Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS400909.roa
File: AS400909.roa (raw, json)
Hash identifier: PYQo1IlKrDLJwFVCBKdJDc1LFs3G4lQuAiXy9Vjcvgc=
Subject key identifier: B8:FD:8C:11:5B:7A:AB:FE:52:C2:EE:D7:07:4B:A9:01:FC:2A:0C:A2
Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial: 692362CC0B9D7635E7E58F4BD263B6AD3146DB61
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS400909.roa
Signing time: Sat 28 Dec 2024 13:28:23 +0000
ROA not before: Sat 28 Dec 2024 13:23:23 +0000
ROA not after: Sat 27 Dec 2025 13:28:23 +0000
asID: 400909
IP address blocks: 140.99.84.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 09 Apr 2025 16:18:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:23:62:cc:0b:9d:76:35:e7:e5:8f:4b:d2:63:b6:ad:31:46:db:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Validity
Not Before: Dec 28 13:23:23 2024 GMT
Not After : Dec 27 13:28:23 2025 GMT
Subject: CN=B8FD8C115B7AABFE52C2EED7074BA901FC2A0CA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:95:78:8f:71:b4:90:df:fb:f5:94:9c:f0:82:
75:86:81:4d:16:a6:f6:25:e5:b4:71:9b:96:45:5b:
78:96:34:4b:00:a0:3f:3c:fd:21:8f:49:75:1b:05:
06:17:d0:97:4e:b6:2f:1d:65:7a:eb:2b:19:fb:21:
4a:08:07:e5:17:57:44:ad:9c:1b:cb:2d:c4:30:20:
3c:79:f8:62:20:3d:8e:c8:98:ea:5f:c4:83:57:38:
6f:a5:5e:fa:97:41:0b:6f:11:72:96:98:25:be:96:
f5:0b:cf:a3:88:93:46:be:51:2c:e4:73:9b:a4:d4:
41:97:d6:f3:ea:22:12:b8:bd:57:67:cc:57:51:aa:
a7:fb:68:68:ff:48:d1:78:94:c6:1b:42:8f:30:03:
a7:7e:8d:55:ec:e3:75:2c:b9:ef:b9:9e:a4:d5:ff:
ab:48:ec:3a:e2:77:87:f5:63:84:8d:7b:2c:11:88:
aa:b0:ee:fa:c5:d0:2c:b0:9c:57:67:4f:1d:ec:1f:
84:e5:bf:d1:7d:8e:50:c9:96:c0:b6:dc:9f:9d:bb:
6b:21:d9:49:ac:49:ce:d7:d9:70:b5:76:16:4e:96:
5f:70:d6:a9:0e:83:57:8a:b4:5d:85:91:86:fe:05:
da:10:c2:44:5c:f4:8c:16:83:a8:b8:3e:0c:6d:17:
71:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:FD:8C:11:5B:7A:AB:FE:52:C2:EE:D7:07:4B:A9:01:FC:2A:0C:A2
X509v3 Authority Key Identifier:
keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS400909.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.99.84.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:56:ee:30:b4:b1:66:91:fb:b4:29:b6:87:97:64:ab:30:53:
61:a9:c8:12:98:e5:20:b9:5d:58:d7:61:49:70:0e:35:9e:3d:
55:df:30:30:39:96:f9:38:96:36:52:38:c4:cd:79:36:b7:6d:
22:99:3f:a1:a9:67:3c:02:b6:2a:ad:00:96:3b:41:6d:c8:6f:
32:81:1a:0e:7c:5a:74:92:5d:8e:29:17:33:30:97:4e:3a:28:
85:78:d8:22:ab:d8:66:f4:65:a9:fd:a2:00:41:54:d5:9b:d3:
0a:24:b8:b6:8b:f7:61:53:c1:b4:b2:e6:ed:27:0c:66:19:c6:
a0:8f:fe:64:da:c8:3b:ac:5a:af:df:3c:22:bd:6f:d6:5e:31:
32:bc:32:c0:13:af:1a:3c:41:8a:fb:e8:2c:74:01:9e:b4:75:
f2:4d:de:64:0e:70:fc:09:2c:7b:91:bd:aa:78:f7:62:5c:68:
aa:e5:cc:ee:73:6b:6a:f8:ab:1d:08:35:54:41:a9:fd:68:ce:
e9:84:1f:cd:89:0c:7d:0e:dc:5f:b0:4d:8b:2a:50:e1:14:f6:
88:5d:4c:fb:d6:ea:81:78:71:e9:2c:04:46:bc:5c:68:1a:4f:
46:24:c3:51:3f:2a:72:18:1a:13:c8:34:49:88:56:9a:69:e4:
fb:b6:bc:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:33:39 2025 by rpki-client