Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/059721de-e619-3d5c-9446-7a8a6df39cf2.roa
File: 059721de-e619-3d5c-9446-7a8a6df39cf2.roa (raw, json)
Hash identifier: oR+AMIO2/mESk/nN2pR+O8JkYyYem9pp/yMTXiyDFOQ=
Subject key identifier: 29:94:7E:A2:30:01:5B:41:5A:A8:49:3D:E3:19:51:EC:D6:19:96:41
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848D7A6594A3C6A3476608D5F90
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/059721de-e619-3d5c-9446-7a8a6df39cf2.roa
Signing time: Tue 11 Feb 2025 02:00:39 +0000
ROA not before: Tue 11 Feb 2025 02:00:39 +0000
ROA not after: Mon 12 May 2025 01:00:39 +0000
asID: 7342
IP address blocks: 209.131.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d7:a6:59:4a:3c:6a:34:76:60:8d:5f:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Feb 11 02:00:39 2025 GMT
Not After : May 12 01:00:39 2025 GMT
Subject: CN=b50b216d-c81f-4c4e-8a4e-3174bae5d2d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7c:58:ed:ce:15:85:88:34:30:f8:bd:07:0c:
1f:f8:3c:4a:ed:36:92:ac:6d:6f:74:0c:51:e5:ec:
47:67:cd:f2:6b:89:9e:87:08:2d:c2:77:f2:e2:d6:
4c:63:ab:70:cf:5a:12:0b:1e:5b:e6:ef:a4:4e:1e:
67:20:e2:0b:ef:64:76:4c:5a:a4:eb:f0:d2:5f:74:
bb:58:33:25:50:7a:1f:8e:38:08:21:d6:0b:d7:46:
86:ef:2d:1d:57:e7:00:ae:53:30:e9:51:53:36:f6:
2e:1c:8b:66:0b:ad:47:44:b6:7b:4e:e5:aa:85:e2:
75:f3:3d:48:f9:d4:13:7d:cb:fe:54:a8:b4:35:91:
26:73:3f:dd:23:1d:25:b8:81:c0:d7:7a:1f:91:a0:
a2:c1:03:6c:a3:a0:af:2f:f5:83:96:32:5f:23:4b:
0b:1b:19:f3:8b:12:20:fb:5d:59:88:b8:26:68:36:
da:24:a0:df:77:68:cc:60:30:46:70:73:0a:7c:72:
fc:cb:4f:d7:02:95:e1:89:ba:4f:db:9f:49:ce:eb:
ef:a5:c6:ae:0b:b2:e6:77:dc:e0:eb:7f:00:03:4b:
3b:a6:52:80:53:4c:49:b0:de:01:36:51:1e:4c:80:
38:a9:96:d2:a7:04:b6:13:2c:9f:2e:7a:c1:89:ab:
f0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:94:7E:A2:30:01:5B:41:5A:A8:49:3D:E3:19:51:EC:D6:19:96:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/059721de-e619-3d5c-9446-7a8a6df39cf2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
209.131.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:93:80:95:17:3a:a6:08:93:5f:43:62:b7:18:9e:28:0b:fe:
bb:2b:8c:d9:6e:7f:d8:52:ee:52:d8:10:38:fc:6b:75:04:0a:
9b:82:68:58:99:6d:43:77:50:f8:4d:31:2f:89:98:1a:01:3d:
97:20:d9:6b:8b:b5:5a:82:cf:78:68:d7:10:bd:e3:57:c8:c4:
2c:c8:40:f4:0a:86:1f:29:52:27:f6:44:fa:4e:3b:e0:9e:18:
0c:54:14:be:58:72:6f:87:a7:6f:8c:13:2c:d0:b0:7f:a2:7b:
17:62:87:f9:2a:30:09:73:6d:ae:8f:24:5e:d6:1e:a7:c8:18:
a5:26:0d:b0:c7:85:84:54:9c:f2:10:5b:fc:58:c8:65:cd:11:
6b:ba:9e:b7:aa:48:53:a7:5c:81:2f:a6:de:9d:1e:28:4a:16:
44:0e:d3:f6:11:f9:87:21:c9:66:0c:3d:79:7b:e0:38:33:a7:
88:b1:4e:5c:9f:36:dc:88:fe:ad:73:38:58:44:31:f0:b6:58:
27:8b:f2:6c:a0:82:39:c6:9a:b0:4d:f5:13:7d:ed:09:35:a2:
81:ec:c0:b6:38:57:a9:e4:8f:38:4e:d9:47:fc:64:36:0d:f2:
07:56:c2:85:d8:eb:8f:0e:c0:b0:a4:c1:f4:a8:9a:96:a3:6c:
93:e5:82:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:49:20 2025 by rpki-client