Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/b1a54ca2-b26e-330f-982a-6d1e33f099b1.roa
File: b1a54ca2-b26e-330f-982a-6d1e33f099b1.roa (raw, json)
Hash identifier: UL9FzQ5UngwsYXTb9WAJUq0X7M6WVdPJT7oTvFIN/+M=
Subject key identifier: 45:C9:88:DF:D6:CA:F2:04:96:7F:93:98:6D:4C:82:C4:29:7C:E8:98
Certificate issuer: /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial: 010D0C9F43285848C5817FE10FC625A13AD8FD40
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/b1a54ca2-b26e-330f-982a-6d1e33f099b1.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 36040
IP address blocks: 208.117.242.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:7f:e1:0f:c6:25:a1:3a:d8:fd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=2a59099e-e7d2-4e79-8b42-a997a0e75f1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ee:79:03:68:ef:5d:35:35:10:ae:2a:af:e5:
f2:a4:bc:36:23:00:bd:d5:39:51:21:9e:c7:ed:d6:
d1:04:c3:86:df:d9:d3:7f:1c:1d:5c:f0:46:89:5c:
0b:f4:16:d2:9d:db:9c:11:d2:2f:84:48:62:13:49:
19:2c:56:61:67:4f:64:11:32:75:a5:cd:95:d0:84:
29:0f:14:a4:5d:99:ae:3f:3c:e3:f3:62:4d:ed:53:
27:db:0d:83:f9:5d:c2:09:71:05:e5:46:33:f3:c2:
1a:a0:f0:13:ab:49:86:7f:24:4c:65:a0:e0:d9:3e:
83:d5:45:08:7f:15:1c:bf:49:30:b0:9a:f8:a2:2e:
c6:88:fe:24:f2:96:3b:e2:a7:64:5c:24:3a:d0:ce:
6b:90:b5:2f:eb:be:35:87:f6:da:66:d6:59:13:e0:
7d:32:b2:76:ef:88:b0:55:05:1b:bd:2f:33:00:18:
f9:bd:f9:ba:fb:96:09:a3:da:30:fd:ef:fc:10:df:
67:0e:92:6b:40:18:5e:53:45:e3:3a:90:21:95:36:
3c:26:28:4c:59:6e:89:ef:e4:3c:25:69:59:70:00:
18:1a:3e:49:6b:47:ff:58:e7:bd:db:df:bf:2b:a4:
bc:ef:eb:a6:a2:18:dc:87:1b:c9:4b:f0:0c:f9:cb:
92:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C9:88:DF:D6:CA:F2:04:96:7F:93:98:6D:4C:82:C4:29:7C:E8:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/b1a54ca2-b26e-330f-982a-6d1e33f099b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
X509v3 Authority Key Identifier:
keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
sbgp-ipAddrBlock: critical
IPv4:
208.117.242.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:25:45:ba:64:1d:09:97:b6:d7:94:40:07:eb:0c:71:93:1a:
0d:ea:f0:79:d8:e6:73:92:c7:e1:98:45:72:29:6f:cf:01:51:
3f:08:c2:76:e1:14:b5:b0:88:7e:81:e0:6b:f5:21:71:1b:ca:
82:93:61:de:aa:bb:59:9c:dd:7f:0f:20:d7:cc:63:9d:6a:0a:
ea:4d:b9:43:86:13:98:72:2a:89:4f:d9:87:61:b4:8a:aa:61:
d7:86:04:7e:35:32:38:dc:d0:b9:a7:fe:07:e2:9d:54:18:59:
40:85:10:d9:27:4d:35:8c:b1:10:6e:48:8b:13:4e:55:a6:d9:
4e:12:bd:f3:c8:8e:9f:1a:49:40:7c:40:0c:0e:00:2f:0c:85:
8b:54:f8:82:75:0b:b0:fe:7b:51:65:ba:11:f2:23:99:ed:06:
df:50:fd:6a:47:06:18:62:b7:9b:ab:6e:b0:57:13:17:2c:b3:
d0:a4:86:62:25:34:c3:c3:27:e4:a3:08:8d:98:d9:9c:e1:f2:
a8:57:32:05:31:58:f7:b3:42:58:70:d3:23:25:be:d7:3c:7f:
74:99:5d:a8:e9:f9:20:4a:a1:90:4b:98:a6:20:28:c0:5c:1f:
f4:98:1a:b2:a5:d2:13:ce:37:55:fa:40:21:84:ac:00:9d:c9:
f5:b3:a9:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:00:05 2025 by rpki-client