Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/791b90e1-6bda-3172-9505-1880de08451f.roa
File: 791b90e1-6bda-3172-9505-1880de08451f.roa (raw, json)
Hash identifier: 3fq8yvRuVfXiY5FcuQwEcabEYoqIpgX5lZOHg8r200g=
Subject key identifier: C6:2D:37:BD:C6:65:80:F7:F2:77:F5:AF:56:A0:9D:48:53:72:B4:CD
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F43285848D0ABC898B208AD8102DA79C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/791b90e1-6bda-3172-9505-1880de08451f.roa
Signing time: Sat 08 Feb 2025 14:00:52 +0000
ROA not before: Sat 08 Feb 2025 14:00:52 +0000
ROA not after: Fri 09 May 2025 13:00:52 +0000
asID: 44477
IP address blocks: 45.38.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Apr 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d0:ab:c8:98:b2:08:ad:81:02:da:79:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Feb 8 14:00:52 2025 GMT
Not After : May 9 13:00:52 2025 GMT
Subject: CN=91a4adbb-df56-4990-acf4-9c04ab14e9fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:04:c9:73:c1:4f:1e:da:00:ba:0c:1f:4a:08:
68:2d:1e:5a:dd:b0:8c:77:a7:fb:8f:22:a5:36:82:
fd:1d:f6:bc:cd:74:bf:6e:5f:8b:54:9f:8d:79:2c:
d2:d5:fb:5b:cc:a5:87:67:fd:a1:ee:83:c8:05:36:
e7:93:e5:3d:97:23:8a:28:ef:5c:b9:b9:aa:97:74:
bb:40:63:99:b1:94:38:b3:9e:2e:a3:75:19:36:09:
d3:bd:42:2b:e5:b0:8a:92:18:da:75:d8:bb:b4:cc:
c8:be:37:fb:fb:58:96:de:59:17:c7:cc:8e:a4:b5:
36:c7:0f:fe:6c:0f:ef:0b:af:06:71:60:f9:95:09:
10:f0:fa:7f:e7:11:91:33:37:a1:73:e9:80:44:02:
8d:80:9d:c9:21:c4:55:5f:63:c4:ce:7c:24:60:dc:
d3:4f:a1:c3:40:ac:5f:35:71:e2:fe:99:68:ca:6f:
90:2b:65:df:32:f9:a7:76:84:39:c6:0c:6f:71:45:
6b:43:5b:f3:f9:0a:01:00:cf:21:17:98:43:85:37:
a2:de:1f:d6:b2:31:19:c8:44:d3:dd:63:3f:20:f8:
43:dd:c7:21:9a:a5:c1:9e:bb:b6:6f:69:c5:3f:d9:
65:50:5f:a7:17:44:e9:f0:56:10:bb:9d:e0:0f:1f:
ee:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:2D:37:BD:C6:65:80:F7:F2:77:F5:AF:56:A0:9D:48:53:72:B4:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/791b90e1-6bda-3172-9505-1880de08451f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
45.38.231.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:14:34:be:b2:ec:77:68:cf:6e:93:60:ea:1a:a2:a9:30:b4:
59:5c:e7:2b:d7:ae:21:69:3f:dc:44:8e:8e:92:32:c6:73:ec:
a6:58:42:c7:3f:0d:89:4a:5f:91:a2:55:fb:5f:5a:8b:53:9a:
56:d9:97:f9:53:90:b4:26:3f:48:e5:e8:c1:b3:aa:ff:2d:5f:
19:67:d6:4f:a0:9e:ce:6e:3e:97:96:7c:52:f3:55:21:eb:f7:
cf:bf:42:a8:85:dc:34:ae:74:74:c5:3f:f8:86:a8:bb:04:2b:
46:0b:f3:81:2a:9e:53:17:66:e3:4b:db:25:27:11:45:c5:77:
94:af:0b:f9:7d:65:45:8b:15:b9:a2:d8:39:d4:3a:df:7f:80:
57:87:5b:3e:bc:88:6c:03:20:71:c5:c1:aa:33:c8:48:69:5d:
bc:02:e8:d1:ff:c5:01:12:66:0d:09:6a:bc:3a:32:5e:72:b2:
dd:fe:7c:14:f6:ba:20:9c:d9:94:32:11:4d:83:92:a7:83:c2:
aa:38:8c:f9:2a:10:a1:4f:31:6a:10:5d:9a:f4:12:49:28:df:
0e:83:62:fd:61:a2:e9:89:9a:3d:bd:4e:cb:f3:5e:1b:ac:06:
6d:68:70:24:76:14:18:43:72:cf:af:c6:ab:5d:d7:6b:91:96:
3b:6b:34:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 21:15:22 2025 by rpki-client