Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36342e302f32342d3234203d3e20343031353538.roa
File: 3139392e3233312e36342e302f32342d3234203d3e20343031353538.roa (raw, json)
Hash identifier: PUhPm9N03sp7UwOIBH1399IpD4CydnHBk2IiXZdudrQ=
Subject key identifier: 58:7E:F8:AA:D0:7F:C8:D3:2A:A3:8D:FD:78:02:F4:A9:15:37:84:02
Certificate issuer: /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial: 738DF5B487BD7623244C6A24A08F3E82EBE941B7
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36342e302f32342d3234203d3e20343031353538.roa
Signing time: Wed 19 Feb 2025 03:37:04 +0000
ROA not before: Wed 19 Feb 2025 03:32:04 +0000
ROA not after: Wed 18 Feb 2026 03:37:04 +0000
asID: 401558
IP address blocks: 199.231.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 16 Mar 2025 14:36:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:8d:f5:b4:87:bd:76:23:24:4c:6a:24:a0:8f:3e:82:eb:e9:41:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Validity
Not Before: Feb 19 03:32:04 2025 GMT
Not After : Feb 18 03:37:04 2026 GMT
Subject: CN=587EF8AAD07FC8D32AA38DFD7802F4A915378402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:62:16:21:5f:d1:01:6b:17:e1:e0:0b:72:78:
bf:ed:11:52:87:ff:25:cb:35:de:2b:77:c9:91:4d:
00:c9:86:7f:be:7d:9f:5c:27:bd:39:27:25:1f:6d:
c4:5c:a1:8c:44:3f:70:bd:fd:f7:fb:03:a4:27:de:
75:72:d4:4e:1b:93:43:92:6f:93:55:03:e0:9a:de:
9d:d1:f2:7b:c9:a0:65:b9:77:39:a3:0f:db:67:93:
fc:d4:7d:52:5b:f2:fc:e4:ed:24:cb:d5:ea:a9:79:
cc:fc:e9:75:1e:cd:cf:61:0e:90:4c:94:95:d0:89:
aa:d9:6d:3b:4a:c1:18:15:86:52:f2:41:05:22:78:
b6:29:f4:5f:0e:3f:47:09:d0:2c:08:76:bb:b8:8e:
62:5a:fa:be:90:4f:0a:f9:11:86:ad:d9:3c:2b:c4:
50:94:75:e1:89:cd:bb:98:cc:e6:07:80:4a:2c:8c:
8a:25:ee:9a:83:68:61:08:3e:1f:be:e1:4a:df:8d:
5e:0a:78:5c:59:4b:6e:2d:41:83:7a:fd:17:9b:91:
c1:ec:28:74:ca:37:bc:8d:31:b7:43:93:d7:eb:dc:
8c:3d:c4:91:82:52:e0:e4:91:90:18:06:62:d3:06:
51:ce:4f:69:e3:07:4a:6f:4f:8b:56:e5:bf:e1:c2:
e6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:7E:F8:AA:D0:7F:C8:D3:2A:A3:8D:FD:78:02:F4:A9:15:37:84:02
X509v3 Authority Key Identifier:
keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36342e302f32342d3234203d3e20343031353538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.231.64.0/24
Signature Algorithm: sha256WithRSAEncryption
84:27:9a:05:44:13:a9:2a:a7:7a:40:7a:92:2f:92:66:51:22:
27:63:d7:0f:f2:05:8b:39:e2:3a:87:fa:d8:37:5e:00:12:4e:
20:a8:df:9d:21:8e:6c:20:bf:82:77:03:95:7e:a0:87:cc:ca:
20:38:69:9e:c6:fe:9a:de:bf:9a:f8:70:f1:9f:7f:f8:ec:2f:
f1:b3:2f:46:66:67:a0:bd:8b:26:a1:38:68:24:39:21:0d:de:
f6:fa:e4:c1:24:0e:ab:3b:5b:74:16:1a:37:f4:7f:ea:fc:89:
a7:4c:30:4c:dd:96:22:4f:ec:7a:f5:e7:f8:3f:93:1a:c0:4c:
c2:6d:11:6c:87:03:ee:8e:b5:26:6d:4c:58:e4:d8:8a:d6:a7:
84:6d:7b:b1:db:e7:c7:ec:9e:77:82:64:32:76:dc:09:bd:75:
c5:ff:e8:63:c5:9b:ad:92:74:2e:9e:ee:c0:10:f9:00:87:c1:
26:f1:0d:67:70:97:fa:14:aa:90:fd:a4:74:f8:7f:20:36:8b:
e4:34:d1:8d:ee:98:25:30:0e:af:15:76:07:19:1b:90:9c:4e:
92:c6:28:a6:bf:c6:56:bd:43:f3:bb:6e:36:5a:f7:4e:9b:b1:
1a:0a:b9:5c:a7:13:3f:2b:d4:6b:3e:2b:b5:a0:2c:21:b2:bb:
a8:af:6a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 15 15:36:06 2025 by rpki-client