Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/95288216-711e-31bc-8bb7-23252f7aee62.roa
File: 95288216-711e-31bc-8bb7-23252f7aee62.roa (raw, json)
Hash identifier: +j5YGPXonwlBKmt+q6fGhnmrCtd20cd27aomiMZPjk4=
Subject key identifier: E8:DE:F4:3A:67:4D:87:B7:3A:11:91:2C:F6:D2:D5:28:3F:57:58:E2
Certificate issuer: /CN=1cf435c0-9d28-477a-90a9-1b4fd75cda76
Certificate serial: 010D0C9F432858491ED6D67C8C18BF1DBEE24F00
Authority key identifier: D5:3F:14:5F:41:53:5A:F0:41:C2:D2:BF:7D:3B:50:E6:35:32:FF:D4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/95288216-711e-31bc-8bb7-23252f7aee62.roa
Signing time: Sat 08 Mar 2025 14:00:52 +0000
ROA not before: Sat 08 Mar 2025 14:00:52 +0000
ROA not after: Fri 06 Jun 2025 13:00:52 +0000
asID: 16509
IP address blocks: 199.187.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Apr 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1e:d6:d6:7c:8c:18:bf:1d:be:e2:4f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cf435c0-9d28-477a-90a9-1b4fd75cda76
Validity
Not Before: Mar 8 14:00:52 2025 GMT
Not After : Jun 6 13:00:52 2025 GMT
Subject: CN=d8ce903d-c3a4-4c50-940f-0dfb99062c14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:80:0c:cf:c7:0a:ab:84:db:76:2a:98:ae:9b:
c0:ab:21:4d:22:4d:5e:8e:c8:84:02:84:83:14:ab:
84:33:ef:0a:49:bf:33:fd:4d:5e:32:4d:b0:f9:7d:
26:42:b8:99:44:09:34:a6:db:a3:c1:fd:ae:ba:13:
a6:2c:42:e1:3c:08:5e:f2:19:5e:c5:79:91:f6:39:
28:38:3c:33:e2:f7:b3:3d:2f:76:af:ad:d6:2c:8a:
95:f8:a3:b5:09:ee:93:11:47:1c:8d:1f:f5:99:94:
02:27:29:0b:6b:08:84:57:5e:1a:1d:ab:33:bb:32:
1f:45:bc:fe:24:02:f7:7e:55:45:8c:4a:97:e1:b4:
e0:ca:18:68:36:fb:6e:ad:bf:36:82:8d:50:7a:98:
87:03:8d:b1:c8:3e:3d:63:ed:36:21:81:54:c3:05:
27:d4:07:50:15:c8:66:22:59:e2:22:58:61:8c:0e:
28:84:0f:cd:03:76:04:c6:af:93:1a:bb:40:97:fe:
7a:8f:aa:34:d3:02:4b:72:30:98:64:b0:6b:e2:b6:
b3:c0:94:fa:cc:bb:c7:ad:85:80:00:91:e3:76:69:
ad:46:c7:a3:52:85:59:c7:96:84:bc:fa:c7:e7:20:
69:b8:9c:74:d8:09:d7:5b:b4:80:5d:ef:ce:07:11:
29:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:DE:F4:3A:67:4D:87:B7:3A:11:91:2C:F6:D2:D5:28:3F:57:58:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/95288216-711e-31bc-8bb7-23252f7aee62.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.crl
X509v3 Authority Key Identifier:
keyid:D5:3F:14:5F:41:53:5A:F0:41:C2:D2:BF:7D:3B:50:E6:35:32:FF:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer
sbgp-ipAddrBlock: critical
IPv4:
199.187.168.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:b8:7b:cd:1b:57:55:06:1c:17:0d:49:8e:6f:0e:95:65:f3:
dc:18:9b:2e:f7:74:45:b0:82:4e:86:79:94:fd:51:bf:9a:b6:
6d:24:0f:e8:dc:db:82:a0:46:1d:f9:64:6b:c5:7f:7e:5b:96:
d1:7b:6d:af:9b:b3:5a:e7:5f:a9:ce:00:fe:34:44:30:ad:50:
df:22:80:05:83:15:92:da:bc:06:5a:ca:19:35:c2:25:dd:3d:
96:77:56:35:b4:42:cf:e0:84:56:e6:8a:37:06:89:e0:6c:a1:
27:45:42:ab:e7:8d:f1:c9:8c:37:4b:5a:7a:ec:83:27:53:29:
45:1c:29:44:37:4e:68:be:f7:33:b7:7b:38:2d:6f:a7:ba:54:
0a:bb:8b:5a:a3:6a:41:37:29:c7:76:9f:0f:30:32:18:5a:53:
94:5f:74:64:ab:5e:df:7e:0f:e4:6a:2a:e3:7d:f4:1e:cd:32:
0d:08:fc:be:59:49:12:6a:d4:5e:58:04:62:2b:ec:27:70:8e:
d4:68:e1:2b:08:d2:5e:37:d3:25:e4:71:ea:a2:bd:41:57:93:
96:a7:8e:bd:7e:59:2c:01:7e:15:7e:13:d5:44:fb:47:8d:52:
53:2c:0d:d5:3e:52:6b:b5:8b:49:51:05:be:38:d8:b8:12:0b:
a2:f1:15:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:37:16 2025 by rpki-client