Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/975416ca-3764-3fb0-91a9-a7e762bbbe6c.roa
File: 975416ca-3764-3fb0-91a9-a7e762bbbe6c.roa (raw, json)
Hash identifier: zydmJwL8YatNcbF7Bxdi9a0EgA0IIH+n9pgkFviypVg=
Subject key identifier: 7A:8B:34:4F:4B:0B:11:02:91:C5:3E:A9:95:B9:0C:19:2A:4A:39:F2
Certificate issuer: /CN=d6b690dc-d325-42b2-9834-06e4a779b209
Certificate serial: 010D0C9F432858495ABEC1E49ABC3E0CC1264990
Authority key identifier: ED:44:13:86:A1:CB:9D:F3:26:B2:37:C2:5B:BF:98:C4:EF:D2:5F:8C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/975416ca-3764-3fb0-91a9-a7e762bbbe6c.roa
Signing time: Sun 30 Mar 2025 01:00:47 +0000
ROA not before: Sun 30 Mar 2025 01:00:47 +0000
ROA not after: Sat 28 Jun 2025 01:00:47 +0000
asID: 23491
IP address blocks: 198.252.136.0/24 maxlen: 24
204.152.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/d6b690dc-d325-42b2-9834-06e4a779b209.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/d6b690dc-d325-42b2-9834-06e4a779b209.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5a:be:c1:e4:9a:bc:3e:0c:c1:26:49:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b690dc-d325-42b2-9834-06e4a779b209
Validity
Not Before: Mar 30 01:00:47 2025 GMT
Not After : Jun 28 01:00:47 2025 GMT
Subject: CN=51d9803d-3f14-41aa-ad1d-4c823336da0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:4c:0d:48:44:b0:79:89:b9:30:5d:16:b8:60:
22:55:ce:81:e8:70:fd:ef:f2:12:b1:05:d7:f1:52:
77:ff:a6:c5:00:4a:10:64:c2:db:a6:81:d5:7f:c1:
0f:88:d6:1f:90:03:56:f3:a5:62:2c:ea:6c:79:b0:
c3:83:df:73:f9:45:e9:43:17:61:9f:7a:d3:a4:5c:
c4:13:74:9d:1e:6f:9b:56:ba:64:f1:ea:4a:56:73:
2d:31:1f:de:40:6e:fa:b4:ec:5e:2b:3d:d7:55:03:
d7:2d:4a:94:7e:fc:c4:41:95:30:f1:d4:ea:d9:c5:
34:2e:e9:1c:c7:12:00:4d:04:cd:ed:87:c4:a3:a3:
f5:9c:4b:95:6d:cc:8d:ae:31:eb:76:75:ee:92:1c:
f1:10:68:ca:45:db:f9:ce:b2:ad:88:29:d1:6a:b0:
50:79:88:6a:8c:bd:f4:19:67:ae:f6:ca:b8:48:3d:
d3:37:86:5c:b9:c8:28:59:54:a7:00:83:2b:6a:20:
bc:94:be:d7:a8:3d:76:76:ad:1a:61:bb:69:7a:a8:
00:58:3e:30:83:da:21:cf:5b:37:4a:fa:11:f9:82:
62:00:25:e2:06:ce:41:d4:40:85:06:10:29:0d:bc:
81:76:5a:7b:1e:5d:43:2c:57:45:bf:cd:33:c3:86:
c7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:8B:34:4F:4B:0B:11:02:91:C5:3E:A9:95:B9:0C:19:2A:4A:39:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/975416ca-3764-3fb0-91a9-a7e762bbbe6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/d6b690dc-d325-42b2-9834-06e4a779b209.crl
X509v3 Authority Key Identifier:
keyid:ED:44:13:86:A1:CB:9D:F3:26:B2:37:C2:5B:BF:98:C4:EF:D2:5F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209.cer
sbgp-ipAddrBlock: critical
IPv4:
198.252.136.0/24
204.152.119.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:a8:92:1e:34:d2:cf:07:46:4b:a5:84:98:e4:17:6e:3d:a5:
d6:43:93:c0:d8:56:11:72:26:8d:0f:42:40:e5:df:c8:ab:0f:
1e:60:87:41:fb:9c:46:1a:36:ed:fe:bb:2c:91:ac:2c:ca:a9:
1f:1f:45:f3:3d:44:ba:1f:d8:69:6d:5e:ba:c2:33:09:c0:18:
70:6c:33:26:1a:4f:57:23:6c:c6:6d:d8:f1:68:f8:74:1d:fc:
b3:7e:23:d7:47:7b:6f:e7:03:08:6c:4e:f0:07:75:fa:14:00:
c0:4d:15:c7:f7:39:c6:f6:6b:8b:dd:0d:a1:15:1d:05:da:c6:
66:ee:64:d2:02:0a:44:92:87:2e:69:be:c8:4d:6b:dd:35:72:
58:7e:08:8d:45:03:62:22:fb:82:0e:40:0d:8b:8a:ad:32:90:
6d:d0:c2:f9:c5:0b:d2:c2:f1:da:8b:0f:d0:60:27:a7:83:ed:
61:cf:38:50:8c:fc:8f:fd:0d:8c:c3:df:7b:b4:43:d1:33:bd:
6d:0e:fd:b5:8d:e9:02:bc:f0:f6:00:68:50:ac:47:77:69:32:
6a:84:60:5b:63:a3:59:7d:31:10:40:5e:99:a3:15:3d:a7:8a:
ce:64:15:e0:1e:00:10:12:73:4b:b4:82:cb:76:79:17:d3:5b:
05:d0:f9:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 06:15:16 2025 by rpki-client