Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/AS401507.roa
File: AS401507.roa (raw, json)
Hash identifier: eaAtR/gx8qePu3z87HRNc8i2Tgk865715SNsot6iyac=
Subject key identifier: 0B:B5:6F:87:80:03:BA:02:6D:06:80:EA:B7:DF:64:79:AF:97:08:37
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 34157940A483A563F3A17A4587571F7BEAEA8B9A
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/AS401507.roa
Signing time: Sun 27 Apr 2025 13:05:17 +0000
ROA not before: Sun 27 Apr 2025 13:00:17 +0000
ROA not after: Sun 26 Apr 2026 13:05:17 +0000
asID: 401507
IP address blocks: 2a14:7584:6000::/36 maxlen: 48
2a14:7584:601a::/48 maxlen: 48
2a14:7584:601b::/48 maxlen: 48
2a14:7584:601c::/48 maxlen: 48
2a14:7584:606d::/48 maxlen: 48
2a14:7584:6149::/48 maxlen: 48
2a14:7584:614a::/48 maxlen: 48
2a14:7584:614b::/48 maxlen: 48
2a14:7584:614c::/48 maxlen: 48
2a14:7584:61b8::/48 maxlen: 48
2a14:7584:61b9::/48 maxlen: 48
2a14:7584:61ba::/48 maxlen: 48
2a14:7584:61bb::/48 maxlen: 48
2a14:7584:61bc::/48 maxlen: 48
2a14:7584:61bd::/48 maxlen: 48
2a14:7584:61be::/48 maxlen: 48
2a14:7584:61bf::/48 maxlen: 48
2a14:7584:61c1::/48 maxlen: 48
2a14:7584:61c2::/48 maxlen: 48
2a14:7584:61c3::/48 maxlen: 48
2a14:7584:61c4::/48 maxlen: 48
2a14:7584:61c5::/48 maxlen: 48
2a14:7584:61c6::/48 maxlen: 48
2a14:7584:61c7::/48 maxlen: 48
2a14:7584:61c8::/48 maxlen: 48
2a14:7584:61c9::/48 maxlen: 48
2a14:7584:61ca::/48 maxlen: 48
2a14:7584:61cb::/48 maxlen: 48
2a14:7584:61cc::/48 maxlen: 48
2a14:7584:61cd::/48 maxlen: 48
2a14:7584:61ce::/48 maxlen: 48
2a14:7584:61cf::/48 maxlen: 48
2a14:7584:61d1::/48 maxlen: 48
2a14:7584:61d2::/48 maxlen: 48
2a14:7584:61d3::/48 maxlen: 48
2a14:7584:61d4::/48 maxlen: 48
2a14:7584:61d5::/48 maxlen: 48
2a14:7584:61d6::/48 maxlen: 48
2a14:7584:61d7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:15:79:40:a4:83:a5:63:f3:a1:7a:45:87:57:1f:7b:ea:ea:8b:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Apr 27 13:00:17 2025 GMT
Not After : Apr 26 13:05:17 2026 GMT
Subject: CN=0BB56F878003BA026D0680EAB7DF6479AF970837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1a:40:23:44:6a:a9:51:89:40:b0:0a:04:41:
c6:1f:34:df:7c:c8:3b:f8:a4:3e:bf:4f:a5:de:a3:
3f:c6:b2:3f:e4:2e:67:91:83:22:3d:d0:ea:3f:88:
96:42:2f:af:8f:7d:3b:c2:38:96:8e:38:a8:a0:31:
9a:c4:c4:c1:7e:39:b2:bf:a3:4e:01:f4:f3:fe:88:
70:64:2a:32:62:b7:02:f2:fb:31:a0:08:f2:06:60:
5f:f4:b6:38:6d:08:4a:96:25:35:56:94:4c:d9:56:
e7:1a:9f:92:30:fd:82:59:a4:fe:b9:55:0f:16:6d:
e2:74:a0:cf:6a:69:ed:cf:0f:2a:92:a4:bf:71:d4:
6c:72:96:fc:36:f9:05:84:6d:ff:dd:74:3e:40:08:
e5:ce:dc:fc:33:fb:43:e8:43:94:47:10:8f:08:ab:
74:d5:a7:9e:fb:34:83:35:74:6c:5b:fe:46:4e:24:
4c:e5:89:64:5a:9e:97:4b:64:68:c5:f4:28:f0:ef:
85:d3:e1:ac:63:fa:4a:a5:f0:a6:5d:e6:45:49:4c:
3a:79:eb:1f:64:00:ab:c4:8a:31:ae:b0:7e:d7:55:
81:2a:4a:c5:4d:59:2b:1c:4c:bb:4f:f9:b0:af:1a:
e8:88:f0:28:14:9e:80:22:ca:24:1c:a8:c3:e9:78:
1e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B5:6F:87:80:03:BA:02:6D:06:80:EA:B7:DF:64:79:AF:97:08:37
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/AS401507.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6000::/36
Signature Algorithm: sha256WithRSAEncryption
a2:ff:e5:97:0a:74:fb:9d:bb:1f:d1:d7:2b:39:86:ab:04:64:
c6:77:5f:7a:66:bf:1c:a1:62:fb:e1:28:60:ab:d0:ea:f9:bc:
a6:62:d1:b6:35:b3:28:9d:cc:3d:f6:f0:d6:b6:ce:8a:65:eb:
63:84:e7:b6:b0:f7:73:60:7f:76:d7:9b:c2:45:18:7c:df:c1:
8d:b1:fb:bf:e2:6e:fe:a5:7d:7c:4d:c5:d7:96:c5:4d:a4:4e:
38:8e:19:0b:7f:d8:ef:21:0f:93:13:e0:af:ce:78:c6:0a:7a:
d0:0e:1f:29:56:95:6b:19:30:a8:dd:b4:2e:3c:bb:6d:e4:83:
3c:a3:9b:91:e6:d6:52:3e:5a:03:a5:6c:a2:43:71:79:8f:46:
09:3a:1f:78:45:a1:d1:ae:17:9d:fd:b3:b3:ad:22:c8:fc:6d:
67:da:28:77:21:e5:2f:59:d2:d3:29:db:65:df:81:50:cc:e2:
49:ab:c1:56:61:01:d1:1a:39:37:cd:3d:72:da:0e:53:3a:8b:
1b:42:72:f0:af:c4:03:ba:d9:fd:55:0c:db:5d:45:98:8f:a2:
b1:e2:99:33:72:0e:e3:da:be:2b:33:ca:98:8a:53:4d:b4:0d:
41:40:9f:29:87:00:95:51:30:2b:17:eb:b4:97:a6:3d:f3:9f:
73:90:0f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:39:02 2025 by rpki-client