Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31322e302f32342d3234203d3e20323134303235.roa
File: 3139322e3230382e31322e302f32342d3234203d3e20323134303235.roa (raw, json)
Hash identifier: weO09jFM+cLEjpwiDS7BRRLPcIO4CvdBXf8k8OwjCEs=
Subject key identifier: 58:C6:6A:6B:39:A9:DA:53:C5:E2:78:B4:D9:01:CD:4E:0F:2D:E0:E9
Certificate issuer: /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial: 5CF060CE0B6441AD8A32A712AB0DB5F2AD38B687
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31322e302f32342d3234203d3e20323134303235.roa
Signing time: Thu 28 Nov 2024 12:00:50 +0000
ROA not before: Thu 28 Nov 2024 11:55:50 +0000
ROA not after: Thu 27 Nov 2025 12:00:50 +0000
asID: 214025
IP address blocks: 192.208.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 06:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:f0:60:ce:0b:64:41:ad:8a:32:a7:12:ab:0d:b5:f2:ad:38:b6:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Validity
Not Before: Nov 28 11:55:50 2024 GMT
Not After : Nov 27 12:00:50 2025 GMT
Subject: CN=58C66A6B39A9DA53C5E278B4D901CD4E0F2DE0E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:51:fa:bb:0c:f7:92:1c:d6:89:24:db:db:11:
b1:fc:90:c5:a8:09:9c:48:19:cd:4e:d3:82:d3:f0:
e0:59:4f:85:2d:63:db:a1:60:31:04:d2:2e:eb:cd:
e1:e6:49:ce:83:b3:c7:94:c8:91:5f:64:0d:31:5c:
c0:e5:fd:ea:ad:18:bb:75:e8:88:39:f7:3c:b4:d5:
9f:07:04:b2:bd:81:d0:d5:d6:55:a0:7b:fb:f4:ea:
92:d2:cf:04:fd:33:84:0c:bf:a4:da:51:7f:cd:fb:
51:cc:c7:3b:7d:51:b1:ba:68:cf:78:91:f4:42:a1:
3b:1e:ec:2e:c5:a5:65:ab:c5:35:9c:68:11:03:e9:
0d:eb:c7:19:6d:a8:fe:8e:de:61:1d:12:5f:e8:8f:
a3:f4:f2:86:15:e6:4c:1a:c1:71:8a:2d:86:ee:b7:
32:a6:49:e7:41:4d:2d:49:1d:44:cd:53:e3:bf:66:
05:7d:a5:1d:59:86:39:73:58:90:d7:3c:79:5b:72:
8a:eb:ab:cd:d9:d4:4e:53:11:b9:b8:c5:15:33:6f:
73:c1:40:cf:74:27:a2:49:ea:fe:91:cf:b8:91:b6:
a3:2c:c9:c5:14:43:41:f1:cd:67:d6:b5:ef:69:1e:
59:ad:f2:0d:7d:f8:3e:17:d1:46:bd:8b:9b:11:ee:
6c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C6:6A:6B:39:A9:DA:53:C5:E2:78:B4:D9:01:CD:4E:0F:2D:E0:E9
X509v3 Authority Key Identifier:
keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31322e302f32342d3234203d3e20323134303235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.208.12.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:c2:ab:09:3e:96:4e:93:4b:b5:1e:2b:a7:94:89:40:21:79:
32:2b:73:06:3a:3c:62:d3:af:51:11:76:4a:83:09:72:ad:e1:
db:21:ff:fb:49:39:27:e5:9e:6c:34:c2:91:7d:45:4e:a4:5b:
f2:bb:32:2c:9f:0f:91:c4:64:21:0d:69:38:30:13:3e:6e:c8:
4d:e0:d7:b8:55:1d:b2:0d:0e:cb:37:81:33:56:3f:3f:27:fa:
33:c8:6b:7b:e9:04:5c:53:53:d0:b2:31:39:b8:91:4e:3e:8f:
95:96:3d:1d:f7:57:39:52:30:35:f6:96:00:99:72:2a:b7:1e:
07:6f:e4:54:03:10:bf:72:ee:8b:2f:1e:dc:51:21:ac:15:55:
91:e8:99:23:b4:0b:28:b4:1f:34:41:ce:70:09:22:dc:54:f8:
e0:e9:f0:7c:45:e6:be:8a:c0:35:26:bb:68:b3:ff:89:e1:9f:
6a:42:80:0c:66:5c:78:c9:ba:e6:66:81:3b:d8:e5:3f:f6:0f:
bf:e7:03:62:cb:13:12:a8:cd:c7:e4:a0:1c:c9:60:e1:5f:af:
40:07:55:2e:10:06:78:2f:be:ad:c1:89:b1:59:fe:d5:d7:c0:
1b:93:c6:cd:7a:83:2b:3f:3f:f4:23:38:e4:e4:be:bf:76:8e:
d7:3b:f2:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:44:14 2025 by rpki-client