Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33663a3a2f34382d3438203d3e203336323336.roa
File: 326130303a646438303a33663a3a2f34382d3438203d3e203336323336.roa (raw, json)
Hash identifier: CaBirM3a34SBtc0ABz7ILlJlEotffr7q+p9YrrVJmhA=
Subject key identifier: AA:3A:5C:35:26:F1:CE:DF:BA:4B:C1:27:FA:B4:03:9B:B9:EB:05:9B
Certificate issuer: /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial: 3E30BA8DE1C34B3932CC84A1BEC5A76A3E0B6DC8
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33663a3a2f34382d3438203d3e203336323336.roa
Signing time: Mon 06 Jul 2026 20:29:07 +0000
ROA not before: Mon 06 Jul 2026 20:24:07 +0000
ROA not after: Mon 05 Jul 2027 20:29:07 +0000
asID: 36236
IP address blocks: 2a00:dd80:3f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:27:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:30:ba:8d:e1:c3:4b:39:32:cc:84:a1:be:c5:a7:6a:3e:0b:6d:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Validity
Not Before: Jul 6 20:24:07 2026 GMT
Not After : Jul 5 20:29:07 2027 GMT
Subject: CN=AA3A5C3526F1CEDFBA4BC127FAB4039BB9EB059B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:bf:08:27:5f:f0:79:7d:41:11:75:b0:fc:d8:
f8:12:86:57:ad:b4:a3:09:c3:43:1c:8e:f0:06:cc:
0d:8f:09:6f:9a:96:9f:6d:c4:f9:d8:e3:e8:f6:35:
3d:a1:c9:41:c7:b8:3a:95:ff:d6:03:7f:09:ff:78:
5c:53:61:2d:96:aa:32:b5:f5:48:3f:db:ff:b5:d3:
86:26:30:32:b8:3e:01:f2:fc:2c:20:24:8c:79:75:
9f:54:0c:36:14:42:a1:4c:cd:8e:b4:1a:82:70:0f:
22:a4:af:2d:64:bc:29:87:33:a6:95:9d:76:ce:b0:
92:18:be:07:35:0d:25:0c:d3:ad:9f:bb:25:ff:f7:
47:41:51:a7:bd:6d:5a:ef:50:8b:34:2d:5e:07:d4:
88:b4:54:aa:74:2b:d1:82:95:52:8e:07:66:6d:7d:
55:a1:0f:76:71:fb:86:1a:cf:4b:ca:19:7f:05:d4:
53:c0:e4:be:13:02:99:22:5d:41:1f:78:6d:68:6a:
b7:72:86:ab:0a:58:bb:01:d4:2a:39:fe:c3:94:64:
e0:06:c3:79:bb:7f:e4:1d:7b:bf:f8:d1:e1:3a:bd:
dc:08:ff:cc:f4:6e:4f:91:d3:4a:94:71:60:6e:1d:
45:f6:50:90:f1:d5:88:fb:3f:73:e7:73:b5:98:21:
59:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:3A:5C:35:26:F1:CE:DF:BA:4B:C1:27:FA:B4:03:9B:B9:EB:05:9B
X509v3 Authority Key Identifier:
keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33663a3a2f34382d3438203d3e203336323336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:dd80:3f::/48
Signature Algorithm: sha256WithRSAEncryption
42:3b:53:77:b8:2d:18:bc:74:7f:7a:35:68:b6:c4:c9:ae:1b:
3c:42:a6:a9:df:81:22:a6:ad:b7:aa:94:3a:94:cc:92:2f:5b:
09:b2:c3:ff:a3:44:1f:55:9a:85:82:e4:9d:5b:b5:0c:40:87:
97:85:00:8c:48:ae:b5:09:c0:8f:19:74:58:63:3b:b3:ab:30:
b0:e0:df:93:29:33:83:4c:df:1e:27:76:2a:2d:dc:1f:1b:62:
fe:bf:5c:89:b8:9c:e4:c5:fc:10:9a:16:c1:77:ae:a1:51:c0:
c7:63:fb:7c:4a:53:b9:be:f4:dc:06:40:82:99:87:f1:38:7c:
4f:7e:54:09:84:86:c2:83:ad:d1:35:10:56:95:a8:9c:cc:bc:
48:ef:b7:bd:36:a4:22:2d:e1:e3:73:1b:f2:51:2f:5c:7e:a3:
c9:5b:97:c3:71:9e:df:7b:61:27:3f:6c:49:38:71:9d:3a:bf:
54:24:2a:ab:94:78:13:06:8a:ab:61:63:a6:8a:74:ef:f4:7d:
76:bd:d6:78:e7:19:4e:6f:53:5d:c5:2a:11:94:ff:6e:cb:09:
21:07:28:e8:44:1b:d7:b9:ff:54:34:3c:8c:7c:56:69:17:86:
2e:51:c8:77:db:93:ee:2f:24:88:03:34:47:69:ea:19:dc:e2:
87:51:09:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:52:07 2026 by rpki-client