Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/11/326131333a633030303a3a2f33302d3438203d3e2030.roa
File: 326131333a633030303a3a2f33302d3438203d3e2030.roa (raw, json)
Hash identifier: O6U7denQKZOkjD1O7JC+xkyevhCiAPrAfcyp00txZ7M=
Subject key identifier: 46:EC:FA:B9:B8:EE:E1:C0:B7:C1:46:53:30:00:91:F9:08:63:93:8A
Certificate issuer: /CN=d4700d8e6f022571a0b26fcd4c70c0408ea4ffc9
Certificate serial: 71226ACB0A70E288D966115842B87AC5DD05651D
Authority key identifier: D4:70:0D:8E:6F:02:25:71:A0:B2:6F:CD:4C:70:C0:40:8E:A4:FF:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HANjm8CJXGgsm_NTHDAQI6k_8k.cer
Subject info access: rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/11/326131333a633030303a3a2f33302d3438203d3e2030.roa
Signing time: Mon 16 Jun 2025 22:08:43 +0000
ROA not before: Mon 16 Jun 2025 22:03:43 +0000
ROA not after: Mon 15 Jun 2026 22:08:43 +0000
asID: 0
IP address blocks: 2a13:c000::/30 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/11/D4700D8E6F022571A0B26FCD4C70C0408EA4FFC9.crl
rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/11/D4700D8E6F022571A0B26FCD4C70C0408EA4FFC9.mft
rsync://rpki.ripe.net/repository/DEFAULT/1HANjm8CJXGgsm_NTHDAQI6k_8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:47:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:22:6a:cb:0a:70:e2:88:d9:66:11:58:42:b8:7a:c5:dd:05:65:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4700d8e6f022571a0b26fcd4c70c0408ea4ffc9
Validity
Not Before: Jun 16 22:03:43 2025 GMT
Not After : Jun 15 22:08:43 2026 GMT
Subject: CN=46ECFAB9B8EEE1C0B7C14653300091F90863938A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:89:64:c4:0c:01:48:d4:6c:3d:20:0f:7b:8d:
58:d0:ff:e2:c2:42:87:90:4c:78:c5:f2:aa:20:d8:
84:b0:7d:a7:ee:1e:73:e5:25:bc:7d:54:78:71:bc:
c4:c8:69:05:fa:8a:16:61:55:ae:2f:81:85:29:83:
63:ee:a0:7e:b5:90:3e:08:78:01:50:b0:2d:7c:a5:
b6:36:30:89:0c:e8:35:74:4a:1c:48:4d:92:c9:e6:
c3:a3:8c:ab:7e:8d:7b:aa:79:75:5d:6d:28:cd:64:
67:cf:5a:a5:2e:a6:fa:93:77:09:58:08:0f:30:d2:
c1:bc:cf:7b:15:b3:36:68:ea:ab:16:17:2d:e2:51:
04:44:32:91:74:23:91:a0:31:36:2e:e4:15:07:30:
11:19:22:28:92:f7:46:ef:95:85:4c:7d:d1:58:7c:
8c:9d:67:13:88:03:6f:2b:71:67:2e:11:4f:79:6a:
31:61:a2:52:7d:0c:75:97:b8:55:02:b5:e0:5d:3e:
01:2f:06:15:5a:5b:df:7a:bf:f3:09:11:1f:c7:f4:
ae:b4:74:6c:00:d3:9e:15:a0:eb:e9:61:6d:de:b0:
8a:04:0e:5b:3a:8d:39:37:e2:3d:45:9b:28:be:b6:
66:15:3a:05:56:89:55:54:cf:6d:35:ef:b3:d0:26:
c2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:EC:FA:B9:B8:EE:E1:C0:B7:C1:46:53:30:00:91:F9:08:63:93:8A
X509v3 Authority Key Identifier:
keyid:D4:70:0D:8E:6F:02:25:71:A0:B2:6F:CD:4C:70:C0:40:8E:A4:FF:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/11/D4700D8E6F022571A0B26FCD4C70C0408EA4FFC9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HANjm8CJXGgsm_NTHDAQI6k_8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/11/326131333a633030303a3a2f33302d3438203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c000::/30
Signature Algorithm: sha256WithRSAEncryption
35:54:40:58:04:16:5f:02:19:8b:9e:f6:31:0d:2d:63:47:8f:
8d:45:e0:ae:c2:0f:bc:55:73:3f:64:25:37:ee:f1:05:61:d6:
ce:ad:8d:09:15:97:26:2e:98:b1:26:d7:82:60:a0:1c:88:15:
2e:b1:6c:4d:38:e0:b1:b9:d9:6b:17:5f:cb:ae:70:97:5f:03:
2e:63:89:5c:81:28:37:f5:a7:36:60:14:ef:42:83:1b:5c:20:
9f:b9:c7:88:45:79:92:33:f7:de:39:96:4c:58:94:de:5f:82:
52:e5:46:00:b9:84:e0:49:81:90:ef:b3:9a:72:4d:0c:80:37:
56:25:57:d1:4f:d4:ae:d7:58:fd:e3:09:da:c3:05:d2:db:2d:
8c:80:dc:b3:50:a5:bb:71:0a:35:ae:38:d9:d3:3a:95:60:d6:
ef:7e:8a:06:b9:fa:35:ce:77:c0:6e:87:9e:3d:6f:c6:b8:ad:
5d:c5:6c:e6:f1:24:7b:16:ab:8c:68:01:12:d7:da:59:b5:d8:
c3:4d:ef:96:93:78:81:02:64:d5:33:fb:6e:28:7f:76:96:d8:
40:fd:f2:6f:13:2d:2a:19:f1:cc:0e:f8:2d:93:c5:8a:1a:a3:
48:38:dc:60:ba:fc:28:19:2a:65:b0:11:24:1c:6b:52:12:c9:
4b:3c:68:ee
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUcSJqywpw4ojZZhFYQrh6xd0FZR0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDQ3MDBkOGU2ZjAyMjU3MWEwYjI2ZmNkNGM3MGMwNDA4
ZWE0ZmZjOTAeFw0yNTA2MTYyMjAzNDNaFw0yNjA2MTUyMjA4NDNaMDMxMTAvBgNV
BAMTKDQ2RUNGQUI5QjhFRUUxQzBCN0MxNDY1MzMwMDA5MUY5MDg2MzkzOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCciWTEDAFI1Gw9IA97jVjQ/+LC
QoeQTHjF8qog2ISwfafuHnPlJbx9VHhxvMTIaQX6ihZhVa4vgYUpg2PuoH61kD4I
eAFQsC18pbY2MIkM6DV0ShxITZLJ5sOjjKt+jXuqeXVdbSjNZGfPWqUupvqTdwlY
CA8w0sG8z3sVszZo6qsWFy3iUQREMpF0I5GgMTYu5BUHMBEZIiiS90bvlYVMfdFY
fIydZxOIA28rcWcuEU95ajFholJ9DHWXuFUCteBdPgEvBhVaW996v/MJER/H9K60
dGwA054VoOvpYW3esIoEDls6jTk34j1Fmyi+tmYVOgVWiVVUz20177PQJsLHAgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQURuz6ubju4cC3wUZTMACR+Qhjk4owHwYDVR0j
BBgwFoAU1HANjm8CJXGgsm/NTHDAQI6k/8kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvNmFiOTZlN2E2MTMwNDk4YWE5ODEzZDdlZTViYmVkMzEvMTEvRDQ3MDBEOEU2
RjAyMjU3MUEwQjI2RkNENEM3MEMwNDA4RUE0RkZDOS5jcmwwZAYIKwYBBQUHAQEE
WDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzFIQU5qbThDSlhHZ3NtX05USERBUUk2a184ay5jZXIwgZgGCCsG
AQUFBwELBIGLMIGIMIGFBggrBgEFBQcwC4Z5cnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzZhYjk2ZTdhNjEzMDQ5OGFhOTgxM2Q3ZWU1YmJlZDMx
LzExLzMyNjEzMTMzM2E2MzMwMzAzMDNhM2EyZjMzMzAyZDM0MzgyMDNkM2UyMDMw
LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEw
DzANBAIAAjAHAwUCKhPAADANBgkqhkiG9w0BAQsFAAOCAQEANVRAWAQWXwIZi572
MQ0tY0ePjUXgrsIPvFVzP2QlN+7xBWHWzq2NCRWXJi6YsSbXgmCgHIgVLrFsTTjg
sbnZaxdfy65wl18DLmOJXIEoN/WnNmAU70KDG1wgn7nHiEV5kjP33jmWTFiU3l+C
UuVGALmE4EmBkO+zmnJNDIA3ViVX0U/UrtdY/eMJ2sMF0tstjIDcs1Clu3EKNa44
2dM6lWDW736KBrn6Nc53wG6Hnj1vxritXcVs5vEkexarjGgBEtfaWbXYw03vlpN4
gQJk1TP7bih/dpbYQP3ybxMtKhnxzA74LZPFihqjSDjcYLr8KBkqZbARJBxrUhLJ
Szxo7g==
-----END CERTIFICATE-----
Generated at Sun Jun 29 07:25:38 2025 by rpki-client