Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS399155.roa
File: AS399155.roa (raw, json)
Hash identifier: zvhicMDhVHY6WfYxS55RFkv1qTmGTCWgV3jcaS4PJWY=
Subject key identifier: 67:B0:2C:E0:D9:B3:E7:F7:54:92:42:26:AA:7E:7C:4A:2F:25:09:19
Certificate issuer: /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial: 7A292D6E9B3C512CC8D83A4003C484F922D93653
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS399155.roa
Signing time: Sat 07 Dec 2024 11:13:25 +0000
ROA not before: Sat 07 Dec 2024 11:08:25 +0000
ROA not after: Sat 06 Dec 2025 11:13:25 +0000
asID: 399155
IP address blocks: 2607:f740:e:39::/64 maxlen: 64
2607:f740:e:40::/64 maxlen: 64
2607:f740:e:41::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 13 Apr 2025 09:07:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:29:2d:6e:9b:3c:51:2c:c8:d8:3a:40:03:c4:84:f9:22:d9:36:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Validity
Not Before: Dec 7 11:08:25 2024 GMT
Not After : Dec 6 11:13:25 2025 GMT
Subject: CN=67B02CE0D9B3E7F754924226AA7E7C4A2F250919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ae:55:4f:fb:fe:d8:7e:a8:82:93:9a:b7:06:
d9:aa:2e:26:75:f1:df:12:33:65:cd:0e:8e:22:aa:
7a:47:b7:f1:d1:05:c7:c0:42:d4:bf:66:82:af:67:
ce:56:81:69:5c:d4:5a:92:fa:23:3b:89:18:c9:6b:
0c:fc:83:f7:50:ba:72:c8:bf:f8:7b:25:e5:bd:b0:
2e:32:ca:16:a3:98:54:ac:8a:65:cd:84:2b:e1:df:
57:94:3b:b5:13:1e:12:ea:3d:6e:7d:9d:65:60:26:
a6:1f:e9:e0:fb:3e:39:aa:ec:3e:36:52:7c:aa:46:
6b:4e:b1:c3:89:7f:c6:52:b4:fe:51:3d:59:ed:36:
8c:8c:00:6f:61:23:88:d5:53:37:11:2c:09:33:d4:
ec:29:60:90:81:fd:7a:a1:1c:f7:e3:68:59:82:f4:
86:b2:fe:c7:eb:9f:cf:3a:79:36:75:11:53:4e:65:
be:72:75:b2:d7:c6:c7:f9:12:35:06:9b:28:97:2a:
74:c5:f0:01:67:71:08:bd:e1:ad:ea:d3:1d:b0:06:
fe:fb:35:44:ef:b6:d3:27:32:2e:60:a5:b2:5b:d2:
68:b1:71:56:08:2b:dc:8e:16:74:72:3b:83:38:7f:
5f:8b:78:fa:71:57:05:a4:d0:ca:17:b8:68:a6:74:
ad:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B0:2C:E0:D9:B3:E7:F7:54:92:42:26:AA:7E:7C:4A:2F:25:09:19
X509v3 Authority Key Identifier:
keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS399155.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2607:f740:e:39::/64
2607:f740:e:40::/63
Signature Algorithm: sha256WithRSAEncryption
9f:c7:f3:80:6b:f2:25:b1:db:5f:82:96:c5:12:9c:58:98:ac:
60:f8:06:ad:d0:eb:47:66:79:7b:d9:90:a2:3d:37:c3:38:4c:
90:43:bc:87:4b:47:f7:5f:f2:db:8a:e9:76:41:de:e3:8e:c8:
b6:4b:03:81:73:8d:5f:6e:0b:91:55:06:56:a2:07:5f:41:7f:
09:69:43:0f:d2:ea:f3:ed:9b:91:9d:f2:52:32:62:af:ef:c6:
c1:ba:2f:eb:d5:47:58:b2:66:6f:b8:d0:b4:90:90:31:3f:51:
40:69:2b:d2:85:f6:9c:dd:e4:da:46:90:0f:f4:bd:ac:d4:7c:
fc:85:7d:e1:69:8f:cf:91:5f:16:f1:d3:a2:2e:f8:df:63:1a:
bc:b0:b6:68:de:dc:03:73:77:5f:30:69:67:18:90:b4:eb:3c:
b9:3e:38:14:21:f9:66:02:bd:f8:d4:47:14:4e:c7:bf:44:41:
78:7b:81:c1:89:e4:59:50:47:6d:c6:41:7e:50:4c:52:92:6c:
42:0f:c4:ee:8e:9e:d2:c5:d1:39:7d:6a:bb:29:0a:e3:48:c5:
b4:32:3c:a7:a2:d4:8d:e3:15:44:29:84:b2:f6:d9:b8:c3:31:
47:be:10:68:2d:7e:7f:ec:ca:5f:d9:e0:80:1b:df:c6:17:22:
d6:7b:0a:28
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIUeiktbps8USzI2DpAA8SE+SLZNlMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWZmNGUyNWM0NThlNDRlMjUyOTIyZGNmNTEyYTU2OGRm
ZTA5ODI0MmQwMGNiNjVhM2QwHhcNMjQxMjA3MTEwODI1WhcNMjUxMjA2MTExMzI1
WjAzMTEwLwYDVQQDEyg2N0IwMkNFMEQ5QjNFN0Y3NTQ5MjQyMjZBQTdFN0M0QTJG
MjUwOTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwq5VT/v+2H6o
gpOatwbZqi4mdfHfEjNlzQ6OIqp6R7fx0QXHwELUv2aCr2fOVoFpXNRakvojO4kY
yWsM/IP3ULpyyL/4eyXlvbAuMsoWo5hUrIplzYQr4d9XlDu1Ex4S6j1ufZ1lYCam
H+ng+z45quw+NlJ8qkZrTrHDiX/GUrT+UT1Z7TaMjABvYSOI1VM3ESwJM9TsKWCQ
gf16oRz342hZgvSGsv7H65/POnk2dRFTTmW+cnWy18bH+RI1Bpsolyp0xfABZ3EI
veGt6tMdsAb++zVE77bTJzIuYKWyW9JosXFWCCvcjhZ0cjuDOH9fi3j6cVcFpNDK
F7hopnStZQIDAQABo4ICjzCCAoswHQYDVR0OBBYEFGewLODZs+f3VJJCJqp+fEov
JQkZMB8GA1UdIwQYMBaAFACZ3qsHPv10wlDAo4KyUBK1CCruMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzZjY4NjYxMDg0Yjg2LzAv
MDA5OURFQUIwNzNFRkQ3NEMyNTBDMEEzODJCMjUwMTJCNTA4MkFFRS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzMwZDQyMmRjLTk4ZDEtNDMwNC05ZjhhLTA5NzEyN2UxNWQ1ZS8xZmY0
ZTI1YzQ1OGU0NGUyNTI5MjJkY2Y1MTJhNTY4ZGZlMDk4MjQyZDAwY2I2NWEzZC5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODNmNjg2NjEw
ODRiODYvMC9BUzM5OTE1NS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAv
BggrBgEFBQcBBwEB/wQgMB4wHAQCAAIwFgMJACYH90AADgA5AwkBJgf3QAAOAEAw
DQYJKoZIhvcNAQELBQADggEBAJ/H84Br8iWx21+ClsUSnFiYrGD4Bq3Q60dmeXvZ
kKI9N8M4TJBDvIdLR/df8tuK6XZB3uOOyLZLA4FzjV9uC5FVBlaiB19BfwlpQw/S
6vPtm5Gd8lIyYq/vxsG6L+vVR1iyZm+40LSQkDE/UUBpK9KF9pzd5NpGkA/0vazU
fPyFfeFpj8+RXxbx06Iu+N9jGrywtmje3ANzd18waWcYkLTrPLk+OBQh+WYCvfjU
RxROx79EQXh7gcGJ5FlQR23GQX5QTFKSbEIPxO6OntLF0Tl9arspCuNIxbQyPKei
1I3jFUQphLL22bjDMUe+EGgtfn/syl/Z4IAb38YXItZ7Cig=
-----END CERTIFICATE-----
Generated at Sat Apr 12 17:44:02 2025 by rpki-client