Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/32332e3134322e32352e302f32342d3234203d3e20313939343134.roa
File: 32332e3134322e32352e302f32342d3234203d3e20313939343134.roa (raw, json)
Hash identifier: axRJjtqZj2JFhpmlyqJq/klNtcMkRxMRmacwWLwudSQ=
Subject key identifier: 29:01:10:D4:2A:C1:0B:91:F3:77:12:1E:8F:BB:D7:EB:56:AC:3B:FE
Certificate issuer: /CN=6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5
Certificate serial: 50B5F2915ECFDAEEAC8DA55EBB86C9735101E087
Authority key identifier: F7:CA:76:95:FC:79:BE:2F:5B:AC:B4:B4:5D:5A:A5:60:79:CA:93:36
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/32332e3134322e32352e302f32342d3234203d3e20313939343134.roa
Signing time: Mon 17 Feb 2025 23:12:06 +0000
ROA not before: Mon 17 Feb 2025 23:07:06 +0000
ROA not after: Mon 16 Feb 2026 23:12:06 +0000
asID: 199414
IP address blocks: 23.142.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/F7CA7695FC79BE2F5BACB4B45D5AA56079CA9336.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/F7CA7695FC79BE2F5BACB4B45D5AA56079CA9336.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/3098fc14-29c9-4916-b03a-ae4a2af101cd.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/3098fc14-29c9-4916-b03a-ae4a2af101cd.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 07 Apr 2025 10:12:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:b5:f2:91:5e:cf:da:ee:ac:8d:a5:5e:bb:86:c9:73:51:01:e0:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5
Validity
Not Before: Feb 17 23:07:06 2025 GMT
Not After : Feb 16 23:12:06 2026 GMT
Subject: CN=290110D42AC10B91F377121E8FBBD7EB56AC3BFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:48:29:69:5e:67:7b:50:84:d5:84:73:fc:f4:
53:cc:b2:0e:c9:b4:5e:d0:66:59:ee:0a:a8:23:c5:
c8:67:ca:e1:09:62:bd:14:e3:ec:04:e0:aa:1a:68:
85:12:d6:20:ef:fb:bc:74:9e:05:f4:52:be:ab:5a:
4f:8f:8c:1e:e1:81:ff:de:38:e8:99:62:9b:5a:b1:
df:0d:e7:65:27:4f:9f:13:82:c2:04:cd:71:cb:49:
43:eb:dd:7e:26:15:24:95:b2:ae:41:4c:d1:79:26:
0c:73:06:44:86:4f:a5:cc:bf:55:cb:f0:a0:fb:79:
a9:83:1c:55:53:d7:77:36:fa:9e:4a:31:3b:1a:ea:
3e:6b:0e:fa:43:06:3f:59:62:b2:4d:77:c8:aa:2e:
fe:28:85:a9:c1:97:91:53:26:5e:f4:ca:09:e4:68:
5c:fe:ed:8e:80:08:4e:5a:18:32:73:88:9e:32:34:
3d:6e:49:7e:58:71:5d:5f:3d:9a:d3:6c:22:f8:1a:
54:39:3e:57:81:85:72:39:60:d4:b1:69:a4:77:37:
3d:ea:37:07:4a:36:0a:1a:57:04:8b:e7:8e:4f:9a:
0f:2f:b3:86:c4:3d:bb:f2:79:85:ba:33:ea:83:d7:
c4:41:0f:90:c3:2a:a1:23:12:e6:d3:37:31:78:05:
0b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:01:10:D4:2A:C1:0B:91:F3:77:12:1E:8F:BB:D7:EB:56:AC:3B:FE
X509v3 Authority Key Identifier:
keyid:F7:CA:76:95:FC:79:BE:2F:5B:AC:B4:B4:5D:5A:A5:60:79:CA:93:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/F7CA7695FC79BE2F5BACB4B45D5AA56079CA9336.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/32332e3134322e32352e302f32342d3234203d3e20313939343134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.142.25.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:ba:49:45:fa:77:44:47:7f:7c:7d:30:40:df:c7:85:0d:12:
5f:29:b3:51:91:46:d2:ec:71:47:e8:20:13:f5:13:cc:71:12:
45:15:c8:71:ad:23:48:fb:2e:60:0e:b9:fd:b2:27:df:20:92:
1a:90:2f:af:91:25:c6:59:52:97:f5:fe:36:17:20:d4:65:2a:
01:89:81:0b:a8:e5:5a:f3:1f:70:af:94:5a:42:29:94:5f:f1:
05:16:4a:a1:5f:ec:0e:6d:0e:77:f9:7a:59:23:f8:71:8b:c3:
a2:b1:a7:89:38:f1:fc:95:6e:35:d2:6f:af:50:43:71:f4:6f:
42:c5:ef:42:7c:32:51:5b:ba:e6:22:38:d9:91:8d:c8:85:d5:
d6:9b:60:99:15:13:53:e0:60:f3:4f:fc:84:dc:8a:4a:38:1e:
a1:33:76:d7:e8:d2:d1:98:2f:e5:fa:c1:dc:e6:c8:a3:c2:b0:
63:f5:c3:30:64:45:7f:d2:84:18:99:39:07:6f:8a:1a:9c:24:
58:9f:43:d1:94:05:40:fb:cc:53:e7:65:da:e6:bc:26:5e:13:
a9:09:a5:e9:00:52:9b:59:06:0e:59:a8:d8:ba:f2:a7:d6:cd:
75:be:9f:db:cc:06:aa:fb:82:b6:e4:e3:dc:6f:9d:6e:d9:61:
c4:37:70:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:06:00 2025 by rpki-client