Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/11/326131333a633030373a383034303a3a2f34322d3438203d3e2030.roa
File: 326131333a633030373a383034303a3a2f34322d3438203d3e2030.roa (raw, json)
Hash identifier: mKh9yX+9Ow/gLw9uVu5d28cdHUwWXdzVGDlkC7RkriM=
Subject key identifier: F0:FB:19:87:85:C6:8D:8D:94:C6:31:13:D4:78:89:91:82:98:D1:FD
Certificate issuer: /CN=d4700d8e6f022571a0b26fcd4c70c0408ea4ffc9
Certificate serial: 6878CC624E70F1F8EDCB17F1E27C89A6714D7DDF
Authority key identifier: D4:70:0D:8E:6F:02:25:71:A0:B2:6F:CD:4C:70:C0:40:8E:A4:FF:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HANjm8CJXGgsm_NTHDAQI6k_8k.cer
Subject info access: rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/11/326131333a633030373a383034303a3a2f34322d3438203d3e2030.roa
Signing time: Mon 16 Jun 2025 22:00:03 +0000
ROA not before: Mon 16 Jun 2025 21:55:03 +0000
ROA not after: Mon 15 Jun 2026 22:00:03 +0000
asID: 0
IP address blocks: 2a13:c007:8040::/42 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/11/D4700D8E6F022571A0B26FCD4C70C0408EA4FFC9.crl
rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/11/D4700D8E6F022571A0B26FCD4C70C0408EA4FFC9.mft
rsync://rpki.ripe.net/repository/DEFAULT/1HANjm8CJXGgsm_NTHDAQI6k_8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:47:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:78:cc:62:4e:70:f1:f8:ed:cb:17:f1:e2:7c:89:a6:71:4d:7d:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4700d8e6f022571a0b26fcd4c70c0408ea4ffc9
Validity
Not Before: Jun 16 21:55:03 2025 GMT
Not After : Jun 15 22:00:03 2026 GMT
Subject: CN=F0FB198785C68D8D94C63113D47889918298D1FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2c:1d:a2:a5:97:09:48:2b:da:e0:b9:34:c2:
d1:53:6b:e8:c8:5f:d1:14:ff:36:cf:b7:84:77:f5:
e7:6b:33:45:34:44:24:fc:3e:1f:f3:cf:23:76:4c:
bd:c5:8a:52:72:aa:0f:c4:f1:0b:65:b4:f5:82:d2:
2e:72:9f:2d:a7:fc:45:d0:08:28:37:f3:d1:a1:bf:
43:48:30:43:1a:57:ea:cc:fa:a0:f2:35:a3:35:b9:
6f:14:ea:4d:38:a0:34:3e:e2:a8:d5:0b:da:5c:99:
3e:c8:9b:1e:96:03:b3:ed:aa:4d:88:e1:bf:74:2b:
e3:09:43:3e:85:fc:d4:25:48:e4:12:fa:70:97:2b:
57:10:d7:26:22:60:81:81:8a:b2:5e:5c:53:03:a8:
f4:f6:f0:fd:38:73:da:e9:8f:60:99:cd:28:57:cc:
6b:e4:3a:49:25:ca:be:e8:03:be:53:33:e3:27:eb:
a4:be:b2:cc:c6:0c:03:a2:b3:34:85:8c:25:82:92:
00:4e:50:1e:9d:28:d6:be:47:73:d4:88:12:d4:aa:
c3:67:89:ef:f2:15:da:23:d7:82:dd:46:56:0e:c8:
f8:d4:30:c0:2d:17:e7:6b:15:01:df:a9:91:48:62:
48:c3:5f:2d:f6:d8:60:40:6d:9d:b5:36:8c:90:9b:
bd:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:FB:19:87:85:C6:8D:8D:94:C6:31:13:D4:78:89:91:82:98:D1:FD
X509v3 Authority Key Identifier:
keyid:D4:70:0D:8E:6F:02:25:71:A0:B2:6F:CD:4C:70:C0:40:8E:A4:FF:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/11/D4700D8E6F022571A0B26FCD4C70C0408EA4FFC9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HANjm8CJXGgsm_NTHDAQI6k_8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/11/326131333a633030373a383034303a3a2f34322d3438203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c007:8040::/42
Signature Algorithm: sha256WithRSAEncryption
6e:6b:44:0c:62:30:a8:57:ff:77:1b:cd:fd:8d:0d:2f:b3:1a:
f9:15:91:a4:a7:9c:fb:d7:31:b2:c5:2f:48:f3:d7:b9:23:50:
6a:76:fc:2d:d6:20:5c:c7:5d:79:81:42:1c:6a:31:b4:42:57:
9e:b3:5d:02:d8:bd:11:6b:b2:ab:55:ef:e8:da:95:9c:b1:18:
78:b2:01:f1:6a:22:86:79:99:e0:6f:b1:11:a6:ef:92:7e:f5:
b3:a3:1a:44:5c:c7:16:e6:0a:7f:99:8a:46:93:3e:56:90:ae:
8d:d1:d5:9a:15:b7:fb:2d:57:cd:3a:1b:c2:73:78:91:68:4b:
c4:cb:db:89:12:64:36:8f:11:33:bc:6a:3c:7e:ef:5a:4d:37:
ad:00:8c:8c:0e:34:7c:7e:af:dd:16:14:1c:33:9a:14:84:dd:
32:04:7f:5c:eb:c5:1c:9a:21:d7:8b:ee:6d:ae:68:fa:d3:6d:
e9:3e:58:d6:ee:ab:2e:ac:09:cc:fd:89:51:7b:6d:73:7b:0e:
69:d3:c8:c6:60:b7:9d:17:42:20:38:91:c4:9c:f3:13:53:96:
14:87:65:86:a1:1a:15:3a:0e:0d:3b:17:a7:3a:b1:4b:f7:c1:
22:75:30:c5:50:b4:ba:59:65:e1:86:bb:49:15:fa:9c:6f:27:
76:ee:2b:c1
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgIUaHjMYk5w8fjtyxfx4nyJpnFNfd8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDQ3MDBkOGU2ZjAyMjU3MWEwYjI2ZmNkNGM3MGMwNDA4
ZWE0ZmZjOTAeFw0yNTA2MTYyMTU1MDNaFw0yNjA2MTUyMjAwMDNaMDMxMTAvBgNV
BAMTKEYwRkIxOTg3ODVDNjhEOEQ5NEM2MzExM0Q0Nzg4OTkxODI5OEQxRkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNLB2ipZcJSCva4Lk0wtFTa+jI
X9EU/zbPt4R39edrM0U0RCT8Ph/zzyN2TL3FilJyqg/E8QtltPWC0i5yny2n/EXQ
CCg389Ghv0NIMEMaV+rM+qDyNaM1uW8U6k04oDQ+4qjVC9pcmT7Imx6WA7Ptqk2I
4b90K+MJQz6F/NQlSOQS+nCXK1cQ1yYiYIGBirJeXFMDqPT28P04c9rpj2CZzShX
zGvkOkklyr7oA75TM+Mn66S+sszGDAOiszSFjCWCkgBOUB6dKNa+R3PUiBLUqsNn
ie/yFdoj14LdRlYOyPjUMMAtF+drFQHfqZFIYkjDXy322GBAbZ21NoyQm70nAgMB
AAGjggInMIICIzAdBgNVHQ4EFgQU8PsZh4XGjY2UxjET1HiJkYKY0f0wHwYDVR0j
BBgwFoAU1HANjm8CJXGgsm/NTHDAQI6k/8kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvNmFiOTZlN2E2MTMwNDk4YWE5ODEzZDdlZTViYmVkMzEvMTEvRDQ3MDBEOEU2
RjAyMjU3MUEwQjI2RkNENEM3MEMwNDA4RUE0RkZDOS5jcmwwZAYIKwYBBQUHAQEE
WDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzFIQU5qbThDSlhHZ3NtX05USERBUUk2a184ay5jZXIwgaMGCCsG
AQUFBwELBIGWMIGTMIGQBggrBgEFBQcwC4aBg3JzeW5jOi8vcnBraS1ycHMuYXJp
bi5uZXQvcmVwb3NpdG9yeS82YWI5NmU3YTYxMzA0OThhYTk4MTNkN2VlNWJiZWQz
MS8xMS8zMjYxMzEzMzNhNjMzMDMwMzczYTM4MzAzNDMwM2EzYTJmMzQzMjJkMzQz
ODIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYB
BQUHAQcBAf8EEzARMA8EAgACMAkDBwYqE8AHgEAwDQYJKoZIhvcNAQELBQADggEB
AG5rRAxiMKhX/3cbzf2NDS+zGvkVkaSnnPvXMbLFL0jz17kjUGp2/C3WIFzHXXmB
QhxqMbRCV56zXQLYvRFrsqtV7+jalZyxGHiyAfFqIoZ5meBvsRGm75J+9bOjGkRc
xxbmCn+ZikaTPlaQro3R1ZoVt/stV806G8JzeJFoS8TL24kSZDaPETO8ajx+71pN
N60AjIwONHx+r90WFBwzmhSE3TIEf1zrxRyaIdeL7m2uaPrTbek+WNbuqy6sCcz9
iVF7bXN7DmnTyMZgt50XQiA4kcSc8xNTlhSHZYahGhU6Dg07F6c6sUv3wSJ1MMVQ
tLpZZeGGu0kV+pxvJ3buK8E=
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:27:37 2025 by rpki-client