Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/d99b52cf-3f59-3923-9d2f-f64a1233a235.roa
File: d99b52cf-3f59-3923-9d2f-f64a1233a235.roa (raw, json)
Hash identifier: NnHl5G+lRUwN10sI6os40isFoD70KzsLy1IoKzzNoWE=
Subject key identifier: B5:78:0B:49:35:96:74:86:3A:75:8A:A7:93:74:88:2C:CE:11:BD:83
Certificate issuer: /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial: 010D0C9F43285848C58203CB47391E112C597600
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/d99b52cf-3f59-3923-9d2f-f64a1233a235.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 36040
IP address blocks: 208.117.238.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:82:03:cb:47:39:1e:11:2c:59:76:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=165a9c50-ae08-4ecc-a18d-7359bf940a9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:80:a6:be:c2:1f:f8:3b:2d:84:96:f9:94:5d:
3e:9f:1c:1c:31:48:d8:41:b7:93:c2:44:a9:a1:08:
b7:04:d4:da:ab:88:48:a4:b2:48:51:32:1d:e6:dc:
76:89:42:66:f5:3b:83:f6:42:34:13:5d:d4:54:0c:
40:1c:e0:d5:1f:89:90:4a:06:6a:f9:08:31:1c:23:
07:04:bc:eb:a9:8e:43:99:a6:32:04:e2:fa:4f:c8:
30:1d:1d:52:be:d7:89:41:ab:93:99:9d:61:18:c2:
9f:f5:8a:46:96:07:27:8c:9f:a9:f3:e3:5f:de:15:
c8:e8:b6:b8:0e:d4:c9:50:95:4a:62:01:cb:b7:96:
b4:e3:9e:44:3e:98:ed:27:23:50:e2:86:4f:6a:f2:
a4:9a:6f:00:4d:bb:97:99:4d:3d:3e:9a:5d:0c:23:
fe:86:d6:d7:83:03:63:cb:5c:1d:00:d9:32:b3:04:
c2:c9:39:38:f7:3e:be:d2:98:5e:8f:3a:76:9b:4a:
7d:08:4c:11:24:68:6d:a5:20:00:e5:70:be:b4:17:
07:6d:3c:bf:97:56:82:71:35:cb:c1:04:30:ba:bd:
9b:fe:31:34:50:05:7d:b3:08:60:7a:49:1f:d0:e2:
6a:d3:31:67:8f:3a:74:64:cc:c2:ea:ec:91:f1:e1:
e4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:78:0B:49:35:96:74:86:3A:75:8A:A7:93:74:88:2C:CE:11:BD:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/d99b52cf-3f59-3923-9d2f-f64a1233a235.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
X509v3 Authority Key Identifier:
keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
sbgp-ipAddrBlock: critical
IPv4:
208.117.238.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:19:0b:e8:47:38:31:08:02:39:e8:a4:ce:1c:05:51:f2:32:
87:b8:12:2f:e1:5d:b4:04:8f:99:77:7c:ef:0c:17:af:a9:60:
34:0b:28:53:7c:37:f3:a3:6d:b1:ba:ba:31:54:68:1b:78:bd:
be:cc:b7:e5:00:c0:b3:a3:e4:7e:fd:8c:40:3c:62:22:37:4b:
c3:ce:2b:9c:1a:8a:c7:d4:a8:6e:cc:c9:24:c9:f0:0a:49:be:
db:2a:2e:04:9b:75:14:56:6d:f0:5a:0a:57:9f:0e:24:cb:00:
1b:5c:bd:b1:4b:50:bb:8f:a8:6a:65:e1:f6:c5:8c:2e:af:de:
8d:37:a0:3a:a9:0a:c4:96:f6:6b:e4:13:01:0a:d9:59:45:ee:
ab:04:b5:28:4a:e4:a8:ea:97:ca:a4:d3:3b:0a:03:87:22:a6:
e3:e6:7f:47:bb:db:25:f0:cb:7b:ad:b1:fe:44:79:73:4e:74:
61:cb:0d:d6:72:d4:00:ea:1f:fa:8e:67:28:b3:f3:85:fa:15:
4c:eb:85:62:a8:06:b9:ab:f0:2b:a9:1d:8d:62:aa:be:11:22:
e3:af:4c:a0:28:c7:3f:be:7f:02:1a:10:bc:ca:6d:51:b8:4d:
89:1b:f5:10:fd:8c:51:7c:48:2a:f1:d4:54:9c:24:f2:67:fa:
25:af:d0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 12:50:10 2025 by rpki-client