Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3137362e35382e38392e302f32342d3234203d3e203336323336.roa
File: 3137362e35382e38392e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier: pHQEjC7aJmSWv79buCOiJ/isQjhtu15DPnBmwPRK24M=
Subject key identifier: CD:AA:92:23:37:FD:DE:4A:7A:2C:25:1B:FD:C3:62:5A:6C:63:5E:67
Certificate issuer: /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial: 51E4861DDD03586BF2DE624321E18253B48EA560
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3137362e35382e38392e302f32342d3234203d3e203336323336.roa
Signing time: Mon 06 Jul 2026 23:29:11 +0000
ROA not before: Mon 06 Jul 2026 23:24:11 +0000
ROA not after: Mon 05 Jul 2027 23:29:11 +0000
asID: 36236
IP address blocks: 176.58.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:e4:86:1d:dd:03:58:6b:f2:de:62:43:21:e1:82:53:b4:8e:a5:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Validity
Not Before: Jul 6 23:24:11 2026 GMT
Not After : Jul 5 23:29:11 2027 GMT
Subject: CN=CDAA922337FDDE4A7A2C251BFDC3625A6C635E67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:f8:6b:da:56:01:c7:e9:59:7b:da:0e:83:e4:
43:78:9b:35:7e:c5:fd:c9:56:80:3a:8b:02:ff:99:
0a:01:fc:dd:b6:72:1e:5c:39:86:f9:7d:a4:3e:ee:
26:19:2e:35:25:b5:81:d0:83:dd:eb:88:0b:5a:c3:
6d:89:74:5c:d8:c3:04:fb:13:8a:9a:fe:4a:61:e5:
6f:ca:6b:ef:01:25:68:8d:f5:f0:8b:26:07:3b:96:
b8:ad:cc:2d:4c:a4:45:5f:0b:ab:07:67:be:f1:cf:
ab:c8:ad:d1:2e:dc:ca:48:ca:a2:8c:da:c3:f9:be:
3f:f8:86:06:97:ee:25:0f:ae:a5:d7:84:18:97:92:
34:e5:24:a4:e4:06:e0:57:d1:58:23:e4:62:4e:e3:
2b:6f:15:24:85:3e:75:5d:6e:3f:ed:ca:c1:c5:20:
67:aa:b7:16:83:a4:6b:98:bc:c0:35:00:e6:a6:42:
0e:be:03:91:09:fa:09:85:50:ae:09:98:87:5c:74:
f8:4f:32:10:52:9d:b0:7d:2c:c2:9b:c9:3a:4e:b1:
31:34:04:c9:95:96:ea:d5:09:ab:60:f8:c0:0c:64:
11:76:a3:43:49:58:2e:50:bc:97:7f:53:2c:fc:f8:
9d:be:d8:fc:87:a3:5e:55:dc:2a:36:58:fc:c8:cc:
b1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:AA:92:23:37:FD:DE:4A:7A:2C:25:1B:FD:C3:62:5A:6C:63:5E:67
X509v3 Authority Key Identifier:
keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3137362e35382e38392e302f32342d3234203d3e203336323336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.58.89.0/24
Signature Algorithm: sha256WithRSAEncryption
26:4f:b5:0d:7f:3f:b5:61:64:e6:43:3e:7f:2b:4d:7b:ca:8a:
9b:b1:91:e1:a0:3f:97:b5:09:84:bc:c6:eb:f1:7a:33:87:8d:
ae:74:ad:54:fb:ca:6e:a3:1b:4e:6e:f1:19:e5:43:54:ac:a6:
59:25:f6:f3:2d:d4:bf:dc:46:ed:59:19:60:72:72:ea:ac:fc:
63:6a:43:31:a3:45:1e:3a:52:bd:73:3b:cd:04:c9:95:ab:4f:
c9:72:75:14:39:43:e6:d6:c9:7a:ad:1b:20:97:16:1b:7b:40:
da:00:f8:1c:2b:5c:da:fc:a4:3c:9a:07:48:45:fa:99:be:bd:
82:f0:2a:bd:ab:9f:a9:38:c2:47:44:ab:e7:2f:10:31:34:b4:
2b:fc:c0:41:57:27:ba:c7:92:a6:e1:80:78:b6:54:b7:6c:f5:
e9:8a:fa:36:57:a7:5f:0b:9e:8e:2f:8a:76:dc:02:ff:28:9d:
f5:ea:b9:1d:42:c2:52:42:7e:3e:5c:b5:69:aa:bd:bb:92:5c:
36:07:44:9b:f2:f8:73:27:86:e3:e3:3a:38:c1:0c:d9:54:95:
ca:3a:c7:35:e9:ab:06:a4:f8:cc:55:d6:d8:37:87:c1:e0:10:
f8:d9:78:bb:40:63:f0:cf:ab:95:d9:57:19:29:46:8b:48:ee:
9b:e6:10:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:28:07 2026 by rpki-client