D:33
Certificate issuer: /CN=c1dc25c780e7a24817139d980a28a9781fa6a493
Certificate serial: 5A804FD957E08A7A6E7C5F0A9EA8718970C59D7D
Authority key identifier: C1:DC:25:C7:80:E7:A2:48:17:13:9D:98:0A:28:A9:78:1F:A6:A4:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdwlx4DnokgXE52YCiipeB-mpJM.cer
Subject info access: rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/326130343a646338303a3a2f32392d3438203d3e20313937353337.roa
Signing time: Tue 16 Jun 2026 10:17:38 +0000
ROA not before: Tue 16 Jun 2026 10:12:38 +0000
ROA not after: Tue 15 Jun 2027 10:17:38 +0000
asID: 197537
IP address blocks: 2a04:dc80::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.crl
rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.mft
rsync://rpki.ripe.net/repository/DEFAULT/wdwlx4DnokgXE52YCiipeB-mpJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 07:53:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:80:4f:d9:57:e0:8a:7a:6e:7c:5f:0a:9e:a8:71:89:70:c5:9d:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1dc25c780e7a24817139d980a28a9781fa6a493
Validity
Not Before: Jun 16 10:12:38 2026 GMT
Not After : Jun 15 10:17:38 2027 GMT
Subject: CN=65BFF7C42F2C537E64736432C02F2239C8A90D33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ea:b7:cb:61:58:eb:74:fe:f3:de:a1:44:7d:
97:d1:03:01:40:fd:6a:c6:b6:78:aa:f3:da:ae:1d:
9e:c1:a4:95:05:50:e6:19:9b:03:1b:52:21:a5:16:
47:bb:1c:44:39:aa:b8:5d:dc:49:ba:fd:f3:4b:01:
e0:f0:f0:35:3f:1b:ee:8b:52:43:13:ed:1b:52:86:
be:29:85:63:49:6d:6e:2e:a8:87:d5:ae:05:d7:b8:
5c:8b:47:be:31:08:26:af:67:17:6a:42:cc:4b:59:
8e:e3:3d:6d:5a:4d:2d:77:94:b0:74:5c:24:8c:18:
5f:de:e6:54:a8:cd:fb:dc:26:89:bb:cc:72:de:6a:
d8:35:e1:32:27:2b:ca:48:1c:85:73:4a:7a:91:5b:
ba:6d:80:f0:c0:8b:e3:d3:5f:92:6d:49:aa:d4:d3:
2c:20:eb:2c:17:78:f8:99:20:77:0d:8d:79:7f:37:
82:d2:aa:1f:ae:17:b6:80:51:7d:ad:b9:05:f1:b2:
2e:e0:c4:a8:5b:df:f0:18:6c:71:8b:15:e8:ba:16:
cd:96:fa:d6:2e:95:21:22:d8:fd:d3:5e:82:20:f5:
ae:3c:78:6a:f3:5a:7d:4f:1a:3e:aa:51:f4:6b:ba:
bb:78:70:f6:39:79:e4:ae:59:2e:c1:25:ae:23:06:
b7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:BF:F7:C4:2F:2C:53:7E:64:73:64:32:C0:2F:22:39:C8:A9:0D:33
X509v3 Authority Key Identifier:
keyid:C1:DC:25:C7:80:E7:A2:48:17:13:9D:98:0A:28:A9:78:1F:A6:A4:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdwlx4DnokgXE52YCiipeB-mpJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/326130343a646338303a3a2f32392d3438203d3e20313937353337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:dc80::/29
Signature Algorithm: sha256WithRSAEncryption
2d:ae:f3:8a:0d:05:b4:7e:c7:44:e5:c7:8c:3f:c1:ec:8a:a6:
e5:19:e3:8e:0a:33:2c:f9:d1:1d:7e:d0:30:cb:99:92:e9:80:
e9:f7:00:20:4b:d8:a7:ca:ee:26:07:cf:c6:22:b2:75:30:3f:
a2:9e:af:da:63:b1:71:d4:4e:fd:a0:3f:f9:fd:ab:17:d7:76:
d2:7d:42:e3:0f:eb:0e:41:f2:7c:d3:fc:56:b8:34:d0:08:11:
84:a3:aa:3a:62:f0:3f:cd:0e:9c:20:ff:3e:65:5d:d6:fe:2f:
69:0d:bf:b7:0a:f3:f9:c8:36:e8:e5:b0:4c:fa:61:09:e9:32:
eb:6f:52:ca:df:b2:5b:a0:66:10:c2:4b:32:c1:a6:7a:5a:3d:
90:15:cd:cb:02:bf:7c:82:eb:7c:4f:d8:0d:1a:c5:47:ae:1c:
cd:cd:f8:56:a2:28:d2:8b:c1:f7:d2:df:13:22:1d:be:c7:6f:
fa:a9:8d:3a:dc:b1:07:c6:55:cb:bd:02:9a:39:f6:34:d9:62:
19:22:81:51:67:64:1f:59:15:9c:80:4c:b2:8f:85:84:e6:83:
e3:24:58:ad:f3:09:19:43:ad:db:9a:03:2b:c2:41:f6:6a:20:
73:04:b7:18:76:6f:3e:43:ab:5a:dd:cf:03:b6:7e:7d:fa:26:
1c:cb:26:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:16:20 2026 by rpki-client