Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a34323a3a2f34382d3438203d3e203336323336.roa
File: 326130303a646438303a34323a3a2f34382d3438203d3e203336323336.roa (raw, json)
Hash identifier: 8nyzSwrHAD9bfNok7smyJLpinl/n4Cty5rhcLWFdEsM=
Subject key identifier: 89:D1:35:05:36:80:F0:94:1E:54:B3:9F:1F:B8:AE:35:DA:30:01:EC
Certificate issuer: /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial: 3B27D869AD8A765890D2AD37F5143C928C3466FB
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a34323a3a2f34382d3438203d3e203336323336.roa
Signing time: Mon 06 Jul 2026 20:29:07 +0000
ROA not before: Mon 06 Jul 2026 20:24:07 +0000
ROA not after: Mon 05 Jul 2027 20:29:07 +0000
asID: 36236
IP address blocks: 2a00:dd80:42::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:27:d8:69:ad:8a:76:58:90:d2:ad:37:f5:14:3c:92:8c:34:66:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Validity
Not Before: Jul 6 20:24:07 2026 GMT
Not After : Jul 5 20:29:07 2027 GMT
Subject: CN=89D135053680F0941E54B39F1FB8AE35DA3001EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:85:e8:6c:9a:b4:eb:b1:97:71:e6:21:ea:11:
0a:08:df:40:f5:68:10:54:b4:3d:fa:59:58:19:dd:
73:31:c1:90:fb:00:eb:d1:c9:a8:ef:8e:5d:36:0f:
e6:4f:43:b0:7f:05:68:09:e9:39:70:0c:b4:dc:b8:
e1:95:65:5a:8b:65:80:52:cc:56:43:aa:83:92:ca:
cf:91:93:34:11:dc:4f:c9:00:c4:4a:5e:31:01:43:
b0:86:1f:9e:8c:9f:2f:5a:f0:62:41:31:d5:52:bf:
96:40:e0:ea:bf:56:e5:a6:11:eb:a4:9f:27:9a:fa:
7b:b5:5e:b8:d7:aa:c5:db:9c:02:4a:fc:33:0c:5e:
74:c6:c4:af:b6:60:96:76:8e:a6:6c:1e:bf:c7:80:
62:75:bb:7d:bc:1a:4a:48:64:d9:6e:33:ef:e8:53:
6d:9d:20:bd:b7:2b:cb:6f:c9:b7:5a:26:9c:c3:37:
72:1c:ab:85:7a:ab:43:12:e2:b5:e4:9a:fe:10:54:
dc:15:8b:a4:7e:ba:b4:17:51:9a:51:e0:d5:10:31:
6d:7e:cb:d9:e1:0e:f9:97:a8:28:56:fc:67:9a:9b:
d3:a4:22:16:01:29:8b:b0:8f:69:a2:1b:ee:3c:2c:
ab:c2:6e:ed:d8:29:fb:43:fe:fe:bd:1e:61:9c:5b:
09:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D1:35:05:36:80:F0:94:1E:54:B3:9F:1F:B8:AE:35:DA:30:01:EC
X509v3 Authority Key Identifier:
keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a34323a3a2f34382d3438203d3e203336323336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:dd80:42::/48
Signature Algorithm: sha256WithRSAEncryption
67:1f:4a:ca:8f:7e:44:81:3f:41:3c:75:93:06:0e:03:e7:99:
bd:f3:a8:8f:ea:9a:ab:32:1a:24:85:22:23:9b:07:0f:b2:33:
74:2e:fd:dd:f3:ac:ff:c2:14:a6:ed:7f:11:3e:ec:22:38:8e:
96:d4:43:5d:88:f6:74:c7:e2:89:03:77:91:c1:36:41:13:a7:
3e:b1:f5:a3:e8:cc:3e:d9:6c:0f:2b:8a:f4:65:27:9a:f3:30:
04:fb:88:c5:65:8d:b2:7d:f3:ad:61:b6:5f:33:b5:87:66:c1:
34:cc:f1:0b:af:85:08:82:87:46:25:6c:61:fa:4b:a6:33:5a:
c3:b1:79:a6:c1:53:99:f1:77:b2:83:f8:0b:57:1e:df:ed:35:
d6:1f:1a:f9:b0:04:51:cf:76:b6:c9:51:cc:21:44:a0:ca:a0:
50:3e:ee:e8:00:97:0a:27:fc:e0:82:53:ed:a7:95:98:b0:e6:
ca:36:4a:fc:e6:66:77:36:06:ae:e1:b3:67:4b:10:9e:56:b4:
2a:23:77:19:f9:d2:32:7e:7a:c5:27:b9:7c:61:9a:83:f1:e6:
bc:f7:77:d3:9c:4d:d5:d4:b2:6c:65:a8:81:7a:7e:d4:14:28:
10:92:84:c9:72:13:db:79:d8:c0:fe:de:be:55:10:28:7d:e2:
e3:eb:c1:ed
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgIUOyfYaa2KdliQ0q039RQ8kow0ZvswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZWIyYzdlNjI1MDNiMDYzNGViNGFiNTNmODhjMDY5NTBh
Yzc2ZGNkMTAeFw0yNjA3MDYyMDI0MDdaFw0yNzA3MDUyMDI5MDdaMDMxMTAvBgNV
BAMTKDg5RDEzNTA1MzY4MEYwOTQxRTU0QjM5RjFGQjhBRTM1REEzMDAxRUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8hehsmrTrsZdx5iHqEQoI30D1
aBBUtD36WVgZ3XMxwZD7AOvRyajvjl02D+ZPQ7B/BWgJ6TlwDLTcuOGVZVqLZYBS
zFZDqoOSys+RkzQR3E/JAMRKXjEBQ7CGH56Mny9a8GJBMdVSv5ZA4Oq/VuWmEeuk
nyea+nu1XrjXqsXbnAJK/DMMXnTGxK+2YJZ2jqZsHr/HgGJ1u328GkpIZNluM+/o
U22dIL23K8tvybdaJpzDN3Icq4V6q0MS4rXkmv4QVNwVi6R+urQXUZpR4NUQMW1+
y9nhDvmXqChW/Geam9OkIhYBKYuwj2miG+48LKvCbu3YKftD/v69HmGcWwn/AgMB
AAGjggIpMIICJTAdBgNVHQ4EFgQUidE1BTaA8JQeVLOfH7iuNdowAewwHwYDVR0j
BBgwFoAU6yx+YlA7BjTrSrU/iMBpUKx23NEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODNmNjg2NjEwODRiODYvMS9FQjJDN0U2MjUw
M0IwNjM0RUI0QUI1M0Y4OEMwNjk1MEFDNzZEQ0QxLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNnl4LVlsQTdCalRyU3JVX2lNQnBVS3gyM05FLmNlcjCBpgYIKwYB
BQUHAQsEgZkwgZYwgZMGCCsGAQUFBzALhoGGcnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzZjY4NjYxMDg0Yjg2
LzEvMzI2MTMwMzAzYTY0NjQzODMwM2EzNDMyM2EzYTJmMzQzODJkMzQzODIwM2Qz
ZTIwMzMzNjMyMzMzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoA3YAAQjANBgkqhkiG9w0BAQsFAAOC
AQEAZx9Kyo9+RIE/QTx1kwYOA+eZvfOoj+qaqzIaJIUiI5sHD7IzdC793fOs/8IU
pu1/ET7sIjiOltRDXYj2dMfiiQN3kcE2QROnPrH1o+jMPtlsDyuK9GUnmvMwBPuI
xWWNsn3zrWG2XzO1h2bBNMzxC6+FCIKHRiVsYfpLpjNaw7F5psFTmfF3soP4C1ce
3+011h8a+bAEUc92tslRzCFEoMqgUD7u6ACXCif84IJT7aeVmLDmyjZK/OZmdzYG
ruGzZ0sQnla0KiN3GfnSMn56xSe5fGGag/HmvPd305xN1dSybGWogXp+1BQoEJKE
yXIT23nYwP7evlUQKH3i4+vB7Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:01:57 2026 by rpki-client