Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8c3507e9-1d71-3f13-874f-8f331de4a8bb.roa
File: 8c3507e9-1d71-3f13-874f-8f331de4a8bb.roa (raw, json)
Hash identifier: ZXjhfAcXCZj6X/5FSRtn+lFAyrQ1IDyC5hXazfNBiOA=
Subject key identifier: CA:A6:7C:11:52:6C:C7:FC:DD:CF:6F:84:7D:F3:CB:24:E5:61:EA:6F
Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial: 010D0C9F43285848FD56BCD45D44FD2DE44304A8
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8c3507e9-1d71-3f13-874f-8f331de4a8bb.roa
Signing time: Mon 24 Feb 2025 14:00:52 +0000
ROA not before: Mon 24 Feb 2025 14:00:52 +0000
ROA not after: Sun 25 May 2025 13:00:52 +0000
asID: 393795
IP address blocks: 8.41.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:56:bc:d4:5d:44:fd:2d:e4:43:04:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Validity
Not Before: Feb 24 14:00:52 2025 GMT
Not After : May 25 13:00:52 2025 GMT
Subject: CN=ec631f51-2bdf-4345-85e1-6bc296f19a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cb:fc:ce:93:71:c1:eb:db:9d:0b:8d:1f:3b:
76:ae:0e:d7:a8:d3:62:14:2e:67:5f:80:c6:4c:f3:
80:1c:39:51:31:99:7b:b6:42:3e:bb:0d:a0:5b:5c:
10:74:bf:cd:a7:8b:ee:b8:45:36:cf:72:2d:13:12:
bb:fd:e8:12:9b:d3:ab:e4:ce:c5:3a:ce:d1:2b:8e:
ac:11:90:b0:aa:f7:01:95:02:65:17:81:d0:f7:a2:
74:a5:6f:5a:13:04:3d:ce:45:d5:b7:18:0e:df:4b:
a0:d2:3c:d1:19:ee:0f:34:24:2a:66:11:e5:ad:93:
59:4d:84:b9:6d:05:4c:e5:ed:95:7d:da:3e:fe:74:
1a:67:da:df:f0:f0:d0:fb:23:fe:8e:c3:aa:a0:ba:
d2:32:75:74:c0:22:a2:69:a2:3e:41:0d:3c:d2:ce:
dd:8d:3e:ce:0b:3a:c8:d1:8f:4e:d0:66:0c:d6:8c:
72:8d:57:be:b9:1f:f5:5f:90:55:1e:2b:ce:29:56:
4b:15:bf:8c:f2:63:90:be:1f:1a:e0:79:2d:1a:de:
43:63:3e:77:df:10:26:86:ac:9c:92:1c:4d:0e:68:
8c:99:dc:b4:11:6c:ff:18:aa:b4:4b:f7:39:8d:2f:
0c:94:60:53:8b:21:59:9f:02:92:c3:c0:68:e5:38:
ad:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A6:7C:11:52:6C:C7:FC:DD:CF:6F:84:7D:F3:CB:24:E5:61:EA:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8c3507e9-1d71-3f13-874f-8f331de4a8bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
X509v3 Authority Key Identifier:
keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
sbgp-ipAddrBlock: critical
IPv4:
8.41.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:df:1c:f2:7c:ac:17:78:b7:ec:6a:dd:7a:73:d3:7e:ec:39:
14:35:7a:b4:64:f1:f5:ce:91:86:9f:d1:75:27:7b:24:7b:05:
66:d2:d2:5f:38:4b:66:22:b5:c9:c5:af:f2:6d:33:3f:90:7b:
a1:56:08:84:5e:32:7d:84:53:2f:12:1a:f1:cd:eb:5d:cb:c8:
bc:ec:92:0e:67:d9:59:81:91:5a:30:3e:cb:22:41:dc:c5:64:
46:58:5d:29:8d:88:92:84:13:85:f1:05:38:6f:b4:40:f2:ae:
24:8e:85:a9:b5:78:39:a2:c3:30:12:b3:1f:0e:24:8e:ab:dd:
98:83:48:d1:a1:d5:3e:98:8c:2f:97:20:5b:2b:17:fa:18:3c:
53:6f:6b:6d:62:54:7c:89:89:2b:89:6f:86:c9:51:5c:d0:6a:
e6:6c:e4:db:8b:45:61:7e:14:c0:e3:a2:ac:36:b4:e8:37:e2:
62:f9:45:80:e2:79:dd:1d:78:ad:12:56:e7:57:72:89:4d:b4:
65:6b:82:05:72:84:c1:15:22:58:29:7b:3a:63:64:2a:bf:1e:
23:a0:6f:7c:4f:06:18:6e:52:50:f5:ba:23:fe:c1:fe:0e:31:
34:23:24:36:6b:fe:9e:89:56:4c:4b:27:32:0d:f6:ab:19:20:
d2:cf:2e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 23:47:51 2025 by rpki-client