Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b3b4ef0e-57a7-35df-83c3-ca728b7c007e.roa
File: b3b4ef0e-57a7-35df-83c3-ca728b7c007e.roa (raw, json)
Hash identifier: CaJiJoSGFjAmStE2aeSChlbcgUsxB6dIWK65ZnCMHiQ=
Subject key identifier: 20:B6:4E:C3:21:46:0F:DA:59:79:5A:8C:C1:FA:33:86:55:C0:68:C4
Certificate issuer: /CN=b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1
Certificate serial: 010D0C9F432858494733ECD74DD846F7D916F580
Authority key identifier: 1F:0D:B4:50:CE:57:53:7D:8B:BC:2C:3F:9C:6B:89:13:10:19:08:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b3b4ef0e-57a7-35df-83c3-ca728b7c007e.roa
Signing time: Sun 23 Mar 2025 01:00:39 +0000
ROA not before: Sun 23 Mar 2025 01:00:39 +0000
ROA not after: Sat 21 Jun 2025 01:00:39 +0000
asID: 16509
IP address blocks: 204.8.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:47:33:ec:d7:4d:d8:46:f7:d9:16:f5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1
Validity
Not Before: Mar 23 01:00:39 2025 GMT
Not After : Jun 21 01:00:39 2025 GMT
Subject: CN=5fca0327-7b7b-4361-92ea-b6b83f44f725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ca:42:e8:a5:2b:15:1a:74:fa:32:d4:47:36:
12:f3:42:98:5a:3e:ec:6c:3a:a7:a0:bc:a0:de:97:
58:28:b1:4e:b6:c7:86:2c:bd:ed:24:f2:bc:a6:b4:
3f:e6:04:ec:cb:09:e5:de:bc:68:55:eb:26:b9:1f:
57:78:88:48:6c:d5:98:f5:2b:59:47:da:21:6b:79:
ee:22:9d:fc:65:d7:9e:1f:60:6f:cc:7d:a1:a5:5a:
41:16:5f:72:a1:27:1a:db:55:9b:71:5f:37:0d:c6:
e6:4a:c3:61:1b:ed:36:51:cf:03:70:80:c1:dd:06:
fb:a9:94:99:3a:c2:42:57:a7:e7:d0:3d:2d:42:ef:
29:8e:e3:c0:cc:f2:69:37:3c:44:e4:d7:2e:d2:62:
49:18:de:55:7c:51:7e:66:f7:c6:43:a0:db:ab:17:
34:d3:44:d8:f6:a9:60:2b:94:d2:82:d0:94:48:d7:
66:41:f1:7c:b3:2e:4b:57:9e:42:cb:61:77:07:f3:
64:04:af:96:36:88:98:1d:91:ef:e4:df:f3:57:d3:
00:04:fb:97:d9:f7:c6:4e:c5:f7:63:40:e5:af:84:
8f:d1:10:7b:36:a9:3a:7b:13:38:8a:8d:b3:c7:ed:
1c:c7:12:e8:e2:45:aa:37:35:bb:20:ac:68:7e:a8:
cb:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B6:4E:C3:21:46:0F:DA:59:79:5A:8C:C1:FA:33:86:55:C0:68:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b3b4ef0e-57a7-35df-83c3-ca728b7c007e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.crl
X509v3 Authority Key Identifier:
keyid:1F:0D:B4:50:CE:57:53:7D:8B:BC:2C:3F:9C:6B:89:13:10:19:08:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer
sbgp-ipAddrBlock: critical
IPv4:
204.8.30.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:25:f9:be:f0:0e:81:d6:74:9c:16:61:83:c8:5f:f9:46:42:
9e:ad:5b:0e:40:a1:6b:b3:20:b7:26:8a:97:77:59:9a:0b:a3:
83:95:f1:47:ec:84:10:e0:b9:eb:58:30:e4:1a:fb:57:05:9b:
5c:02:8f:75:1d:49:e9:0a:c1:6d:f5:df:32:43:7b:0a:03:18:
7a:4b:2b:26:d1:79:82:13:1d:3c:cc:cc:77:05:68:e7:c8:7b:
be:e2:03:ec:0a:34:3d:74:ec:9f:ae:27:9e:90:7a:9b:ec:b4:
65:1b:b7:81:34:0f:38:3e:56:31:67:cb:a9:33:75:aa:a7:8f:
08:98:b6:26:0d:2d:c6:7f:8f:ad:49:ab:ff:cd:07:a4:5e:3a:
e5:85:12:e8:20:87:d8:b4:7a:43:25:66:08:d6:f6:f0:33:98:
bf:ef:bd:ae:9c:e9:89:d2:99:fc:e5:de:e8:62:2f:55:55:50:
85:42:6c:97:b2:1d:bc:fb:e9:af:a9:c1:fb:5b:29:4d:6e:d0:
d1:03:73:ca:08:7a:18:56:af:83:98:7d:25:ed:3b:f8:0b:d2:
2c:dd:fa:61:38:ae:80:75:16:7c:57:82:33:ee:f7:7c:35:e0:
3f:2e:2f:76:9e:59:d0:1f:c0:42:c2:bb:85:e5:55:36:d1:4f:
70:ba:03:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:17:08 2025 by rpki-client