Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a32303a3a2f34382d3438203d3e203336323336.roa
File: 326130303a646438303a32303a3a2f34382d3438203d3e203336323336.roa (raw, json)
Hash identifier: 733q0/9/h+ARXtym3Z3BWh7xEvPsMoz4J8iwuVxMwjc=
Subject key identifier: 60:1E:FA:48:54:B3:BB:9A:E2:8E:EE:BD:75:6C:96:02:B8:22:D8:20
Certificate issuer: /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial: 2F59D0C3D4758A21A636D567E4FCA5E31684F5C2
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a32303a3a2f34382d3438203d3e203336323336.roa
Signing time: Mon 06 Jul 2026 20:29:07 +0000
ROA not before: Mon 06 Jul 2026 20:24:07 +0000
ROA not after: Mon 05 Jul 2027 20:29:07 +0000
asID: 36236
IP address blocks: 2a00:dd80:20::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:27:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:59:d0:c3:d4:75:8a:21:a6:36:d5:67:e4:fc:a5:e3:16:84:f5:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Validity
Not Before: Jul 6 20:24:07 2026 GMT
Not After : Jul 5 20:29:07 2027 GMT
Subject: CN=601EFA4854B3BB9AE28EEEBD756C9602B822D820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bc:2d:3b:b9:39:bd:70:94:f6:33:02:d2:3e:
d7:11:23:a3:8d:49:00:6e:71:ab:38:19:89:80:6a:
cb:f3:05:fc:bd:15:85:98:12:a9:0f:08:af:32:a2:
fe:f3:a5:a9:8c:e2:4a:4c:4b:36:43:f8:60:9c:1c:
8d:32:4d:98:ce:92:b8:22:44:9b:09:b9:dc:7d:37:
17:0a:87:5b:b2:d8:be:9e:47:73:36:87:2a:a1:72:
d6:07:1f:31:02:bc:66:61:c9:a9:1c:77:79:43:37:
f5:90:a8:6d:fb:ad:37:28:82:7b:f1:eb:7e:68:48:
97:f3:a9:4a:82:70:71:a7:34:9e:83:ac:a3:94:a3:
fe:3f:46:ed:35:f3:45:7d:e3:ea:35:b3:31:a4:ca:
f0:ef:28:88:7a:21:b0:c9:44:d4:91:d9:6b:fa:cb:
bd:37:23:43:91:c8:cd:41:9d:9f:81:58:2d:b1:49:
27:d3:c8:98:9a:70:ae:ab:ef:7f:d8:b9:7c:f0:22:
ac:b0:19:d8:e5:a4:83:a3:24:db:c6:b3:27:3f:fd:
ec:4e:b4:7e:a2:ab:54:44:93:e0:ce:a3:ac:95:2c:
c0:94:ba:6b:2f:e2:03:36:62:1b:7c:78:ec:d4:dd:
06:19:52:59:38:aa:56:ab:3e:78:09:18:51:b4:ec:
54:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:1E:FA:48:54:B3:BB:9A:E2:8E:EE:BD:75:6C:96:02:B8:22:D8:20
X509v3 Authority Key Identifier:
keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a32303a3a2f34382d3438203d3e203336323336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:dd80:20::/48
Signature Algorithm: sha256WithRSAEncryption
27:a2:f7:98:47:dd:dc:ac:b0:06:b7:c5:63:7e:93:37:be:11:
a9:c1:e1:fe:67:94:03:2b:48:36:4f:c1:36:0a:b0:28:0b:2e:
35:36:1e:e3:47:26:19:e9:44:4f:78:96:62:6f:87:b9:74:5f:
99:a9:7c:b7:98:23:9d:ae:d5:8e:df:e1:1e:65:da:43:eb:53:
ca:ed:7c:e8:1e:54:e4:16:c2:91:b9:92:62:0b:6a:6a:dd:98:
4f:60:97:12:1f:c7:49:db:af:d1:73:00:b6:83:4a:2a:0d:69:
07:4f:14:3d:4d:89:d5:46:4f:3f:34:4c:86:b8:83:17:a6:d5:
c1:b3:d5:a3:46:fe:50:c2:fc:52:96:5e:9c:94:7b:c3:0d:9c:
d2:15:a4:01:8b:2a:57:f7:43:e7:5b:38:1d:27:b8:db:93:6d:
56:e6:cd:3a:81:e6:53:94:e5:62:cd:df:32:ee:1b:52:f1:d7:
76:ce:e2:c1:0c:36:06:55:79:3e:03:ac:5a:2e:5f:11:aa:cf:
71:71:d2:54:23:32:1c:73:a1:c5:b7:78:60:78:7f:0e:13:fc:
9f:4c:b7:99:21:53:09:95:f9:6a:f4:d6:ce:30:b0:b5:13:ba:
3c:1c:c6:c6:3b:92:45:d6:3d:e1:5e:69:47:ec:47:3e:0e:d7:
da:93:4c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:03:33 2026 by rpki-client