Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/50638985-01ed-37b5-8f1a-7c3230a86a9d.roa
File: 50638985-01ed-37b5-8f1a-7c3230a86a9d.roa (raw, json)
Hash identifier: LMOksJYLemCnxz0EjZ4BeXDSiY+BHMKvcfpM6ApToeo=
Subject key identifier: 99:B4:05:3B:D4:1F:CA:11:F3:3D:6C:AD:DC:3C:B7:3D:8A:87:0C:68
Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Certificate serial: 010D0C9F43285848C150D189D523C03B87BFC500
Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/50638985-01ed-37b5-8f1a-7c3230a86a9d.roa
Signing time: Mon 03 Feb 2025 02:00:39 +0000
ROA not before: Mon 03 Feb 2025 02:00:39 +0000
ROA not after: Sun 04 May 2025 01:00:39 +0000
asID: 213122
IP address blocks: 128.254.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c1:50:d1:89:d5:23:c0:3b:87:bf:c5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Validity
Not Before: Feb 3 02:00:39 2025 GMT
Not After : May 4 01:00:39 2025 GMT
Subject: CN=efed6190-b56f-43ac-9c03-c168319dc5cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d4:ca:58:1c:0d:c0:69:78:9b:92:d7:c6:f5:
f9:67:60:08:cb:b2:6c:44:af:d9:c2:11:b7:9d:d6:
8e:e2:83:5a:da:bf:d3:32:77:f3:8b:27:24:50:70:
42:9d:1c:d7:73:88:33:23:33:20:eb:13:05:22:5f:
6b:38:27:59:81:44:50:e7:98:d8:b6:d7:47:05:dc:
36:ed:1e:08:ad:dc:4e:6b:8a:06:77:22:2e:77:31:
37:5a:b6:a3:69:bc:30:b8:ac:8d:f6:da:e8:40:1c:
ba:4b:1c:0a:91:ae:34:2d:00:70:a3:19:d8:08:54:
8b:fa:1c:7b:0e:4f:1d:ab:a5:1b:f9:3d:82:b9:34:
93:92:30:08:88:c8:0b:5c:aa:dc:c7:5f:e4:6e:98:
14:63:2c:06:a1:2d:8f:22:9e:bc:42:72:43:90:3f:
b2:61:25:f5:39:5b:48:66:4e:12:89:e8:4a:39:73:
ff:2b:51:18:5a:f7:62:92:54:ce:9b:4a:e6:fa:e4:
c3:71:42:eb:24:1f:d5:19:88:c2:a6:c5:60:37:d8:
e9:af:a9:c4:b6:af:30:73:26:4c:8a:36:e8:e6:9e:
06:16:ef:d7:40:db:be:ee:4d:46:a7:4b:05:5e:e9:
c4:92:46:3e:73:a3:c7:d2:7e:2a:4d:d0:b0:07:a9:
05:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B4:05:3B:D4:1F:CA:11:F3:3D:6C:AD:DC:3C:B7:3D:8A:87:0C:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/50638985-01ed-37b5-8f1a-7c3230a86a9d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
X509v3 Authority Key Identifier:
keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
sbgp-ipAddrBlock: critical
IPv4:
128.254.193.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:47:bf:3f:0b:66:6d:49:75:91:38:b5:44:39:38:cf:61:35:
23:c7:5e:32:37:c3:c5:e9:3d:c1:71:8c:61:7b:39:8b:84:93:
34:0b:99:2d:a5:9a:00:4d:1f:92:ab:d7:33:42:5f:1a:98:04:
83:33:80:0f:3b:57:a8:bc:71:ed:10:6a:fe:63:3d:c8:52:d9:
d0:20:5e:24:ac:6f:db:4b:a5:e4:a4:94:38:81:20:f9:2a:67:
7b:22:dc:35:13:ee:c9:ec:05:86:59:47:9b:ba:1e:ff:58:a9:
3c:81:f1:96:03:5a:d4:43:a4:d5:14:01:8e:72:7c:fe:e6:bd:
f0:9c:c4:49:80:f1:ae:0e:22:61:f9:1c:8e:4b:78:df:1f:47:
ee:55:3b:61:91:1a:65:47:85:17:b6:6b:74:95:90:b9:f6:fe:
f8:2e:e1:3e:d2:b0:d9:8c:18:31:ce:43:27:7c:d3:96:11:aa:
ca:2d:95:3f:be:9b:8d:1c:8c:5f:de:3c:00:2b:ed:39:5e:2b:
26:92:41:83:83:76:87:52:27:02:a7:e5:33:84:89:c0:1d:1d:
5e:81:e9:4f:87:3d:1e:5d:30:74:a0:1b:50:b2:22:00:4e:85:
fb:fd:f4:13:fe:e4:96:ad:0f:0e:0b:f0:53:75:3f:0f:1f:84:
57:86:0b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:06:19 2025 by rpki-client