Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/11/326131333a633030373a383830303a3a2f33372d3438203d3e2030.roa
File: 326131333a633030373a383830303a3a2f33372d3438203d3e2030.roa (raw, json)
Hash identifier: qwC4gOoNRPJmvwdKsOW1qnXkKg6zUfo4tNiu1ZwNGIw=
Subject key identifier: 92:65:7D:FE:A7:BA:FF:CE:9F:49:34:E0:12:CF:25:6B:EF:90:A6:17
Certificate issuer: /CN=d4700d8e6f022571a0b26fcd4c70c0408ea4ffc9
Certificate serial: 561708CC2E0CC5519A1B7281C8C7496B2F7A38D5
Authority key identifier: D4:70:0D:8E:6F:02:25:71:A0:B2:6F:CD:4C:70:C0:40:8E:A4:FF:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HANjm8CJXGgsm_NTHDAQI6k_8k.cer
Subject info access: rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/11/326131333a633030373a383830303a3a2f33372d3438203d3e2030.roa
Signing time: Mon 16 Jun 2025 22:05:38 +0000
ROA not before: Mon 16 Jun 2025 22:00:38 +0000
ROA not after: Mon 15 Jun 2026 22:05:38 +0000
asID: 0
IP address blocks: 2a13:c007:8800::/37 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/11/D4700D8E6F022571A0B26FCD4C70C0408EA4FFC9.crl
rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/11/D4700D8E6F022571A0B26FCD4C70C0408EA4FFC9.mft
rsync://rpki.ripe.net/repository/DEFAULT/1HANjm8CJXGgsm_NTHDAQI6k_8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:47:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:17:08:cc:2e:0c:c5:51:9a:1b:72:81:c8:c7:49:6b:2f:7a:38:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4700d8e6f022571a0b26fcd4c70c0408ea4ffc9
Validity
Not Before: Jun 16 22:00:38 2025 GMT
Not After : Jun 15 22:05:38 2026 GMT
Subject: CN=92657DFEA7BAFFCE9F4934E012CF256BEF90A617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:68:d4:be:47:1d:90:22:28:25:21:6d:28:bb:
d9:c9:8f:53:1e:9e:cb:32:e3:18:7c:be:3c:b8:04:
13:1e:e1:bc:8b:36:3d:eb:2c:28:87:42:66:60:d7:
fa:dd:fa:6c:fe:9d:ef:0f:25:d0:95:7e:ab:d3:9c:
96:ee:c2:c3:f0:f1:55:ca:ce:05:53:3f:08:fb:f5:
2c:8d:cd:29:03:8d:98:6c:ee:8a:80:77:25:ff:7c:
5d:e3:f6:18:41:f0:be:25:dd:1b:61:7a:02:54:31:
50:ad:13:14:eb:63:ad:54:2d:6f:3f:f8:94:e1:d3:
9f:e8:c8:b2:6e:b9:f9:c2:e9:ad:b5:06:3e:28:7a:
68:76:36:bb:00:9e:91:e6:87:f0:f4:08:ad:4c:6e:
26:7f:c3:69:d4:94:1a:97:14:32:a4:33:5d:c5:ca:
76:eb:70:65:9b:ac:2c:07:35:c2:16:19:6b:43:a8:
29:0f:84:c5:02:d4:16:99:6f:00:0f:81:10:ea:78:
3c:a0:b7:c4:c9:ac:a6:ca:f9:07:9c:65:b0:c0:b5:
98:c8:3e:44:aa:ca:e9:9e:a5:db:f7:12:5d:d7:77:
3c:06:3e:02:27:20:c8:5d:d2:40:f9:91:e3:63:dd:
aa:1f:a1:99:ad:98:20:8d:7b:85:87:ac:0a:28:f7:
ec:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:65:7D:FE:A7:BA:FF:CE:9F:49:34:E0:12:CF:25:6B:EF:90:A6:17
X509v3 Authority Key Identifier:
keyid:D4:70:0D:8E:6F:02:25:71:A0:B2:6F:CD:4C:70:C0:40:8E:A4:FF:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/11/D4700D8E6F022571A0B26FCD4C70C0408EA4FFC9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HANjm8CJXGgsm_NTHDAQI6k_8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/11/326131333a633030373a383830303a3a2f33372d3438203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c007:8800::/37
Signature Algorithm: sha256WithRSAEncryption
a3:95:a3:a3:4d:80:a6:79:b1:c7:63:5b:51:11:db:36:d7:aa:
47:a2:00:9b:b0:46:3a:d0:95:e4:5e:6a:3f:e9:22:c7:50:d8:
74:33:93:ed:0a:fe:f0:02:46:7e:ca:16:96:0d:dc:6c:ce:7a:
4d:ca:d7:ba:98:d4:82:86:0a:ae:65:c7:e0:70:4b:dd:26:9b:
04:74:ea:e6:f1:c1:22:3d:fe:f6:77:b4:21:33:0e:8a:f7:9c:
49:7a:98:84:0c:f2:88:35:33:15:90:41:50:3b:37:66:04:ad:
38:28:7d:f6:26:95:e9:b6:6c:0f:68:93:19:0f:ed:dc:6f:06:
21:39:f9:95:d7:07:c1:2b:2e:86:a8:9c:d4:46:da:2d:c1:af:
7b:6a:df:8f:58:fd:6c:f0:37:2e:10:10:00:b5:de:3d:3e:2e:
20:67:b6:fc:58:cd:f6:14:2f:c7:1f:58:a4:13:79:cb:e9:84:
8d:48:f7:ff:79:ec:33:c3:c4:34:63:e2:c5:ca:34:d8:a7:80:
36:20:40:78:ed:d8:f9:54:ab:ec:bd:f1:28:ae:88:7d:f8:f4:
8f:66:d2:f9:da:fb:09:d1:73:4e:e5:23:8d:50:8a:f9:79:ea:
5f:92:db:0f:0d:8c:56:98:c9:cb:28:3a:4e:5c:c9:0c:b5:bc:
15:0b:e0:6b
-----BEGIN CERTIFICATE-----
MIIFHDCCBASgAwIBAgIUVhcIzC4MxVGaG3KByMdJay96ONUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDQ3MDBkOGU2ZjAyMjU3MWEwYjI2ZmNkNGM3MGMwNDA4
ZWE0ZmZjOTAeFw0yNTA2MTYyMjAwMzhaFw0yNjA2MTUyMjA1MzhaMDMxMTAvBgNV
BAMTKDkyNjU3REZFQTdCQUZGQ0U5RjQ5MzRFMDEyQ0YyNTZCRUY5MEE2MTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1aNS+Rx2QIiglIW0ou9nJj1Me
nssy4xh8vjy4BBMe4byLNj3rLCiHQmZg1/rd+mz+ne8PJdCVfqvTnJbuwsPw8VXK
zgVTPwj79SyNzSkDjZhs7oqAdyX/fF3j9hhB8L4l3RthegJUMVCtExTrY61ULW8/
+JTh05/oyLJuufnC6a21Bj4oemh2NrsAnpHmh/D0CK1MbiZ/w2nUlBqXFDKkM13F
ynbrcGWbrCwHNcIWGWtDqCkPhMUC1BaZbwAPgRDqeDygt8TJrKbK+QecZbDAtZjI
PkSqyumepdv3El3XdzwGPgInIMhd0kD5keNj3aofoZmtmCCNe4WHrAoo9+wtAgMB
AAGjggImMIICIjAdBgNVHQ4EFgQUkmV9/qe6/86fSTTgEs8la++QphcwHwYDVR0j
BBgwFoAU1HANjm8CJXGgsm/NTHDAQI6k/8kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvNmFiOTZlN2E2MTMwNDk4YWE5ODEzZDdlZTViYmVkMzEvMTEvRDQ3MDBEOEU2
RjAyMjU3MUEwQjI2RkNENEM3MEMwNDA4RUE0RkZDOS5jcmwwZAYIKwYBBQUHAQEE
WDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzFIQU5qbThDSlhHZ3NtX05USERBUUk2a184ay5jZXIwgaMGCCsG
AQUFBwELBIGWMIGTMIGQBggrBgEFBQcwC4aBg3JzeW5jOi8vcnBraS1ycHMuYXJp
bi5uZXQvcmVwb3NpdG9yeS82YWI5NmU3YTYxMzA0OThhYTk4MTNkN2VlNWJiZWQz
MS8xMS8zMjYxMzEzMzNhNjMzMDMwMzczYTM4MzgzMDMwM2EzYTJmMzMzNzJkMzQz
ODIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB
BQUHAQcBAf8EEjAQMA4EAgACMAgDBgMqE8AHiDANBgkqhkiG9w0BAQsFAAOCAQEA
o5Wjo02Apnmxx2NbURHbNteqR6IAm7BGOtCV5F5qP+kix1DYdDOT7Qr+8AJGfsoW
lg3cbM56TcrXupjUgoYKrmXH4HBL3SabBHTq5vHBIj3+9ne0ITMOivecSXqYhAzy
iDUzFZBBUDs3ZgStOCh99iaV6bZsD2iTGQ/t3G8GITn5ldcHwSsuhqic1EbaLcGv
e2rfj1j9bPA3LhAQALXePT4uIGe2/FjN9hQvxx9YpBN5y+mEjUj3/3nsM8PENGPi
xco02KeANiBAeO3Y+VSr7L3xKK6Iffj0j2bS+dr7CdFzTuUjjVCK+XnqX5LbDw2M
VpjJyyg6TlzJDLW8FQvgaw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:07:08 2025 by rpki-client