Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/11/326131333a633030373a3a2f33332d3438203d3e2030.roa
File: 326131333a633030373a3a2f33332d3438203d3e2030.roa (raw, json)
Hash identifier: 4ogO7FSYIWTMHa7NHAKjnemXmD5Q4AEg/2Lor8ugtNI=
Subject key identifier: A5:07:AD:C1:27:0C:2F:C9:AC:FA:15:BA:39:87:8B:5F:F2:46:A5:29
Certificate issuer: /CN=d4700d8e6f022571a0b26fcd4c70c0408ea4ffc9
Certificate serial: 3ECC41A4B57717B679FC28764B1A9E6A5FDD6A2A
Authority key identifier: D4:70:0D:8E:6F:02:25:71:A0:B2:6F:CD:4C:70:C0:40:8E:A4:FF:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HANjm8CJXGgsm_NTHDAQI6k_8k.cer
Subject info access: rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/11/326131333a633030373a3a2f33332d3438203d3e2030.roa
Signing time: Mon 16 Jun 2025 22:09:40 +0000
ROA not before: Mon 16 Jun 2025 22:04:40 +0000
ROA not after: Mon 15 Jun 2026 22:09:40 +0000
asID: 0
IP address blocks: 2a13:c007::/33 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/11/D4700D8E6F022571A0B26FCD4C70C0408EA4FFC9.crl
rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/11/D4700D8E6F022571A0B26FCD4C70C0408EA4FFC9.mft
rsync://rpki.ripe.net/repository/DEFAULT/1HANjm8CJXGgsm_NTHDAQI6k_8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:47:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:cc:41:a4:b5:77:17:b6:79:fc:28:76:4b:1a:9e:6a:5f:dd:6a:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4700d8e6f022571a0b26fcd4c70c0408ea4ffc9
Validity
Not Before: Jun 16 22:04:40 2025 GMT
Not After : Jun 15 22:09:40 2026 GMT
Subject: CN=A507ADC1270C2FC9ACFA15BA39878B5FF246A529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1c:ce:15:db:65:70:ca:34:97:5d:85:56:e0:
ee:a8:d8:bf:8d:b2:d0:7f:4f:e8:3b:b8:68:cc:a1:
ec:54:d4:ed:5b:fa:2f:7c:5a:1d:47:7a:ff:15:e1:
60:ea:91:f0:26:a1:ec:fc:a5:c5:d6:cd:41:f2:22:
da:d5:51:f5:6a:1e:c1:01:61:9f:3d:da:06:07:2e:
a6:86:87:48:07:26:d8:d2:cc:bb:d3:ba:76:a9:06:
93:f2:0c:9b:21:20:c8:cd:63:cb:a5:80:25:3a:0a:
c2:f1:ec:79:cb:2f:4d:a5:7f:b3:9c:d1:06:2f:83:
3f:f9:ba:4e:d9:5b:ac:8c:eb:4d:f0:79:28:ce:a8:
fb:62:13:8e:ea:45:8d:46:de:24:11:a8:99:02:22:
2f:98:43:79:3c:2a:d4:fc:a1:56:6f:66:a2:b3:d9:
90:3a:31:ac:1a:31:ef:5d:2e:5a:1b:e7:7f:97:ac:
08:96:d3:f4:24:9f:b5:fb:fd:51:a4:93:78:f8:a9:
ce:41:74:23:ca:30:5f:18:55:5f:42:72:43:82:13:
6c:72:fe:a4:55:9d:0b:61:c1:97:b9:5e:e0:29:ce:
10:7e:e6:33:3b:ed:d8:fa:6d:5a:f3:83:33:3c:ca:
6b:3e:bd:0e:47:d7:47:a8:22:99:1d:a4:9f:ff:d8:
c2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:07:AD:C1:27:0C:2F:C9:AC:FA:15:BA:39:87:8B:5F:F2:46:A5:29
X509v3 Authority Key Identifier:
keyid:D4:70:0D:8E:6F:02:25:71:A0:B2:6F:CD:4C:70:C0:40:8E:A4:FF:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/11/D4700D8E6F022571A0B26FCD4C70C0408EA4FFC9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HANjm8CJXGgsm_NTHDAQI6k_8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/11/326131333a633030373a3a2f33332d3438203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c007::/33
Signature Algorithm: sha256WithRSAEncryption
5e:c1:71:fd:25:92:52:17:6b:29:39:f0:bf:89:a5:dd:83:df:
72:d2:63:94:62:4c:f8:c0:75:61:6e:68:e5:dc:c5:d6:38:37:
bb:cb:52:fb:b0:ca:cf:17:9c:b0:9c:62:df:14:f3:35:1e:22:
6a:68:79:6a:05:0b:6f:be:ac:73:00:ae:23:b4:6d:c8:1a:fe:
b4:97:5d:05:9e:1d:93:07:29:bc:b4:dc:99:75:78:94:24:c6:
c4:c7:41:63:3e:0d:eb:a2:8e:1d:bb:4f:f4:5e:1e:dd:93:16:
1f:52:a1:d8:b3:25:c5:cb:fa:82:8b:76:5e:77:08:ce:d4:d6:
d5:21:25:9a:d0:83:e0:ad:a4:b2:f1:6e:91:2f:56:e8:8f:4e:
c9:43:06:a3:07:fa:ff:4c:41:00:2a:f7:59:1c:86:e2:c3:89:
e0:8d:f3:35:60:0f:25:9a:72:a0:cd:f3:f6:74:e7:3e:44:d5:
b9:bc:af:6a:c3:e5:aa:f1:a9:f7:83:39:e1:4a:9f:75:cd:7f:
10:6f:ed:3b:13:f8:17:a5:ef:47:90:dc:a8:74:d6:8c:6d:90:
c8:4a:c2:d6:85:db:3c:cc:b8:e4:37:25:6e:79:a3:43:97:b7:
17:21:3a:c7:8d:81:ae:0a:4f:b2:0b:83:bc:d3:b4:5e:3f:31:
17:6c:fc:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 07:22:33 2025 by rpki-client