Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f268b691-0349-3129-a4c4-b94cf8701fc5.roa
File: f268b691-0349-3129-a4c4-b94cf8701fc5.roa (raw, json)
Hash identifier: 2GtYqQ9li5TTBwXs5vsYdwZubx8KR0PXQOzN9BYM3tM=
Subject key identifier: 5C:CD:A6:F1:25:14:37:BA:11:45:73:BE:57:39:15:B5:FA:C0:F1:99
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848A45D3A66619F5F8A6947ABC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f268b691-0349-3129-a4c4-b94cf8701fc5.roa
Signing time: Thu 23 Jan 2025 17:07:18 +0000
ROA not before: Thu 23 Jan 2025 17:07:18 +0000
ROA not after: Wed 23 Apr 2025 16:07:18 +0000
asID: 16509
IP address blocks: 108.165.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:5d:3a:66:61:9f:5f:8a:69:47:ab:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 23 17:07:18 2025 GMT
Not After : Apr 23 16:07:18 2025 GMT
Subject: CN=ceed905a-0b06-4b01-8feb-735d4a8e95df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f6:21:c2:25:bf:52:33:35:7a:03:49:21:b5:
8d:83:ab:3b:9d:2b:e0:0b:76:00:39:62:51:fd:e0:
96:c4:b4:ee:65:84:51:f4:1b:f1:38:d5:32:23:c8:
a1:13:e3:62:03:85:e8:0e:2e:2f:91:47:3e:26:09:
f2:e2:50:01:89:31:0e:c8:35:d5:57:7d:e6:73:0e:
69:07:b2:08:a9:2b:c2:a5:00:31:86:a4:ac:b7:43:
c4:67:52:a0:c2:98:14:03:f5:b2:97:98:10:59:d0:
9a:db:bf:16:5b:28:2c:ff:e9:f9:fe:68:0d:53:da:
8b:2f:37:db:d3:1a:6f:2b:cb:fc:16:9c:b4:19:b6:
31:87:ad:2b:3b:1f:e7:c5:69:70:8e:19:a6:08:35:
c9:0b:12:2c:4d:c0:71:4a:5b:1f:9b:bb:cf:49:c2:
8b:0a:16:6a:b3:01:c4:b8:25:24:68:94:4b:8a:6e:
bf:47:ac:e3:f9:3d:cd:b2:fd:dd:af:e2:a6:f6:ef:
a9:a1:b4:96:7a:44:29:60:2a:84:7b:de:db:0f:d9:
e6:b4:fd:2e:02:62:be:ba:e4:6e:ae:e7:44:e3:5d:
69:44:ed:cc:17:a3:46:2d:c7:16:4d:57:91:a0:f7:
53:f1:8e:b8:b0:78:ea:62:21:14:43:f6:b6:25:9b:
ba:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:CD:A6:F1:25:14:37:BA:11:45:73:BE:57:39:15:B5:FA:C0:F1:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f268b691-0349-3129-a4c4-b94cf8701fc5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.115.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:bc:ad:7d:85:47:ca:18:6c:3c:c9:04:d5:6e:b1:4d:db:ce:
8a:94:e6:10:0e:6b:5f:25:d8:8e:04:b9:fd:85:25:13:39:29:
57:72:8c:e8:f7:23:e1:eb:db:e1:73:ed:bb:cf:18:1b:56:83:
c8:88:03:39:db:55:09:96:2c:33:36:61:51:c1:b3:30:03:4c:
d1:04:34:4d:ad:fa:28:a6:4f:45:7d:f1:f5:80:c2:fb:37:51:
0b:5e:82:0f:ce:a7:97:d6:3a:ae:99:c6:9d:79:25:18:51:95:
e8:de:71:c1:67:aa:58:4e:38:47:44:20:7d:35:1c:8e:e7:16:
49:59:5b:03:2d:a9:0e:1e:fc:ff:c5:7e:e3:27:f8:6b:a4:35:
78:f6:33:a5:fb:9c:c2:68:f6:da:62:49:0e:80:a6:7a:7c:15:
9f:4e:ac:60:74:be:2e:3e:d7:84:0c:77:ff:79:bf:a9:65:f7:
22:9c:31:7a:08:8a:29:c1:21:43:ce:9c:b4:94:44:a6:03:e5:
05:fc:09:27:30:f6:59:d4:9a:af:78:e8:95:a0:55:26:df:c1:
8d:e0:07:dd:4a:fa:e3:7b:7b:ed:98:0f:ff:94:99:2c:6b:94:
a9:7d:4d:76:cd:98:1b:ca:9e:60:2b:8b:f1:ab:66:d4:a6:f8:
d4:e9:5f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 02:49:56 2025 by rpki-client