Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/11/326131333a633030363a3a2f33322d3438203d3e2030.roa
File: 326131333a633030363a3a2f33322d3438203d3e2030.roa (raw, json)
Hash identifier: PEHCNRXMCXL+HEcUr83e5fTmiot0KdUcnmEHSoSVK1I=
Subject key identifier: A4:7E:58:BB:F7:74:1A:08:CA:60:8C:78:6E:0B:B1:15:67:35:C0:A2
Certificate issuer: /CN=d4700d8e6f022571a0b26fcd4c70c0408ea4ffc9
Certificate serial: 56DFC8B38C9094B0EE7683B02AFF38C6D44C40F7
Authority key identifier: D4:70:0D:8E:6F:02:25:71:A0:B2:6F:CD:4C:70:C0:40:8E:A4:FF:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HANjm8CJXGgsm_NTHDAQI6k_8k.cer
Subject info access: rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/11/326131333a633030363a3a2f33322d3438203d3e2030.roa
Signing time: Mon 16 Jun 2025 22:09:17 +0000
ROA not before: Mon 16 Jun 2025 22:04:17 +0000
ROA not after: Mon 15 Jun 2026 22:09:17 +0000
asID: 0
IP address blocks: 2a13:c006::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/11/D4700D8E6F022571A0B26FCD4C70C0408EA4FFC9.crl
rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/11/D4700D8E6F022571A0B26FCD4C70C0408EA4FFC9.mft
rsync://rpki.ripe.net/repository/DEFAULT/1HANjm8CJXGgsm_NTHDAQI6k_8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:47:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:df:c8:b3:8c:90:94:b0:ee:76:83:b0:2a:ff:38:c6:d4:4c:40:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4700d8e6f022571a0b26fcd4c70c0408ea4ffc9
Validity
Not Before: Jun 16 22:04:17 2025 GMT
Not After : Jun 15 22:09:17 2026 GMT
Subject: CN=A47E58BBF7741A08CA608C786E0BB1156735C0A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:b8:59:9f:7b:d8:07:47:56:23:b7:61:ec:da:
1a:a9:b7:4d:b3:73:bd:67:fc:69:30:d1:e7:26:78:
e4:41:a3:32:d6:49:52:b0:c7:f3:27:a3:ed:c4:16:
0a:1c:da:61:85:4c:3f:38:7a:53:69:66:9b:1c:62:
f3:da:ea:18:22:aa:01:b4:b1:a2:ea:e4:0a:4e:33:
2a:f5:45:5e:57:4d:22:71:c3:f0:81:eb:c9:17:f0:
a1:eb:8e:ad:ed:af:43:c7:17:62:d3:56:51:83:90:
48:c6:38:46:ef:ba:31:e9:88:a3:b9:6c:67:28:98:
09:a7:43:48:d9:f0:f7:f3:8f:53:11:b1:28:a6:54:
52:6e:a5:a1:c7:d2:91:1f:36:3f:48:de:06:34:a9:
e6:27:29:f6:85:bf:e4:06:2e:83:12:9e:a7:19:1c:
43:93:3f:ca:fc:b8:0e:69:db:b5:9b:af:b9:42:01:
e9:e9:40:84:dc:9b:9f:ac:a2:47:51:cb:d4:5a:be:
4a:ea:6a:c7:86:5e:f2:a9:69:62:97:72:4d:aa:5d:
5b:3a:b9:2e:d3:82:c5:2a:e6:1b:6a:29:d1:0f:36:
5d:50:a9:81:a6:ae:bf:83:b0:73:ef:79:3e:d9:6a:
ba:2d:39:5d:36:9e:67:38:54:1f:9f:84:13:ad:49:
ab:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:7E:58:BB:F7:74:1A:08:CA:60:8C:78:6E:0B:B1:15:67:35:C0:A2
X509v3 Authority Key Identifier:
keyid:D4:70:0D:8E:6F:02:25:71:A0:B2:6F:CD:4C:70:C0:40:8E:A4:FF:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/11/D4700D8E6F022571A0B26FCD4C70C0408EA4FFC9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HANjm8CJXGgsm_NTHDAQI6k_8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/11/326131333a633030363a3a2f33322d3438203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c006::/32
Signature Algorithm: sha256WithRSAEncryption
b0:7b:f3:46:a5:87:52:2c:8d:f1:54:18:2a:59:54:ab:a8:a9:
f9:e1:9d:ac:b2:0a:f0:d5:39:d0:b1:69:71:67:fd:ae:cb:32:
b3:71:fa:fb:0e:eb:dd:86:eb:3e:79:0c:aa:96:5f:d5:f8:c7:
34:5c:2b:dd:b5:86:28:a3:ff:f5:44:d5:c5:a2:fd:92:4a:14:
26:b6:58:86:2b:30:21:f0:cf:3a:ec:06:48:ac:38:03:86:04:
49:83:28:36:b3:aa:d3:99:c1:5a:8f:a5:de:3c:14:71:c3:d9:
d8:3f:53:5d:be:bb:d4:64:e0:22:24:7c:84:e0:f5:c3:ff:60:
e9:00:08:60:2e:5e:80:04:5a:45:ef:5d:bd:97:a9:48:65:88:
06:ac:33:e4:29:e0:1f:ea:f4:93:a0:00:e6:40:79:a6:12:b0:
5b:2d:e6:8c:7c:ef:a3:7c:0e:63:d0:44:d7:86:0e:3a:3e:ad:
e6:d2:51:64:68:26:a3:71:ce:0a:db:2c:67:a0:95:b0:e2:f3:
b4:2c:18:d3:84:81:d2:6d:89:f3:1d:5c:03:63:47:c4:2f:83:
3c:0e:38:6a:49:f3:9d:84:fe:b4:3a:1f:71:35:80:2c:60:e8:
56:78:6c:cd:8d:62:82:3c:a5:3a:68:5d:c6:3a:cc:f1:3c:af:
b6:e5:2d:d7
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUVt/Is4yQlLDudoOwKv84xtRMQPcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDQ3MDBkOGU2ZjAyMjU3MWEwYjI2ZmNkNGM3MGMwNDA4
ZWE0ZmZjOTAeFw0yNTA2MTYyMjA0MTdaFw0yNjA2MTUyMjA5MTdaMDMxMTAvBgNV
BAMTKEE0N0U1OEJCRjc3NDFBMDhDQTYwOEM3ODZFMEJCMTE1NjczNUMwQTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0uFmfe9gHR1Yjt2Hs2hqpt02z
c71n/Gkw0ecmeORBozLWSVKwx/Mno+3EFgoc2mGFTD84elNpZpscYvPa6hgiqgG0
saLq5ApOMyr1RV5XTSJxw/CB68kX8KHrjq3tr0PHF2LTVlGDkEjGOEbvujHpiKO5
bGcomAmnQ0jZ8Pfzj1MRsSimVFJupaHH0pEfNj9I3gY0qeYnKfaFv+QGLoMSnqcZ
HEOTP8r8uA5p27Wbr7lCAenpQITcm5+sokdRy9RavkrqaseGXvKpaWKXck2qXVs6
uS7TgsUq5htqKdEPNl1QqYGmrr+DsHPveT7ZarotOV02nmc4VB+fhBOtSavTAgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQUpH5Yu/d0GgjKYIx4bguxFWc1wKIwHwYDVR0j
BBgwFoAU1HANjm8CJXGgsm/NTHDAQI6k/8kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvNmFiOTZlN2E2MTMwNDk4YWE5ODEzZDdlZTViYmVkMzEvMTEvRDQ3MDBEOEU2
RjAyMjU3MUEwQjI2RkNENEM3MEMwNDA4RUE0RkZDOS5jcmwwZAYIKwYBBQUHAQEE
WDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzFIQU5qbThDSlhHZ3NtX05USERBUUk2a184ay5jZXIwgZgGCCsG
AQUFBwELBIGLMIGIMIGFBggrBgEFBQcwC4Z5cnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzZhYjk2ZTdhNjEzMDQ5OGFhOTgxM2Q3ZWU1YmJlZDMx
LzExLzMyNjEzMTMzM2E2MzMwMzAzNjNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMw
LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEw
DzANBAIAAjAHAwUAKhPABjANBgkqhkiG9w0BAQsFAAOCAQEAsHvzRqWHUiyN8VQY
KllUq6ip+eGdrLIK8NU50LFpcWf9rssys3H6+w7r3YbrPnkMqpZf1fjHNFwr3bWG
KKP/9UTVxaL9kkoUJrZYhiswIfDPOuwGSKw4A4YESYMoNrOq05nBWo+l3jwUccPZ
2D9TXb671GTgIiR8hOD1w/9g6QAIYC5egARaRe9dvZepSGWIBqwz5CngH+r0k6AA
5kB5phKwWy3mjHzvo3wOY9BE14YOOj6t5tJRZGgmo3HOCtssZ6CVsOLztCwY04SB
0m2J8x1cA2NHxC+DPA44aknznYT+tDofcTWALGDoVnhszY1igjylOmhdxjrM8Tyv
tuUt1w==
-----END CERTIFICATE-----
Generated at Sun Jun 29 07:39:38 2025 by rpki-client