Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/7532ea0c-e641-334f-986f-c6ddff0253e2.roa
File: 7532ea0c-e641-334f-986f-c6ddff0253e2.roa (raw, json)
Hash identifier: IvEkHE/QqG2CGUUR+YRYmv6ISIA8PNSAiEQN2t1RmqM=
Subject key identifier: BA:36:D6:E3:06:8E:EF:3D:48:A6:1D:F4:68:6A:DC:17:58:AC:92:54
Certificate issuer: /CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Certificate serial: 010D0C9F43285849218400CD04FCDFD93AE3CC80
Authority key identifier: D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/7532ea0c-e641-334f-986f-c6ddff0253e2.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 399471
IP address blocks: 163.123.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:84:00:cd:04:fc:df:d9:3a:e3:cc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=96b904fb-6c60-489f-95b3-d10994352605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:38:eb:51:a2:8b:bc:ff:a9:b4:b6:dd:2d:56:
e3:11:e0:5d:04:19:94:a2:40:ba:fc:2b:d6:a0:81:
df:8f:a3:ee:30:f4:e7:90:1a:a2:3d:02:94:7a:0d:
fe:74:fd:38:32:54:a1:35:61:00:13:45:52:4d:4a:
01:86:9c:99:7b:39:46:4e:81:cb:6f:1b:31:a2:c5:
bb:05:8c:71:50:63:12:c4:b9:4d:76:88:bc:5e:70:
09:9c:bb:db:ca:20:09:e9:85:3e:aa:13:0a:60:e9:
84:37:3d:8f:d1:63:3f:51:fb:00:47:04:6c:d3:cc:
7c:47:50:de:86:b6:78:92:25:4e:4c:64:0a:f2:46:
ff:d1:c4:ef:d5:13:29:eb:08:63:ad:25:ab:99:6d:
0e:3e:1b:81:b7:e6:73:e5:74:05:6d:60:f3:ce:a4:
de:22:01:cd:01:41:60:3a:53:ff:3e:24:29:95:93:
f4:f6:71:a3:27:5f:ab:ce:28:64:a7:fe:9b:9a:1e:
29:7a:29:8a:e1:3a:3a:57:ab:e9:c1:1b:59:e7:5d:
64:9f:83:6c:e7:95:ab:73:99:15:11:8a:0e:9e:bf:
c6:32:03:7a:63:04:75:2d:ad:43:a8:f9:b3:7b:de:
80:6c:05:72:e9:69:52:0a:c1:98:b8:37:5e:94:1c:
a7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:36:D6:E3:06:8E:EF:3D:48:A6:1D:F4:68:6A:DC:17:58:AC:92:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/7532ea0c-e641-334f-986f-c6ddff0253e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl
X509v3 Authority Key Identifier:
keyid:D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
sbgp-ipAddrBlock: critical
IPv4:
163.123.141.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:1b:7b:2f:18:ef:8e:ae:13:d5:cc:b2:76:5b:ae:15:5e:a1:
f5:a5:d8:81:e3:e6:0e:fc:82:e0:c3:0e:4e:b9:9e:de:ea:43:
27:4b:8c:d3:3a:33:99:c6:31:12:ff:8b:fa:fc:58:b7:2f:bd:
4a:44:64:71:ad:9a:e6:83:c7:f4:05:de:eb:d0:12:83:b8:71:
06:b0:fa:30:9f:dc:c6:36:c6:00:a1:f4:1a:e7:77:0d:4f:45:
47:ad:aa:2a:ad:98:1b:3f:d4:b7:a3:b5:c7:9b:41:41:26:8c:
0f:67:47:94:0b:37:bf:70:b4:48:6a:3d:7c:20:ec:b2:ac:0d:
08:0b:f0:56:b7:ef:c9:1d:c7:a2:ac:b5:d1:2a:32:d1:0c:d5:
e5:55:78:4d:58:ab:b1:b8:0e:7d:bd:d3:f2:83:06:e0:0f:73:
fe:1d:4d:8e:f2:3b:a4:92:7d:e8:0a:de:8a:43:19:c2:f0:d0:
47:06:ea:22:d5:98:cc:1c:e2:58:02:55:02:b6:3e:50:b8:f5:
93:8a:33:c9:98:7c:fd:3f:7b:27:82:3e:de:2d:19:71:63:df:
a0:21:6d:ea:93:37:da:6e:80:fe:a7:0a:fb:5f:1e:22:b1:e5:
22:c5:6d:3a:e4:2f:c5:ce:40:61:f7:90:72:83:a3:39:b7:7e:
38:db:d4:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:14:07 2025 by rpki-client