Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS62240.roa
File: AS62240.roa (raw, json)
Hash identifier: J3+qdjxfpGRPvyyTxSXfEj0iMTBJyR4YY78YdHsmjQM=
Subject key identifier: 97:6B:87:22:FD:98:D3:81:C3:59:AC:D3:2E:D9:ED:55:C2:A6:01:27
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 4B547374BB6C3B55804919FC6801442215C146E8
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS62240.roa
Signing time: Mon 02 Dec 2024 14:47:35 +0000
ROA not before: Mon 02 Dec 2024 14:42:35 +0000
ROA not after: Mon 01 Dec 2025 14:47:35 +0000
asID: 62240
IP address blocks: 104.234.92.0/23 maxlen: 23
104.234.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Apr 2025 04:16:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:54:73:74:bb:6c:3b:55:80:49:19:fc:68:01:44:22:15:c1:46:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Dec 2 14:42:35 2024 GMT
Not After : Dec 1 14:47:35 2025 GMT
Subject: CN=976B8722FD98D381C359ACD32ED9ED55C2A60127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:23:c7:4f:b9:ff:60:93:cb:43:5e:af:c4:7e:
52:45:f6:82:9a:29:63:da:f4:aa:10:66:44:57:28:
fd:76:08:b1:7b:4d:4e:1d:e0:68:73:d7:ef:53:a3:
aa:e9:a5:bb:9e:37:6d:d1:a1:9e:17:18:f9:eb:c8:
3b:1d:36:02:43:ef:16:a9:f3:89:2a:75:31:2a:a8:
83:f1:bd:67:34:df:07:2e:dc:5d:97:1b:fe:7b:b1:
9d:5d:e3:ec:95:e0:5d:c6:f4:71:14:bc:e3:ca:a1:
cd:86:80:3c:6d:b9:0e:2b:af:6f:56:b6:e5:c5:68:
a7:a7:04:14:3e:89:c8:5f:54:ac:9c:bd:09:e7:bf:
dc:21:88:df:bd:1a:7f:76:3b:db:3f:7f:cc:73:53:
15:03:ae:73:6b:90:24:06:d8:41:57:f5:40:45:30:
18:90:05:5b:de:f4:31:b0:63:a2:27:50:42:41:83:
2e:37:67:7b:ed:46:98:75:ca:ab:3e:87:26:f4:f1:
b9:26:f4:5e:0a:9c:ef:64:33:41:5e:58:42:8f:b7:
cb:33:94:92:98:82:92:65:45:66:78:43:07:9f:f2:
db:61:27:1f:99:f5:7a:00:b2:7a:01:ab:00:14:e7:
2d:f8:a5:61:a8:82:7a:ec:52:81:83:03:56:e9:09:
5e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:6B:87:22:FD:98:D3:81:C3:59:AC:D3:2E:D9:ED:55:C2:A6:01:27
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS62240.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.92.0/23
104.234.225.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:e9:bb:8a:e9:fc:c7:c8:71:7f:ac:aa:7e:da:a9:be:69:e8:
7b:f5:25:9e:27:88:a1:4f:1d:65:da:16:22:d1:d4:aa:9d:c1:
8e:fc:26:2d:77:64:8e:34:21:65:b9:eb:8a:c6:17:b8:7c:11:
bf:75:ad:39:0c:a2:2b:31:4b:8a:09:a1:0d:61:d4:fd:ac:c2:
42:ba:b8:6c:ca:29:f2:4b:30:86:29:78:0f:a0:59:e6:0b:e5:
b1:3e:8b:30:a9:46:db:c6:62:5a:1d:2b:66:93:5e:ef:8d:3f:
7c:36:c0:83:7a:22:10:4a:c2:bb:6c:4c:4a:41:0d:82:e2:a0:
11:c3:ce:fa:82:10:8e:66:e8:2e:be:84:55:43:96:1d:86:86:
1c:c7:1f:30:04:c8:fd:32:b6:f5:a7:8e:8e:4b:6a:3f:18:23:
eb:63:2f:fd:86:26:be:6d:44:80:7a:9a:02:73:fc:a2:98:86:
8d:3e:14:31:28:a6:62:ab:a3:e3:7e:8a:91:75:0c:4f:03:a3:
4d:59:c3:14:79:bf:89:22:16:d9:d8:83:97:5a:04:3f:0d:7b:
76:a4:be:74:e4:46:96:23:86:08:0d:8b:34:63:86:eb:8f:e7:
ea:05:56:1f:f1:e0:1b:e2:03:c3:a5:ff:b2:58:f6:c9:a3:76:
2c:71:25:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:09:24 2025 by rpki-client