Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3139332e302e302f31372d3137203d3e2035363530.roa
File: 34372e3139332e302e302f31372d3137203d3e2035363530.roa (raw, json)
Hash identifier: nBeKVTMZlbN9/B1IXeOgwelm7kKRnumLvgxH4aTKl/g=
Subject key identifier: 9C:DD:F6:6E:75:EF:F8:DA:2A:8E:42:38:41:2F:F1:A3:7B:5B:31:02
Certificate issuer: /CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
Certificate serial: 37D7C06475FB3CACF209FFCD882B63D655D1F1F3
Authority key identifier: 82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3139332e302e302f31372d3137203d3e2035363530.roa
Signing time: Tue 25 Feb 2025 05:08:51 +0000
ROA not before: Tue 25 Feb 2025 05:03:51 +0000
ROA not after: Tue 24 Feb 2026 05:08:51 +0000
asID: 5650
IP address blocks: 47.193.0.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl
rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 09 Apr 2025 16:09:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:d7:c0:64:75:fb:3c:ac:f2:09:ff:cd:88:2b:63:d6:55:d1:f1:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
Validity
Not Before: Feb 25 05:03:51 2025 GMT
Not After : Feb 24 05:08:51 2026 GMT
Subject: CN=9CDDF66E75EFF8DA2A8E4238412FF1A37B5B3102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:05:83:ed:96:fd:b9:1d:74:c4:47:64:0e:5f:
03:5c:35:e8:04:4f:a3:6d:fa:0e:f9:d0:05:59:1a:
f9:80:03:de:d0:78:35:d7:a9:35:45:94:e8:f6:8f:
2a:17:c0:12:98:6c:e7:33:e3:f6:ef:6e:34:d0:61:
a3:ea:a2:6a:65:7d:a3:d8:44:23:1c:11:29:e3:eb:
88:6a:c0:d9:6e:4c:9b:26:45:d9:aa:92:27:c4:1b:
da:13:86:bd:b8:1e:e9:9b:69:5c:e2:b7:eb:65:85:
b9:51:c7:ae:06:85:5e:1b:78:bc:20:58:bc:e7:5b:
00:1e:f1:dd:9d:c1:77:89:03:b7:bd:9a:da:a8:2c:
ed:2e:4c:fd:27:82:3a:d7:ef:5b:7a:c7:9e:ac:8e:
74:27:97:8a:d5:11:ce:e3:d9:c6:18:9e:59:58:e5:
13:b6:e4:0e:8b:7c:88:c6:e4:b9:e5:24:92:97:ec:
2a:55:9a:d3:33:a7:9a:c7:e4:3d:cb:8b:17:73:b6:
71:04:6b:00:fc:af:0d:cb:f6:6c:fa:7e:ff:bd:84:
51:d9:be:02:3b:5e:2f:e9:71:dd:5a:2a:bd:85:07:
66:4b:bd:64:99:27:94:1c:0b:47:cc:cb:9b:62:a4:
2d:38:c6:da:94:5f:f8:6f:88:92:70:a8:66:b7:6f:
a6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:DD:F6:6E:75:EF:F8:DA:2A:8E:42:38:41:2F:F1:A3:7B:5B:31:02
X509v3 Authority Key Identifier:
keyid:82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3139332e302e302f31372d3137203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
47.193.0.0/17
Signature Algorithm: sha256WithRSAEncryption
10:59:1f:0f:af:f0:45:61:cc:56:09:c0:ce:7c:57:3c:79:94:
fa:a7:65:22:1d:a0:e3:d3:af:13:fe:d8:43:ed:61:a3:fe:a0:
92:29:9b:8c:40:7d:58:fe:43:cd:4d:7e:be:0f:33:4d:5a:82:
0e:8e:73:c1:d7:47:55:dd:bf:b2:d6:7b:10:de:85:96:dd:16:
e8:05:fd:fc:73:df:ac:d9:ee:73:58:0b:fb:99:91:cd:28:2e:
7c:01:7d:97:5b:f7:5c:f7:b7:af:76:6a:62:5b:7c:7b:b8:c1:
33:6f:f6:14:53:98:3b:42:c4:2d:f4:fd:b6:70:48:50:61:35:
c5:74:c8:db:a1:61:07:ae:6a:07:50:44:89:bd:5e:2a:98:ea:
1b:ac:57:c9:ac:fa:3d:55:22:0b:f3:02:e1:22:0d:74:dc:f5:
47:d4:4a:39:c4:77:21:5c:ae:d9:82:3c:f7:4a:8e:9c:33:09:
4b:2f:6c:95:8b:c5:77:71:fb:64:ec:38:6f:3b:8b:1d:27:2f:
ed:9e:39:f2:c7:07:77:5f:61:75:b4:e9:68:19:8e:4c:e8:a6:
54:e5:5b:fb:46:bf:ed:d3:87:0f:15:9f:87:9b:e3:57:e6:23:
36:b9:9f:61:f8:e3:f5:d5:51:86:34:09:74:bd:ae:5f:11:7f:
eb:30:7e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:41:26 2025 by rpki-client