Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS20473.roa
File: AS20473.roa (raw, json)
Hash identifier: 3KtL+96O9amlN2P7S46EDwvZuMP4e51jl5AHZFCCEDY=
Subject key identifier: 57:E1:EB:17:54:A4:15:FA:F0:63:08:14:94:B9:21:A7:FD:C0:82:F2
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 0A636C23A0F6189F4598533FBC1A245A114B772E
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS20473.roa
Signing time: Sat 15 Mar 2025 00:02:30 +0000
ROA not before: Fri 14 Mar 2025 23:57:30 +0000
ROA not after: Sat 14 Mar 2026 00:02:30 +0000
asID: 20473
IP address blocks: 104.234.150.0/24 maxlen: 24
104.234.193.0/24 maxlen: 24
104.234.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 09 Apr 2025 19:15:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:63:6c:23:a0:f6:18:9f:45:98:53:3f:bc:1a:24:5a:11:4b:77:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Mar 14 23:57:30 2025 GMT
Not After : Mar 14 00:02:30 2026 GMT
Subject: CN=57E1EB1754A415FAF063081494B921A7FDC082F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:72:c8:25:2f:9d:cd:01:5b:b9:d8:0e:ea:8c:
1e:44:7c:c0:48:f6:89:b7:b1:ee:74:6e:5d:3d:37:
44:3b:00:13:ac:21:e8:16:2a:08:35:52:00:ba:fc:
e1:65:da:f1:c1:71:b0:56:a5:c1:17:45:ba:fe:8c:
9b:98:d1:cb:6a:cb:3d:38:a5:aa:1d:e5:4c:5c:2a:
7b:8a:4b:47:5f:38:77:85:23:cb:b5:0e:ef:fb:6b:
ce:99:65:8d:00:ad:27:63:2f:b2:1c:91:12:78:e3:
40:27:99:68:7b:1f:0a:60:67:e0:52:40:15:57:14:
c0:71:5f:52:95:bb:54:4f:a4:96:59:f1:26:e8:99:
2f:12:36:8e:bd:d6:e8:1e:38:09:e5:a1:69:73:03:
9e:c0:a3:0f:b1:48:12:05:36:4d:29:62:fa:1f:8d:
2f:c1:22:3d:1f:e2:14:e9:08:da:25:ce:1e:81:a1:
02:d7:50:9c:d2:11:06:7e:65:e0:e0:6d:46:dd:65:
65:9c:b4:91:30:c4:44:34:b3:be:fb:ed:4d:b0:9c:
f1:90:ac:6d:65:5f:25:93:58:00:57:b2:5d:8d:1e:
60:fd:dc:14:30:ad:2f:96:e7:03:76:5b:3f:6c:63:
b3:16:8d:45:0d:4b:92:d7:c0:9e:2b:72:b2:30:37:
d3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:E1:EB:17:54:A4:15:FA:F0:63:08:14:94:B9:21:A7:FD:C0:82:F2
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS20473.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.150.0/24
104.234.193.0/24
104.234.242.0/24
Signature Algorithm: sha256WithRSAEncryption
24:fb:09:55:12:08:f6:ed:bd:11:13:ad:26:fe:d2:1f:f3:62:
42:80:6c:e3:e1:0a:f4:7e:59:e7:3b:8e:cf:a1:ed:8e:54:d2:
73:a1:32:a9:78:20:f2:74:b8:c0:74:07:99:8f:1b:a8:37:fa:
6e:c3:c0:ee:0d:97:ee:44:a7:41:67:a3:7b:26:dc:66:65:a4:
20:ac:1f:04:5f:5b:16:a6:0c:f6:3d:77:d4:ae:e7:07:a4:e5:
8b:04:bb:06:5c:50:92:f7:48:15:f2:7b:f8:b6:3f:84:6b:4b:
14:1a:75:fd:16:20:f9:ab:5a:c8:c4:81:79:96:ce:dd:87:7c:
16:27:38:e5:8f:81:ba:8f:50:d2:3c:a1:bb:e9:dd:e4:31:88:
f2:53:80:0c:0d:9d:5b:33:04:1b:ff:14:d0:c4:6f:0d:64:ba:
96:b0:20:d0:69:e0:91:c6:d3:ea:2d:90:06:ab:6f:44:9e:27:
5e:9f:2d:a3:66:c2:62:ee:ed:4e:93:00:df:64:77:e0:13:92:
48:f1:73:ab:e6:14:dc:ce:58:b1:f6:c3:71:86:b4:8d:ea:4a:
10:ee:ae:4b:30:30:41:29:7a:e6:58:46:32:50:5f:cf:c2:a6:
6c:52:04:64:e6:d6:ac:c1:0c:bc:19:92:0e:36:04:36:c5:b4:
f7:b6:25:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:55:15 2025 by rpki-client