Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS201341.roa
File: AS201341.roa (raw, json)
Hash identifier: L24AgrB9tq0b57ue0eH9vNGc12RJ2aTa7VJM90GJzxE=
Subject key identifier: 5A:1B:36:28:77:7D:ED:6B:E5:69:7A:92:F6:DC:61:6D:C2:F2:B2:02
Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial: 7E7DCC3053D00DFD855C8A7DCA51C424C905BF22
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS201341.roa
Signing time: Mon 27 Jan 2025 15:28:26 +0000
ROA not before: Mon 27 Jan 2025 15:23:26 +0000
ROA not after: Mon 26 Jan 2026 15:28:26 +0000
asID: 201341
IP address blocks: 140.99.81.0/24 maxlen: 24
140.99.86.0/24 maxlen: 24
140.99.140.0/24 maxlen: 24
140.99.141.0/24 maxlen: 24
140.99.142.0/24 maxlen: 24
140.99.143.0/24 maxlen: 24
140.99.148.0/24 maxlen: 24
140.99.149.0/24 maxlen: 24
140.99.150.0/24 maxlen: 24
140.99.152.0/24 maxlen: 24
140.99.153.0/24 maxlen: 24
140.99.154.0/24 maxlen: 24
140.99.155.0/24 maxlen: 24
140.99.156.0/24 maxlen: 24
140.99.157.0/24 maxlen: 24
140.99.158.0/24 maxlen: 24
140.99.159.0/24 maxlen: 24
140.99.160.0/24 maxlen: 24
140.99.161.0/24 maxlen: 24
140.99.162.0/24 maxlen: 24
140.99.163.0/24 maxlen: 24
140.99.165.0/24 maxlen: 24
140.99.166.0/24 maxlen: 24
140.99.167.0/24 maxlen: 24
140.99.168.0/24 maxlen: 24
140.99.169.0/24 maxlen: 24
140.99.170.0/24 maxlen: 24
140.99.171.0/24 maxlen: 24
140.99.180.0/24 maxlen: 24
140.99.181.0/24 maxlen: 24
140.99.182.0/24 maxlen: 24
140.99.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 09 Apr 2025 16:18:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:7d:cc:30:53:d0:0d:fd:85:5c:8a:7d:ca:51:c4:24:c9:05:bf:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Validity
Not Before: Jan 27 15:23:26 2025 GMT
Not After : Jan 26 15:28:26 2026 GMT
Subject: CN=5A1B3628777DED6BE5697A92F6DC616DC2F2B202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c6:b5:31:0e:1c:12:41:e6:c3:78:7b:e4:d6:
5a:ce:c8:ee:50:11:c0:74:bf:f2:9d:b8:18:b0:6c:
4f:aa:31:06:d7:5a:d2:73:e9:43:ad:6a:2c:ef:a4:
33:c5:9f:ca:5b:9f:35:3e:89:b5:52:80:a4:88:98:
f2:3d:9f:29:5c:87:ca:61:28:f8:45:65:7c:be:83:
19:a7:f5:e3:67:b9:c5:b5:b9:12:17:7d:77:b9:99:
64:2a:e5:94:a1:0e:2e:4c:94:bb:eb:69:f3:85:81:
b1:16:94:f2:0d:1b:d0:86:90:de:81:7e:9d:27:3e:
df:ff:8e:6c:4c:79:fb:4d:06:43:28:74:00:fb:dd:
1d:3a:9c:8d:7d:aa:e0:92:16:08:d7:2a:4e:d1:f2:
d7:38:e5:b1:96:24:a1:05:0a:19:5e:12:86:4a:d9:
f3:d2:c9:a5:ff:66:05:b7:39:f0:c4:b1:ef:fe:2f:
fb:68:f8:b3:1f:25:86:e8:51:4a:9b:24:fc:1e:b3:
f8:fd:49:df:b0:4f:a9:3b:00:ea:d6:ca:3f:01:b9:
06:65:b2:74:31:92:2f:9d:8e:95:d4:6f:c8:bd:2b:
86:6b:53:36:53:92:0a:d0:6d:09:1d:63:e4:95:d8:
88:da:71:49:b8:9d:a5:02:58:bc:92:c9:ad:46:80:
fb:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:1B:36:28:77:7D:ED:6B:E5:69:7A:92:F6:DC:61:6D:C2:F2:B2:02
X509v3 Authority Key Identifier:
keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS201341.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.99.81.0/24
140.99.86.0/24
140.99.140.0/22
140.99.148.0-140.99.150.255
140.99.152.0-140.99.163.255
140.99.165.0-140.99.171.255
140.99.180.0/22
Signature Algorithm: sha256WithRSAEncryption
84:d2:6a:32:18:ad:ac:83:08:34:00:49:55:35:81:6c:22:c7:
a8:a5:7c:6a:7b:a5:58:f6:c9:00:05:99:44:f5:80:0e:88:ab:
6a:d8:28:f2:7e:ba:d0:fd:2c:1b:b4:a3:42:7c:d1:a8:1f:64:
4b:59:b3:79:f6:0c:94:69:0a:12:c5:25:ba:f6:70:5d:7f:22:
1e:d0:54:42:d5:7b:08:ce:87:b6:1f:2e:84:3c:15:1c:49:7a:
da:af:fd:d4:60:96:5f:0f:17:86:fd:13:d2:67:85:fb:35:8b:
61:88:7d:cf:9f:96:13:c3:78:b4:92:52:10:61:5f:06:b2:34:
d3:6b:ee:aa:37:e1:f5:60:dd:9d:ae:f5:68:ca:3a:cf:b0:a8:
b8:fb:ba:50:4b:ad:31:6a:dd:f5:e1:2e:8c:c7:26:e2:37:5f:
f8:5e:da:76:4e:26:3b:e8:97:e5:8b:a1:f9:d4:15:1c:85:6d:
ed:20:c5:52:33:62:43:64:f2:e4:e0:16:37:34:55:0d:ba:fa:
80:56:15:1d:79:54:32:e0:ad:22:f0:03:8f:29:6c:8c:79:91:
57:34:75:0f:bc:6c:52:cd:09:3a:03:c9:bf:90:ef:e7:24:eb:
8c:0d:cf:7b:b6:10:1a:2f:1d:54:8a:d6:29:3c:c5:19:30:d6:
79:b8:94:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:13:37 2025 by rpki-client