Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS264409.roa
File: AS264409.roa (raw, json)
Hash identifier: Dkzr5zMSALEHye/qIooW+iezoKyPXUwMm1gZtdlP/Ek=
Subject key identifier: BD:F4:22:B5:74:5D:95:A4:7F:31:FC:11:DF:CE:D4:AC:B6:31:D9:9A
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 424C5A497E7282EBF167BBB94634B85271FF049E
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS264409.roa
Signing time: Tue 01 Apr 2025 14:28:26 +0000
ROA not before: Tue 01 Apr 2025 14:23:26 +0000
ROA not after: Tue 31 Mar 2026 14:28:26 +0000
asID: 264409
IP address blocks: 104.234.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 13 Apr 2025 00:52:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:4c:5a:49:7e:72:82:eb:f1:67:bb:b9:46:34:b8:52:71:ff:04:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Apr 1 14:23:26 2025 GMT
Not After : Mar 31 14:28:26 2026 GMT
Subject: CN=BDF422B5745D95A47F31FC11DFCED4ACB631D99A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:76:4a:04:b5:c8:57:23:48:83:2e:8a:45:a5:
ee:e1:ec:39:ad:52:37:7f:84:25:be:2f:14:65:88:
60:52:6c:1e:f2:40:ad:1b:d9:af:ad:79:48:25:11:
6c:cf:6f:6f:59:ab:7e:9c:2a:0e:1c:b1:68:8b:28:
6e:eb:00:2e:0b:10:40:4a:b0:ee:38:ce:bd:72:76:
5b:75:7a:11:89:83:06:28:25:9e:d6:8b:c5:cd:a2:
ee:2a:aa:25:9e:74:6b:a1:58:25:23:72:f1:a5:b5:
c9:b7:ad:d9:3c:64:f1:10:d8:fb:d6:c8:20:ac:a0:
9b:25:9c:e8:5e:5b:ef:fe:1a:e7:65:d3:9a:43:8c:
81:4d:13:40:8e:ff:50:fd:91:b4:11:56:81:51:98:
f9:07:42:22:62:68:9e:27:ef:75:8b:0d:39:ab:d1:
e7:c3:87:d4:3b:ae:1a:54:80:ee:99:0d:ab:53:f4:
a5:4b:72:6d:e8:05:9e:86:84:75:74:68:1b:ae:d8:
0c:64:3a:d0:9d:b4:4e:32:aa:93:15:1d:49:10:2d:
12:5c:3c:67:36:b4:ff:03:05:ab:56:a5:31:26:58:
7e:9b:9f:32:02:41:3d:12:da:20:a0:17:ee:af:2a:
67:3c:0b:9a:bd:f5:fb:97:aa:7b:5b:fd:cc:20:37:
28:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F4:22:B5:74:5D:95:A4:7F:31:FC:11:DF:CE:D4:AC:B6:31:D9:9A
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS264409.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.147.0/24
Signature Algorithm: sha256WithRSAEncryption
95:d4:3f:60:85:0c:be:ab:95:48:e6:df:02:a0:c0:12:ab:52:
b8:2d:0a:90:57:38:c3:4a:79:e9:3c:7c:1e:17:87:70:84:ea:
6c:48:74:f8:65:fa:71:7c:f2:83:4c:6e:9e:85:9a:cd:78:74:
d8:b3:fc:43:fe:8e:05:01:c9:89:af:e9:39:43:af:cf:c8:7a:
2b:9f:0d:53:04:62:6c:15:78:64:fe:f0:4e:c5:d8:83:41:85:
36:6a:2b:48:b3:23:75:e0:4a:93:60:01:c8:e3:b7:8f:17:fb:
7a:7e:81:d3:e2:09:72:a0:34:f5:c8:87:46:d0:98:ba:5f:bc:
86:e2:28:1f:64:0e:8c:5e:49:6b:12:19:bb:e9:19:fb:ed:f9:
6c:71:3b:ce:6a:ae:cc:88:d9:08:22:ca:9d:f1:d2:56:70:c6:
26:2b:da:4c:e3:9a:5b:7d:db:20:05:e3:a3:a3:66:a9:87:63:
a9:36:1d:ee:65:93:67:51:9d:68:bd:d5:fa:2f:b1:ed:63:bc:
64:e7:f2:c8:f8:a4:41:f7:29:1a:19:ad:0d:79:41:bb:76:91:
f8:ee:63:10:da:46:fd:b2:b2:27:6c:89:9b:52:c7:1a:01:03:
4b:52:0d:79:cd:f0:04:ad:89:06:ba:df:63:45:ed:d8:1d:93:
35:c8:2f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 06:30:59 2025 by rpki-client