Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS15083.roa
File: AS15083.roa (raw, json)
Hash identifier: 5NsJ321K+braoTwBLW23hf7PY2RxN2lPytuXawM3P/c=
Subject key identifier: 18:56:B1:11:7E:82:34:78:A4:0D:93:76:A2:85:01:4B:BC:F9:27:01
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 811AC4A7FEBB23AAF385D43D2B119CB61A73DC
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS15083.roa
Signing time: Tue 18 Mar 2025 00:26:14 +0000
ROA not before: Tue 18 Mar 2025 00:21:14 +0000
ROA not after: Tue 17 Mar 2026 00:26:14 +0000
asID: 15083
IP address blocks: 104.234.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 09 Apr 2025 19:15:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
81:1a:c4:a7:fe:bb:23:aa:f3:85:d4:3d:2b:11:9c:b6:1a:73:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Mar 18 00:21:14 2025 GMT
Not After : Mar 17 00:26:14 2026 GMT
Subject: CN=1856B1117E823478A40D9376A285014BBCF92701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4e:4c:97:ab:6d:48:53:b2:00:7c:88:0c:36:
3c:07:50:ac:b8:54:58:cb:63:7e:13:f6:0d:d4:56:
0b:f8:a9:6f:40:9a:70:60:92:2d:37:49:67:52:50:
1b:17:bd:b2:43:3c:f6:3b:ec:94:4a:ab:99:cb:a9:
07:80:d6:0c:c7:4d:a3:27:f9:34:ac:78:9f:11:43:
bb:58:1f:0f:e1:74:47:a1:0d:dc:a3:1a:96:bc:58:
90:33:bd:7f:85:7f:13:f9:75:b1:f6:9b:bb:48:e1:
12:64:69:6a:39:36:9a:65:c3:cd:a6:8c:05:8d:e1:
df:8b:f3:13:1a:19:1b:19:73:82:d2:da:55:dc:ee:
53:56:3c:fa:a1:38:37:6f:2b:ac:5e:d2:c0:a4:1a:
aa:16:a3:ad:f2:e5:4a:8a:e0:7d:f4:c9:0c:49:49:
fc:67:f1:74:5c:d7:40:83:92:e4:3d:22:80:6a:e2:
8c:99:3d:bf:ec:a1:d5:56:8f:b7:4b:03:20:af:94:
6c:8e:a7:eb:38:b3:58:23:fc:c9:ed:2b:fe:a9:d2:
98:85:00:78:ad:27:95:34:d3:42:bd:89:cf:a7:f9:
65:12:94:55:e3:93:81:9a:82:7c:b7:57:55:f5:09:
14:46:03:33:80:36:3e:61:9c:45:f5:cb:d2:42:a2:
92:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:56:B1:11:7E:82:34:78:A4:0D:93:76:A2:85:01:4B:BC:F9:27:01
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS15083.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.222.0/24
Signature Algorithm: sha256WithRSAEncryption
91:24:15:55:07:33:fb:0b:90:e5:68:16:e4:84:d5:5f:ff:10:
10:97:c2:08:d0:f9:5e:e4:b4:cf:00:11:c7:e7:fd:4f:55:43:
54:5d:74:f9:c9:cd:88:d4:a7:a0:f2:f0:4a:e9:48:bc:ce:c6:
a5:25:9a:20:52:53:8c:4d:eb:6c:65:f2:ff:4e:6c:22:99:17:
2d:3d:d6:c2:b5:21:47:7b:a3:2f:47:20:e2:6b:5e:e5:16:ef:
e1:32:78:2b:a3:e8:43:ba:1a:5c:4a:ad:60:ad:f2:81:de:e0:
ea:61:c4:02:68:a8:db:22:34:83:95:7c:5f:a1:f0:76:08:b1:
1e:88:9e:12:e0:73:37:7c:27:be:db:3b:9c:84:bd:d7:5e:c8:
81:18:be:61:bb:39:cf:0b:6f:a7:de:7d:66:32:39:b3:d4:4f:
f8:b9:31:c3:01:b6:c8:01:44:a4:ca:ca:19:30:da:ee:55:bb:
1b:ef:c3:16:56:ca:fd:c7:33:12:e5:fa:bd:73:1c:e8:71:ad:
39:82:b3:e9:b6:15:f8:69:b3:46:bb:fa:48:5e:ee:55:81:b4:
dc:71:31:4b:a0:d4:53:87:0c:73:d1:c8:19:19:1d:3c:68:25:
90:aa:4f:77:22:08:7e:65:5f:e2:7a:01:ac:ff:f2:7d:62:a9:
12:a8:64:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:17:10 2025 by rpki-client