Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/0/323630323a663962613a3630303a3a2f34302d3438203d3e20323134303232.roa
File: 323630323a663962613a3630303a3a2f34302d3438203d3e20323134303232.roa (raw, json)
Hash identifier: PQ+g/pDhS63PdmAUqHjf/vWQQzXQ0AIOCaPlWgnyenQ=
Subject key identifier: B3:8E:33:19:BD:77:B5:FF:ED:F9:6A:67:CC:57:A3:98:33:32:1A:86
Certificate issuer: /CN=8d8a672dd79a741b29e5ff6fa5231f779488e707b290f2f247
Certificate serial: 70FE138D0DA35756BCB3365D48587ACD6AFF50DB
Authority key identifier: C1:9A:74:47:85:5F:7A:C5:27:0D:95:C1:6E:13:45:5A:2A:5D:B3:2A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd79a741b29e5ff6fa5231f779488e707b290f2f247.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/0/323630323a663962613a3630303a3a2f34302d3438203d3e20323134303232.roa
Signing time: Wed 26 Mar 2025 00:38:54 +0000
ROA not before: Wed 26 Mar 2025 00:33:54 +0000
ROA not after: Wed 25 Mar 2026 00:38:54 +0000
asID: 214022
IP address blocks: 2602:f9ba:600::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/0/C19A7447855F7AC5270D95C16E13455A2A5DB32A.crl
rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/0/C19A7447855F7AC5270D95C16E13455A2A5DB32A.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd79a741b29e5ff6fa5231f779488e707b290f2f247.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Apr 2025 06:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:fe:13:8d:0d:a3:57:56:bc:b3:36:5d:48:58:7a:cd:6a:ff:50:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d8a672dd79a741b29e5ff6fa5231f779488e707b290f2f247
Validity
Not Before: Mar 26 00:33:54 2025 GMT
Not After : Mar 25 00:38:54 2026 GMT
Subject: CN=B38E3319BD77B5FFEDF96A67CC57A39833321A86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:40:d0:dd:bc:35:39:02:9b:47:d9:fb:22:c2:
06:59:4a:86:71:8c:75:f7:21:e0:08:ad:8e:8e:9c:
75:ac:b9:b1:8c:d8:c8:77:81:7a:da:80:62:50:a2:
5b:85:b8:f4:d2:eb:2f:d2:94:79:6b:87:e7:e7:59:
07:39:b7:05:03:c5:17:5c:d0:39:c7:9f:1e:66:98:
35:8f:2f:04:f6:f1:40:1d:7d:7e:01:6f:ce:22:68:
36:d0:c3:26:f1:b5:8e:51:d9:d3:8b:21:52:bd:48:
d1:2f:41:d1:be:02:21:31:16:a4:93:c5:ef:3d:ec:
55:3e:7a:ed:48:69:6a:c4:4e:23:32:cf:0f:e9:05:
8b:81:98:72:50:18:97:98:4d:cd:70:3a:79:eb:2f:
03:d9:30:1e:d9:56:b5:d5:73:75:38:e2:d0:c4:d4:
fd:76:77:c7:a2:9d:13:3d:25:7a:6d:eb:f9:24:4c:
60:ab:94:8b:9e:7c:e2:a6:3c:12:62:33:fc:f6:a4:
e2:d9:d7:04:84:76:b2:93:4e:ac:16:ee:34:9e:04:
03:69:df:f3:d1:d0:8d:d7:da:87:e4:8f:f9:52:2d:
9e:51:35:ac:55:15:be:dd:84:e0:61:17:32:a8:d7:
c1:63:a6:e1:04:d5:55:cd:7e:ad:03:94:04:65:84:
f3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:8E:33:19:BD:77:B5:FF:ED:F9:6A:67:CC:57:A3:98:33:32:1A:86
X509v3 Authority Key Identifier:
keyid:C1:9A:74:47:85:5F:7A:C5:27:0D:95:C1:6E:13:45:5A:2A:5D:B3:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/0/C19A7447855F7AC5270D95C16E13455A2A5DB32A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd79a741b29e5ff6fa5231f779488e707b290f2f247.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/0/323630323a663962613a3630303a3a2f34302d3438203d3e20323134303232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f9ba:600::/40
Signature Algorithm: sha256WithRSAEncryption
16:03:a6:c6:a7:28:ab:59:85:79:64:64:5e:48:f5:fa:75:0b:
18:75:e7:49:23:88:3e:38:4b:5f:a6:24:4d:04:17:3a:6f:df:
97:38:1e:76:12:13:09:e5:cc:c9:35:93:7d:64:d7:a1:07:91:
fe:96:d0:cc:d3:02:ea:da:c0:10:02:20:93:cc:ab:1b:04:a4:
3a:eb:f9:fb:e1:77:3c:0a:8b:70:be:de:5e:60:66:df:33:65:
18:d6:2b:ed:45:08:15:4c:94:ab:d1:c4:ff:c3:a7:33:1e:a1:
16:56:ea:29:01:2c:4e:09:58:d1:2b:2a:f4:3b:32:35:83:8c:
76:66:9e:a7:d8:32:85:10:ff:1a:5d:64:b5:6b:37:d5:72:82:
f6:99:69:01:83:a9:c1:53:9f:78:fb:ba:1d:b0:1d:10:94:c3:
0d:33:48:58:a1:68:3e:18:4d:b0:c5:ce:d6:e5:b9:ac:d8:9c:
09:2e:08:a8:e0:9d:67:5f:71:05:b8:d6:70:e2:90:ce:99:92:
c2:70:6e:e5:8f:24:67:75:f5:a9:44:8a:fc:20:97:31:e0:41:
39:4f:d2:27:70:09:5f:77:80:10:e7:ab:13:75:d4:18:2b:9d:
61:43:fb:d5:da:30:c7:f1:33:9d:11:c9:f8:d1:49:bf:c6:c8:
05:f8:ca:0c
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUcP4TjQ2jV1a8szZdSFh6zWr/UNswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOGQ4YTY3MmRkNzlhNzQxYjI5ZTVmZjZmYTUyMzFmNzc5
NDg4ZTcwN2IyOTBmMmYyNDcwHhcNMjUwMzI2MDAzMzU0WhcNMjYwMzI1MDAzODU0
WjAzMTEwLwYDVQQDEyhCMzhFMzMxOUJENzdCNUZGRURGOTZBNjdDQzU3QTM5ODMz
MzIxQTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskDQ3bw1OQKb
R9n7IsIGWUqGcYx19yHgCK2Ojpx1rLmxjNjId4F62oBiUKJbhbj00usv0pR5a4fn
51kHObcFA8UXXNA5x58eZpg1jy8E9vFAHX1+AW/OImg20MMm8bWOUdnTiyFSvUjR
L0HRvgIhMRakk8XvPexVPnrtSGlqxE4jMs8P6QWLgZhyUBiXmE3NcDp56y8D2TAe
2Va11XN1OOLQxNT9dnfHop0TPSV6bev5JExgq5SLnnzipjwSYjP89qTi2dcEhHay
k06sFu40ngQDad/z0dCN19qH5I/5Ui2eUTWsVRW+3YTgYRcyqNfBY6bhBNVVzX6t
A5QEZYTzaQIDAQABo4ICvDCCArgwHQYDVR0OBBYEFLOOMxm9d7X/7flqZ8xXo5gz
MhqGMB8GA1UdIwQYMBaAFMGadEeFX3rFJw2VwW4TRVoqXbMqMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTE1Y2IwYTQwMTkxOTAyMmVmMDcxZWZlLzAv
QzE5QTc0NDc4NTVGN0FDNTI3MEQ5NUMxNkUxMzQ1NUEyQTVEQjMyQS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4
MzIxYTA3LzhkMzdhMDcyLTE1YWUtNDkwNS04MTBlLTk5MWZjNjIwMWI0NS84ZDhh
NjcyZGQ3OWE3NDFiMjllNWZmNmZhNTIzMWY3Nzk0ODhlNzA3YjI5MGYyZjI0Ny5j
ZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjkxNWNiMGE0MDE5MTkw
MjJlZjA3MWVmZS8wLzMyMzYzMDMyM2E2NjM5NjI2MTNhMzYzMDMwM2EzYTJmMzQz
MDJkMzQzODIwM2QzZTIwMzIzMTM0MzAzMjMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL5ugYwDQYJ
KoZIhvcNAQELBQADggEBABYDpsanKKtZhXlkZF5I9fp1Cxh150kjiD44S1+mJE0E
Fzpv35c4HnYSEwnlzMk1k31k16EHkf6W0MzTAurawBACIJPMqxsEpDrr+fvhdzwK
i3C+3l5gZt8zZRjWK+1FCBVMlKvRxP/DpzMeoRZW6ikBLE4JWNErKvQ7MjWDjHZm
nqfYMoUQ/xpdZLVrN9VygvaZaQGDqcFTn3j7uh2wHRCUww0zSFihaD4YTbDFztbl
uazYnAkuCKjgnWdfcQW41nDikM6ZksJwbuWPJGd19alEivwglzHgQTlP0idwCV93
gBDnqxN11BgrnWFD+9XaMMfxM50RyfjRSb/GyAX4ygw=
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:17:32 2025 by rpki-client