Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/f8da808f-47b5-34dd-b483-f75e9c99551c.roa
File: f8da808f-47b5-34dd-b483-f75e9c99551c.roa (raw, json)
Hash identifier: Alh3Igb/Eghth3uK26wtWqQfpVfzkuzEAGTK+nN7nGo=
Subject key identifier: B1:30:0E:21:8B:8C:3C:0F:65:36:5D:4F:53:5E:99:60:CD:3A:45:9F
Certificate issuer: /CN=24558553-b258-484a-bd6f-5e8b36c98065
Certificate serial: 010D0C9F4328584957F4039B2A33BF6114B3FC00
Authority key identifier: 9E:01:D5:E4:F7:85:25:4D:C3:43:2A:E2:94:E9:43:3B:49:7A:F5:8B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/f8da808f-47b5-34dd-b483-f75e9c99551c.roa
Signing time: Sat 29 Mar 2025 01:00:39 +0000
ROA not before: Sat 29 Mar 2025 01:00:39 +0000
ROA not after: Fri 27 Jun 2025 01:00:39 +0000
asID: 16992
IP address blocks: 66.37.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/24558553-b258-484a-bd6f-5e8b36c98065.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/24558553-b258-484a-bd6f-5e8b36c98065.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:57:f4:03:9b:2a:33:bf:61:14:b3:fc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24558553-b258-484a-bd6f-5e8b36c98065
Validity
Not Before: Mar 29 01:00:39 2025 GMT
Not After : Jun 27 01:00:39 2025 GMT
Subject: CN=2f5aaabc-d7fe-41b1-af9b-72ef4b3803c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a5:31:2c:6c:83:77:b2:fc:bc:9c:36:4b:7a:
98:1d:58:87:b4:60:70:2e:b0:3b:36:eb:bd:3a:9f:
09:2b:74:a1:92:f3:40:00:53:5c:79:6b:e7:98:96:
33:03:e1:f6:a3:dd:53:cd:e6:01:22:bd:5e:04:75:
8b:f9:f3:ea:51:00:90:4f:be:3b:43:84:6d:cd:15:
12:f0:b6:45:a1:08:85:92:77:30:57:8d:2e:54:77:
f0:19:6d:ec:0d:2f:39:a2:7c:b3:6e:ab:4d:ed:f2:
75:e2:c5:d4:c5:85:b4:20:5b:b2:cc:6b:48:a4:9f:
6e:23:e6:39:2c:89:be:87:81:c5:8e:bb:ab:8c:a3:
c2:bb:77:5b:25:fa:8f:ae:bf:e7:27:32:17:fe:cf:
ba:c7:3c:b9:a3:b1:e2:00:0c:b5:49:da:78:04:8c:
9d:f3:9e:f1:e1:3a:66:4a:cb:24:81:54:eb:e4:c1:
44:bf:f9:b2:ad:8c:74:d9:ce:a1:cf:72:c1:31:90:
51:e6:b5:10:0f:ac:66:65:8b:a4:63:69:23:b9:d3:
19:9f:b1:0f:31:de:87:50:e5:43:ea:58:79:72:69:
c5:ec:73:f3:d4:ef:dd:68:a7:71:2a:17:06:91:6b:
6a:2c:57:e9:d5:89:53:1d:e8:e3:09:d6:59:9b:cb:
e1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:30:0E:21:8B:8C:3C:0F:65:36:5D:4F:53:5E:99:60:CD:3A:45:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/f8da808f-47b5-34dd-b483-f75e9c99551c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/24558553-b258-484a-bd6f-5e8b36c98065.crl
X509v3 Authority Key Identifier:
keyid:9E:01:D5:E4:F7:85:25:4D:C3:43:2A:E2:94:E9:43:3B:49:7A:F5:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065.cer
sbgp-ipAddrBlock: critical
IPv4:
66.37.159.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:fd:a9:15:42:82:6a:d6:e7:5c:03:08:6d:41:56:d7:68:16:
03:84:a6:ec:e8:fa:ad:18:98:88:83:2d:91:c0:86:66:70:d4:
c6:58:c6:9b:94:e2:e9:44:88:51:2c:40:43:9c:d6:6e:68:90:
b7:9c:14:b5:67:11:a9:a8:ea:b2:b4:ca:df:28:e8:3c:a5:30:
97:0c:e1:3a:20:16:39:80:ba:ba:6e:59:13:91:8c:77:5d:c4:
27:aa:64:cd:2d:90:78:da:4b:9f:ee:37:32:dc:60:b4:e7:74:
ee:79:00:72:27:ed:f3:5c:0d:3c:0b:47:b4:a2:a5:f7:98:9b:
c7:aa:b3:b3:a0:11:27:a0:88:6c:45:57:50:0b:2c:76:e1:05:
58:00:df:22:0a:f0:c7:51:87:93:42:f7:b1:58:d4:ff:52:be:
02:78:eb:3e:a6:7a:79:c1:c5:bc:40:a9:d6:5d:a8:ff:df:aa:
e5:fd:22:59:0f:86:9f:37:4b:7c:6c:2a:f4:02:8d:62:a0:fc:
61:ef:7f:e5:3e:bf:dd:56:87:cb:75:de:f5:0b:c0:28:d2:d9:
4f:fe:8e:7d:6f:f8:a4:40:79:31:96:29:d2:4c:32:04:26:b7:
cf:88:e8:44:2a:2f:23:d5:e7:58:33:80:07:9f:4f:44:5e:16:
91:09:87:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 19:56:45 2025 by rpki-client