Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/11/326131333a633030373a383430303a3a2f33382d3438203d3e2030.roa
File: 326131333a633030373a383430303a3a2f33382d3438203d3e2030.roa (raw, json)
Hash identifier: d6N0+0TZNxx3tF0UVuD1QxzSk1b8yaiVA5XlfyW++pE=
Subject key identifier: 5E:84:1F:96:B2:66:00:8E:E6:05:5F:49:AF:2A:20:A3:D9:EB:5E:CC
Certificate issuer: /CN=d4700d8e6f022571a0b26fcd4c70c0408ea4ffc9
Certificate serial: 0C6B232DFDE2B267BEFBD58DDC47D376509825F6
Authority key identifier: D4:70:0D:8E:6F:02:25:71:A0:B2:6F:CD:4C:70:C0:40:8E:A4:FF:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HANjm8CJXGgsm_NTHDAQI6k_8k.cer
Subject info access: rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/11/326131333a633030373a383430303a3a2f33382d3438203d3e2030.roa
Signing time: Mon 16 Jun 2025 22:00:48 +0000
ROA not before: Mon 16 Jun 2025 21:55:48 +0000
ROA not after: Mon 15 Jun 2026 22:00:48 +0000
asID: 0
IP address blocks: 2a13:c007:8400::/38 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/11/D4700D8E6F022571A0B26FCD4C70C0408EA4FFC9.crl
rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/11/D4700D8E6F022571A0B26FCD4C70C0408EA4FFC9.mft
rsync://rpki.ripe.net/repository/DEFAULT/1HANjm8CJXGgsm_NTHDAQI6k_8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:47:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:6b:23:2d:fd:e2:b2:67:be:fb:d5:8d:dc:47:d3:76:50:98:25:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4700d8e6f022571a0b26fcd4c70c0408ea4ffc9
Validity
Not Before: Jun 16 21:55:48 2025 GMT
Not After : Jun 15 22:00:48 2026 GMT
Subject: CN=5E841F96B266008EE6055F49AF2A20A3D9EB5ECC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:55:32:e5:ca:f3:df:4f:68:b7:b5:f0:dc:2b:
65:aa:cd:0c:fe:eb:fd:19:66:f0:b5:8c:08:40:e8:
d8:39:de:23:62:56:8a:a7:42:c1:a0:79:8e:6b:64:
55:86:ce:8e:f5:76:69:6b:ea:f8:06:30:07:f4:40:
75:68:3c:d1:b9:1a:1a:8f:13:51:5a:42:0a:7e:cd:
19:d3:f8:fc:9e:9f:99:d1:8b:d2:e6:08:1b:28:30:
e1:da:bb:c0:58:37:1d:74:a4:24:1a:05:07:b3:fa:
76:12:b6:cf:f7:d1:81:d1:3b:99:14:3b:6b:25:e6:
b7:8a:dc:81:fe:76:12:12:53:b0:a0:ed:f0:af:eb:
92:b7:41:bc:99:a0:be:56:19:3f:93:0d:e4:f0:90:
43:99:20:0a:0c:aa:03:a2:55:28:5a:90:74:75:01:
60:fa:3e:5f:5b:3f:41:3f:4a:7e:ab:6f:b4:9d:0a:
ff:a7:a3:12:3e:b9:35:95:a1:79:ea:08:04:15:01:
fe:38:5d:94:d5:77:fe:a2:00:5d:4b:8e:69:bf:b3:
2e:08:42:a1:14:48:0a:f8:cd:2d:17:27:2f:bd:ed:
f9:74:b6:fc:9a:97:19:ad:f0:1d:c1:bf:5d:c3:00:
aa:b7:6a:94:c9:6b:42:d4:f3:05:65:39:ce:16:f7:
a0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:84:1F:96:B2:66:00:8E:E6:05:5F:49:AF:2A:20:A3:D9:EB:5E:CC
X509v3 Authority Key Identifier:
keyid:D4:70:0D:8E:6F:02:25:71:A0:B2:6F:CD:4C:70:C0:40:8E:A4:FF:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/11/D4700D8E6F022571A0B26FCD4C70C0408EA4FFC9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HANjm8CJXGgsm_NTHDAQI6k_8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/11/326131333a633030373a383430303a3a2f33382d3438203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c007:8400::/38
Signature Algorithm: sha256WithRSAEncryption
48:3b:06:2c:6a:47:0b:15:8f:7e:8d:05:66:7e:30:5d:39:1f:
80:52:05:6b:f5:16:68:fe:e9:ff:8b:39:f7:1d:90:00:f4:7c:
fb:66:2c:e1:f4:7e:55:61:c4:19:0c:2b:e0:69:ab:53:84:68:
cd:4b:9e:4c:22:78:dd:f2:7a:f9:79:6e:50:ac:97:fd:30:5c:
9b:b4:8d:94:ac:b6:0d:37:d1:b6:6c:7e:ba:0e:ca:36:96:85:
3a:1c:83:a6:85:d2:37:3b:50:f5:1f:24:be:b1:08:f7:10:f3:
4e:51:5d:c9:72:8e:ff:71:96:5a:7d:aa:ac:00:35:55:7c:41:
2a:43:64:03:1a:cf:d2:7d:eb:be:66:cb:3e:9b:e5:31:17:73:
09:a3:13:28:bc:1a:ab:c4:71:a1:2b:c2:8f:2b:cb:d0:f3:7f:
c6:f2:c7:51:f1:ff:81:50:73:85:1f:88:1c:1c:33:77:62:4f:
87:ae:85:b5:01:91:cd:1c:d5:c6:9c:04:6d:8b:5b:ba:ab:69:
b4:b0:14:41:c7:00:fd:97:bd:2a:f1:78:4d:16:da:d5:96:04:
93:57:57:f7:ef:58:3b:f7:4d:db:8a:90:c1:a1:d7:4e:fd:c0:
43:75:d8:43:21:74:14:58:50:c0:d4:a2:ae:01:a1:aa:a9:2a:
f7:57:e2:0f
-----BEGIN CERTIFICATE-----
MIIFHDCCBASgAwIBAgIUDGsjLf3isme++9WN3EfTdlCYJfYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDQ3MDBkOGU2ZjAyMjU3MWEwYjI2ZmNkNGM3MGMwNDA4
ZWE0ZmZjOTAeFw0yNTA2MTYyMTU1NDhaFw0yNjA2MTUyMjAwNDhaMDMxMTAvBgNV
BAMTKDVFODQxRjk2QjI2NjAwOEVFNjA1NUY0OUFGMkEyMEEzRDlFQjVFQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLVTLlyvPfT2i3tfDcK2WqzQz+
6/0ZZvC1jAhA6Ng53iNiVoqnQsGgeY5rZFWGzo71dmlr6vgGMAf0QHVoPNG5GhqP
E1FaQgp+zRnT+Pyen5nRi9LmCBsoMOHau8BYNx10pCQaBQez+nYSts/30YHRO5kU
O2sl5reK3IH+dhISU7Cg7fCv65K3QbyZoL5WGT+TDeTwkEOZIAoMqgOiVShakHR1
AWD6Pl9bP0E/Sn6rb7SdCv+noxI+uTWVoXnqCAQVAf44XZTVd/6iAF1Ljmm/sy4I
QqEUSAr4zS0XJy+97fl0tvyalxmt8B3Bv13DAKq3apTJa0LU8wVlOc4W96BfAgMB
AAGjggImMIICIjAdBgNVHQ4EFgQUXoQflrJmAI7mBV9Jryogo9nrXswwHwYDVR0j
BBgwFoAU1HANjm8CJXGgsm/NTHDAQI6k/8kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvNmFiOTZlN2E2MTMwNDk4YWE5ODEzZDdlZTViYmVkMzEvMTEvRDQ3MDBEOEU2
RjAyMjU3MUEwQjI2RkNENEM3MEMwNDA4RUE0RkZDOS5jcmwwZAYIKwYBBQUHAQEE
WDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzFIQU5qbThDSlhHZ3NtX05USERBUUk2a184ay5jZXIwgaMGCCsG
AQUFBwELBIGWMIGTMIGQBggrBgEFBQcwC4aBg3JzeW5jOi8vcnBraS1ycHMuYXJp
bi5uZXQvcmVwb3NpdG9yeS82YWI5NmU3YTYxMzA0OThhYTk4MTNkN2VlNWJiZWQz
MS8xMS8zMjYxMzEzMzNhNjMzMDMwMzczYTM4MzQzMDMwM2EzYTJmMzMzODJkMzQz
ODIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB
BQUHAQcBAf8EEjAQMA4EAgACMAgDBgIqE8AHhDANBgkqhkiG9w0BAQsFAAOCAQEA
SDsGLGpHCxWPfo0FZn4wXTkfgFIFa/UWaP7p/4s59x2QAPR8+2Ys4fR+VWHEGQwr
4GmrU4RozUueTCJ43fJ6+XluUKyX/TBcm7SNlKy2DTfRtmx+ug7KNpaFOhyDpoXS
NztQ9R8kvrEI9xDzTlFdyXKO/3GWWn2qrAA1VXxBKkNkAxrP0n3rvmbLPpvlMRdz
CaMTKLwaq8RxoSvCjyvL0PN/xvLHUfH/gVBzhR+IHBwzd2JPh66FtQGRzRzVxpwE
bYtbuqtptLAUQccA/Ze9KvF4TRba1ZYEk1dX9+9YO/dN24qQwaHXTv3AQ3XYQyF0
FFhQwNSirgGhqqkq91fiDw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 03:37:41 2025 by rpki-client