Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e312e302f32342d3234203d3e20323132383935.roa
File: 3139322e3230382e312e302f32342d3234203d3e20323132383935.roa (raw, json)
Hash identifier: OfU2bWOmYuUEEA6q8OOC1ScF2nVSyvO98nO7qC0nioM=
Subject key identifier: 00:08:95:96:00:85:01:DF:67:95:D6:96:E5:CE:F0:66:DB:A3:47:B5
Certificate issuer: /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial: 314F8BF2671F79FD24B554334ECAD922D3AB2418
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e312e302f32342d3234203d3e20323132383935.roa
Signing time: Thu 28 Nov 2024 08:00:42 +0000
ROA not before: Thu 28 Nov 2024 07:55:42 +0000
ROA not after: Thu 27 Nov 2025 08:00:42 +0000
asID: 212895
IP address blocks: 192.208.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 06:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:4f:8b:f2:67:1f:79:fd:24:b5:54:33:4e:ca:d9:22:d3:ab:24:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Validity
Not Before: Nov 28 07:55:42 2024 GMT
Not After : Nov 27 08:00:42 2025 GMT
Subject: CN=00089596008501DF6795D696E5CEF066DBA347B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fa:74:fe:e5:88:db:e3:50:fb:12:84:3f:83:
ac:b5:19:a5:71:b9:da:73:c8:6f:d8:ee:d0:63:81:
12:43:8a:fe:fc:25:ef:38:86:d5:89:91:3f:00:d6:
cc:69:32:6b:84:eb:f3:90:22:a1:35:be:df:ce:e7:
f1:5f:37:71:14:e0:b9:61:1a:0d:25:b5:d2:e2:57:
73:7a:41:47:af:8f:51:53:6e:2b:a6:8f:a9:93:65:
91:bf:b0:7e:7f:bd:7a:19:b0:eb:15:a8:55:12:23:
d5:12:83:7f:28:1a:fe:0d:54:30:20:3c:3d:92:5d:
2e:f7:83:c1:01:4c:91:26:87:b7:b4:55:6a:ea:e2:
2f:69:af:d5:48:8e:9a:93:bb:1f:f2:1c:95:39:ae:
1e:ea:80:d8:2e:bf:1c:31:6c:5d:f0:8f:c2:07:c9:
f2:7c:ee:b6:ff:26:7f:85:a8:7a:07:cb:7e:3f:c2:
86:4d:56:6c:1d:39:49:53:79:32:f6:6d:2c:fb:9b:
69:24:47:81:b8:45:8e:66:04:73:98:b8:5c:35:52:
61:eb:bf:d7:b3:40:6b:72:84:3f:b2:39:6b:81:8d:
85:64:26:af:2e:05:e6:4f:26:80:89:00:d7:a1:92:
82:87:33:c5:35:72:42:c6:7c:70:95:88:41:96:71:
d1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:08:95:96:00:85:01:DF:67:95:D6:96:E5:CE:F0:66:DB:A3:47:B5
X509v3 Authority Key Identifier:
keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e312e302f32342d3234203d3e20323132383935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.208.1.0/24
Signature Algorithm: sha256WithRSAEncryption
64:dc:11:cf:2c:be:bb:2c:ca:15:8b:11:57:6e:e4:9e:9a:5f:
ed:af:e2:cb:48:ff:9d:4f:bb:72:b6:d4:0b:ec:b9:fe:fb:19:
f2:03:8a:60:2d:d1:2d:3b:dc:c5:ca:fd:7e:4a:f4:56:10:33:
51:ce:16:3a:e3:39:25:10:f5:46:60:d7:97:a5:86:a7:1f:d7:
17:0c:aa:73:0c:e8:e7:fa:2c:93:24:f7:42:c0:04:9d:0c:82:
e0:6a:3c:00:24:59:b1:b0:d8:15:66:c7:0c:73:e6:ba:e6:f0:
f0:d0:fc:9f:b1:a2:84:be:05:0f:bc:5e:ee:46:cd:a5:86:7d:
c9:a2:07:ac:f6:41:67:c4:a0:ea:1a:79:e2:f6:1b:5a:6c:22:
a8:5d:a5:f6:c8:af:3c:17:6f:5c:39:86:7b:5c:3c:2f:e8:00:
5e:15:03:db:26:ae:60:3e:62:4d:92:ba:ef:90:41:ac:9d:e1:
b7:d6:46:16:7e:a0:0a:7a:0c:86:fb:d2:a3:16:ad:e5:9d:36:
c7:68:4f:3f:0b:ed:98:e0:0b:f8:a8:fc:e8:1d:12:57:63:d7:
0f:ab:50:0e:77:7c:32:bd:1d:7e:08:70:a4:39:6c:ae:30:a5:
67:b3:6c:ac:9a:7d:a7:23:56:9b:b5:60:0e:1d:cf:ff:93:1d:
a7:d4:e3:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:23:00 2025 by rpki-client