Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/19223d8a-7d6e-3928-9795-22ccf759ddb5.roa
File: 19223d8a-7d6e-3928-9795-22ccf759ddb5.roa (raw, json)
Hash identifier: 1Gg/uH9hemy+iM0ezVJl2T0ZPxT/4Xxr0BR8VGVh614=
Subject key identifier: 88:90:D1:D8:56:5C:F7:7C:3E:E9:CD:A5:5E:1F:6C:27:78:2B:E4:82
Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial: 010D0C9F432858493243D7E3E9D94ADE106EA200
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/19223d8a-7d6e-3928-9795-22ccf759ddb5.roa
Signing time: Sat 15 Mar 2025 13:00:52 +0000
ROA not before: Sat 15 Mar 2025 13:00:52 +0000
ROA not after: Fri 13 Jun 2025 13:00:52 +0000
asID: 21949
IP address blocks: 104.192.44.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:32:43:d7:e3:e9:d9:4a:de:10:6e:a2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
Validity
Not Before: Mar 15 13:00:52 2025 GMT
Not After : Jun 13 13:00:52 2025 GMT
Subject: CN=05b9c868-3e57-4ea3-bd53-e2397e5a6eb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b1:42:55:a9:91:0e:e9:df:6a:f9:dd:ce:c9:
56:fd:b8:ef:89:f6:43:62:cb:59:57:59:e1:94:37:
17:16:2a:30:d4:d3:e9:12:94:0d:40:1a:d7:5c:bb:
04:25:ff:7f:70:4a:56:83:3c:42:6c:4e:6b:05:bc:
2a:d8:3d:59:e1:97:7b:52:4b:35:ea:6a:85:da:9c:
16:ea:59:9c:83:a2:b7:f9:32:db:10:83:48:df:d4:
1f:f4:24:75:b3:59:f1:2e:e7:4a:db:aa:f6:c7:37:
7e:49:73:ea:36:8e:a2:5b:00:81:9d:ae:29:8a:6f:
f1:64:24:96:01:9e:9b:df:9c:d7:53:e3:7b:27:f1:
05:59:ea:30:f5:18:86:3a:a4:e6:ea:2c:b7:42:89:
13:0b:7b:af:a5:f6:a1:85:4d:e6:dc:21:ac:a4:ed:
fe:2d:a8:d4:1b:71:5f:92:3b:17:bf:0c:17:5a:6d:
69:3a:91:5c:93:9a:8e:d1:e9:6e:53:b3:5f:23:4b:
4e:49:09:c3:84:dd:af:3d:cf:68:43:cb:06:24:06:
39:d2:6a:10:6e:77:23:8f:88:90:a8:ab:3a:0e:33:
19:99:48:6b:18:ce:6f:4e:31:15:76:50:30:cc:35:
cf:c7:34:a2:8c:69:dd:7f:41:ff:39:66:6a:31:99:
ba:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:90:D1:D8:56:5C:F7:7C:3E:E9:CD:A5:5E:1F:6C:27:78:2B:E4:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/19223d8a-7d6e-3928-9795-22ccf759ddb5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
X509v3 Authority Key Identifier:
keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
sbgp-ipAddrBlock: critical
IPv4:
104.192.44.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:9a:fe:67:2d:8a:29:82:07:b1:28:d3:62:18:f8:eb:81:c2:
ef:62:b1:15:ef:bc:c6:96:2e:84:68:ca:2e:c8:c5:2c:c6:19:
b9:cb:0e:58:f4:ad:45:43:2e:6f:68:d6:f7:80:26:d2:f5:c2:
8b:23:4a:55:bc:9c:58:df:4f:e8:69:e2:4b:cd:f4:62:36:9d:
75:75:a3:61:62:ab:80:26:70:b6:a9:28:0b:4c:71:56:38:06:
a3:a9:31:2e:3a:7b:86:46:ec:16:1f:0b:9b:dc:b6:54:59:22:
ef:b4:33:5f:e5:56:67:86:84:97:9d:a7:45:d8:31:59:c5:c7:
25:99:b2:0f:0f:99:83:d2:a0:79:57:76:bc:1b:f9:87:ce:f1:
67:f5:3d:01:9d:1c:6b:27:a5:db:c3:2e:f6:01:5b:10:e7:db:
9b:82:40:a5:f1:dd:1d:7d:99:2e:da:73:ed:b9:f7:9e:64:87:
49:9a:4d:57:8f:cc:22:d9:a1:ea:a8:fe:e3:48:f2:12:1e:72:
ab:51:0b:88:e5:e9:09:d7:29:0b:aa:56:4a:25:38:76:a3:7a:
47:c1:b4:d0:9d:43:f3:5a:af:13:32:42:2c:ed:41:7a:d1:59:
0f:92:0a:80:78:4c:6e:c0:22:60:eb:61:85:9c:c0:86:21:39:
30:d0:4e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 13:22:02 2025 by rpki-client