Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/11/326131333a633030343a3a2f33312d3438203d3e2030.roa
File: 326131333a633030343a3a2f33312d3438203d3e2030.roa (raw, json)
Hash identifier: VTk49chKjpiGUIW6naR7NDQ2bm7mg+x/mnjZWs6qxJ8=
Subject key identifier: E7:C3:6F:FE:B8:F5:89:80:3C:3F:5F:A5:03:CD:EB:3C:4C:A7:DD:6D
Certificate issuer: /CN=d4700d8e6f022571a0b26fcd4c70c0408ea4ffc9
Certificate serial: 3C4746746FB58A77AB26325F77C6023F01D51FC0
Authority key identifier: D4:70:0D:8E:6F:02:25:71:A0:B2:6F:CD:4C:70:C0:40:8E:A4:FF:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HANjm8CJXGgsm_NTHDAQI6k_8k.cer
Subject info access: rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/11/326131333a633030343a3a2f33312d3438203d3e2030.roa
Signing time: Mon 16 Jun 2025 22:08:59 +0000
ROA not before: Mon 16 Jun 2025 22:03:59 +0000
ROA not after: Mon 15 Jun 2026 22:08:59 +0000
asID: 0
IP address blocks: 2a13:c004::/31 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/11/D4700D8E6F022571A0B26FCD4C70C0408EA4FFC9.crl
rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/11/D4700D8E6F022571A0B26FCD4C70C0408EA4FFC9.mft
rsync://rpki.ripe.net/repository/DEFAULT/1HANjm8CJXGgsm_NTHDAQI6k_8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:47:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:47:46:74:6f:b5:8a:77:ab:26:32:5f:77:c6:02:3f:01:d5:1f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4700d8e6f022571a0b26fcd4c70c0408ea4ffc9
Validity
Not Before: Jun 16 22:03:59 2025 GMT
Not After : Jun 15 22:08:59 2026 GMT
Subject: CN=E7C36FFEB8F589803C3F5FA503CDEB3C4CA7DD6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:35:58:e1:d7:02:9a:b6:04:ad:ac:f7:bc:80:
20:47:4d:bd:f7:5f:80:2f:72:67:52:2a:f3:5b:4e:
3f:fa:54:db:cf:82:d6:d0:e1:4b:ef:14:86:cd:30:
c4:a8:87:84:7c:ac:91:d0:74:d7:61:db:b8:b1:ec:
a4:1c:2f:60:7e:3c:d3:5b:de:0c:59:ac:3a:ca:91:
8d:f2:4a:40:97:5c:76:13:bd:82:88:d8:e4:4f:d9:
35:3b:75:d3:03:5d:ae:fc:df:71:04:54:19:fd:f6:
a2:f1:f3:c8:b1:4a:91:e0:95:2c:ae:df:88:2b:1a:
0f:68:f2:a6:2c:e7:b7:11:73:40:9e:78:2d:9e:64:
27:1e:83:af:ad:fa:fb:a6:ee:3e:0d:33:fc:92:4b:
9e:12:b5:28:35:0f:64:03:83:6d:82:0b:8c:6a:7d:
c5:ca:f8:60:a3:0e:cd:0c:eb:61:72:40:bb:37:8a:
c6:1b:0c:76:2b:00:12:ae:74:bc:2b:6d:46:af:11:
6f:be:30:cb:56:48:96:d8:8a:0e:b3:2c:62:bc:a0:
41:ee:02:06:87:41:1f:46:f1:a9:b6:45:fa:1c:cb:
9f:d0:97:67:34:af:3c:d6:8d:0e:89:05:c3:c4:60:
a1:5a:cc:ea:7e:91:80:9c:05:65:b1:eb:13:72:1c:
b7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C3:6F:FE:B8:F5:89:80:3C:3F:5F:A5:03:CD:EB:3C:4C:A7:DD:6D
X509v3 Authority Key Identifier:
keyid:D4:70:0D:8E:6F:02:25:71:A0:B2:6F:CD:4C:70:C0:40:8E:A4:FF:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/11/D4700D8E6F022571A0B26FCD4C70C0408EA4FFC9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HANjm8CJXGgsm_NTHDAQI6k_8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/11/326131333a633030343a3a2f33312d3438203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c004::/31
Signature Algorithm: sha256WithRSAEncryption
a6:5b:3e:af:3d:ae:81:4f:9e:04:09:1e:7f:8a:c6:4c:91:1a:
d5:34:f4:29:45:28:6d:06:75:c0:77:cc:6d:73:3e:18:d7:69:
af:c2:ad:b1:9f:03:6c:2b:70:49:9f:a7:21:4e:06:69:59:0d:
26:9c:85:bf:59:e1:58:e3:04:07:44:56:ae:46:96:31:04:64:
66:9d:8d:10:b3:2a:d0:ff:63:c1:74:20:75:62:c7:38:94:69:
de:ea:de:c2:da:7a:24:c8:ab:52:c6:a2:02:d6:48:f3:1e:0f:
19:5d:57:f4:b0:68:30:ec:52:f1:53:49:af:c3:aa:c4:14:4b:
ef:25:bb:9d:64:bf:4d:8e:d3:49:83:26:46:22:50:02:04:c3:
d7:9b:d0:e2:66:ff:d5:a0:5d:df:12:7c:e0:3f:ac:50:94:5e:
b2:56:6d:b0:59:9d:97:c3:81:90:06:2d:ca:6a:66:e7:c3:6e:
69:e2:0a:e6:6d:f0:27:73:84:49:50:ce:88:fe:52:fe:a7:79:
b2:bd:e5:f4:be:45:4b:e0:fa:d3:50:90:c4:81:32:bb:67:88:
32:7e:a2:f4:6c:79:6e:bd:8f:32:35:1c:4e:1b:2e:f6:af:29:
9e:9f:76:0f:5f:ee:38:59:67:9e:6e:81:ca:5b:b6:7c:98:d6:
64:a8:9a:2b
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUPEdGdG+1inerJjJfd8YCPwHVH8AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDQ3MDBkOGU2ZjAyMjU3MWEwYjI2ZmNkNGM3MGMwNDA4
ZWE0ZmZjOTAeFw0yNTA2MTYyMjAzNTlaFw0yNjA2MTUyMjA4NTlaMDMxMTAvBgNV
BAMTKEU3QzM2RkZFQjhGNTg5ODAzQzNGNUZBNTAzQ0RFQjNDNENBN0RENkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVNVjh1wKatgStrPe8gCBHTb33
X4AvcmdSKvNbTj/6VNvPgtbQ4UvvFIbNMMSoh4R8rJHQdNdh27ix7KQcL2B+PNNb
3gxZrDrKkY3ySkCXXHYTvYKI2ORP2TU7ddMDXa7833EEVBn99qLx88ixSpHglSyu
34grGg9o8qYs57cRc0CeeC2eZCceg6+t+vum7j4NM/ySS54StSg1D2QDg22CC4xq
fcXK+GCjDs0M62FyQLs3isYbDHYrABKudLwrbUavEW++MMtWSJbYig6zLGK8oEHu
AgaHQR9G8am2Rfocy5/Ql2c0rzzWjQ6JBcPEYKFazOp+kYCcBWWx6xNyHLcFAgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQU58Nv/rj1iYA8P1+lA83rPEyn3W0wHwYDVR0j
BBgwFoAU1HANjm8CJXGgsm/NTHDAQI6k/8kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvNmFiOTZlN2E2MTMwNDk4YWE5ODEzZDdlZTViYmVkMzEvMTEvRDQ3MDBEOEU2
RjAyMjU3MUEwQjI2RkNENEM3MEMwNDA4RUE0RkZDOS5jcmwwZAYIKwYBBQUHAQEE
WDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzFIQU5qbThDSlhHZ3NtX05USERBUUk2a184ay5jZXIwgZgGCCsG
AQUFBwELBIGLMIGIMIGFBggrBgEFBQcwC4Z5cnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzZhYjk2ZTdhNjEzMDQ5OGFhOTgxM2Q3ZWU1YmJlZDMx
LzExLzMyNjEzMTMzM2E2MzMwMzAzNDNhM2EyZjMzMzEyZDM0MzgyMDNkM2UyMDMw
LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEw
DzANBAIAAjAHAwUBKhPABDANBgkqhkiG9w0BAQsFAAOCAQEApls+rz2ugU+eBAke
f4rGTJEa1TT0KUUobQZ1wHfMbXM+GNdpr8KtsZ8DbCtwSZ+nIU4GaVkNJpyFv1nh
WOMEB0RWrkaWMQRkZp2NELMq0P9jwXQgdWLHOJRp3urewtp6JMirUsaiAtZI8x4P
GV1X9LBoMOxS8VNJr8OqxBRL7yW7nWS/TY7TSYMmRiJQAgTD15vQ4mb/1aBd3xJ8
4D+sUJReslZtsFmdl8OBkAYtympm58NuaeIK5m3wJ3OESVDOiP5S/qd5sr3l9L5F
S+D601CQxIEyu2eIMn6i9Gx5br2PMjUcThsu9q8pnp92D1/uOFlnnm6Bylu2fJjW
ZKiaKw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 03:17:36 2025 by rpki-client