Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f55a9bc-459c-49dd-8940-ede4a86712a5/cdd09a13-9c20-3caf-bd14-d3b3f7d34355.roa
File: cdd09a13-9c20-3caf-bd14-d3b3f7d34355.roa (raw, json)
Hash identifier: f03IN0CLGoxUHVFQcV5BLkUfrJbzLYyOr9Q6PCiYw38=
Subject key identifier: 60:D2:97:3B:23:D5:34:DB:2B:37:61:43:91:22:FD:D0:15:59:52:5B
Certificate issuer: /CN=5f55a9bc-459c-49dd-8940-ede4a86712a5
Certificate serial: 010D0C9F432858491D7181A974E2568AD7516C40
Authority key identifier: 90:A5:CB:75:0E:E7:24:B4:B7:3D:AB:91:C2:B5:78:7B:96:A7:13:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f55a9bc-459c-49dd-8940-ede4a86712a5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f55a9bc-459c-49dd-8940-ede4a86712a5/cdd09a13-9c20-3caf-bd14-d3b3f7d34355.roa
Signing time: Sat 08 Mar 2025 02:00:39 +0000
ROA not before: Sat 08 Mar 2025 02:00:39 +0000
ROA not after: Fri 06 Jun 2025 01:00:39 +0000
asID: 16509
IP address blocks: 199.188.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f55a9bc-459c-49dd-8940-ede4a86712a5/5f55a9bc-459c-49dd-8940-ede4a86712a5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f55a9bc-459c-49dd-8940-ede4a86712a5/5f55a9bc-459c-49dd-8940-ede4a86712a5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f55a9bc-459c-49dd-8940-ede4a86712a5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 09 Apr 2025 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1d:71:81:a9:74:e2:56:8a:d7:51:6c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f55a9bc-459c-49dd-8940-ede4a86712a5
Validity
Not Before: Mar 8 02:00:39 2025 GMT
Not After : Jun 6 01:00:39 2025 GMT
Subject: CN=ce536a26-e690-4cca-b78d-3c92814cb28f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:70:89:e9:7b:75:e0:25:36:70:e5:a7:1a:e2:
60:37:bc:fd:c8:29:a1:fb:a5:aa:9e:0a:a2:c0:55:
b3:76:28:79:b8:10:7e:6b:d6:40:af:b5:a8:4f:16:
62:ea:eb:9b:32:e8:67:be:29:f0:fc:3c:73:58:44:
6e:5a:10:57:af:57:2f:4a:49:cc:f4:6d:16:32:8a:
92:dc:70:70:a2:4b:b9:19:1c:1a:2f:f8:3d:19:c8:
f7:a3:4f:27:35:6a:3d:c5:a9:63:20:79:dc:2d:ee:
43:6d:e1:3b:98:5f:a6:cf:fb:29:23:1e:92:36:80:
3c:a7:e2:96:7a:eb:c7:55:63:d7:c8:e6:8a:69:a3:
bb:ea:8e:f0:e9:e1:d0:13:f4:21:a4:10:cf:76:b6:
0a:22:a1:91:5a:b9:a0:67:4d:7f:40:3f:5d:70:36:
3e:53:15:c8:9a:54:f8:ab:a0:06:33:db:81:e2:96:
a4:5d:d8:95:42:10:ca:99:e2:cd:13:6a:ba:db:78:
7f:b4:64:a3:60:29:ed:bc:d4:74:ba:95:86:dd:15:
cc:5a:e2:e6:29:d6:60:23:55:23:55:0b:c0:02:51:
8f:63:57:e9:9d:81:07:8f:2f:72:d2:47:ec:48:19:
d4:43:38:c3:fe:ac:71:75:69:22:a8:54:97:65:d7:
5b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D2:97:3B:23:D5:34:DB:2B:37:61:43:91:22:FD:D0:15:59:52:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f55a9bc-459c-49dd-8940-ede4a86712a5/cdd09a13-9c20-3caf-bd14-d3b3f7d34355.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f55a9bc-459c-49dd-8940-ede4a86712a5/5f55a9bc-459c-49dd-8940-ede4a86712a5.crl
X509v3 Authority Key Identifier:
keyid:90:A5:CB:75:0E:E7:24:B4:B7:3D:AB:91:C2:B5:78:7B:96:A7:13:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f55a9bc-459c-49dd-8940-ede4a86712a5.cer
sbgp-ipAddrBlock: critical
IPv4:
199.188.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:8e:7b:d9:77:2e:4b:a0:45:7f:56:69:43:68:e5:00:37:76:
6d:72:69:db:2e:dd:f1:73:fa:bc:13:d0:b9:ec:fe:60:5b:6e:
b0:ef:94:6b:25:4a:8a:a5:c2:e1:e3:91:3f:da:94:d7:38:61:
f4:88:71:1f:4e:31:c5:59:09:4d:66:ae:51:40:e3:3c:17:bb:
1a:03:67:21:4d:b1:1e:10:38:bd:0f:b1:e4:f0:1f:3a:da:9a:
39:82:98:31:c0:6c:9b:68:f2:cc:7d:f5:ea:76:1c:a1:de:d7:
36:b1:c6:b0:c8:93:e3:51:14:cf:1e:f5:23:32:e2:01:52:91:
07:39:8d:7d:41:af:55:92:39:8d:41:97:16:27:0d:20:1f:b4:
97:2c:c5:03:38:d3:f4:52:69:e8:1c:be:64:6a:70:f3:38:3d:
ae:c6:25:40:47:72:a2:94:e2:b3:55:fa:17:64:5b:b9:fb:c7:
bf:6b:ad:22:b3:f0:31:6f:d8:a0:6a:3e:9b:b6:a1:3f:a1:34:
8c:20:67:96:d4:c8:ab:4c:fd:5f:d1:11:54:41:ca:79:45:ac:
40:96:1c:26:95:8b:05:14:3c:70:33:d5:d9:e7:c0:a9:51:b7:
bb:0d:d7:df:59:4b:d6:e5:07:ad:77:eb:2e:bb:ce:51:69:17:
cf:87:6b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:41:09 2025 by rpki-client