Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/50916351-782d-3e23-995d-6f80e9033c13.roa
File: 50916351-782d-3e23-995d-6f80e9033c13.roa (raw, json)
Hash identifier: yrFQcXZteE3Z6boSuuosGId0XkwZaJqe+cO8zaAHIcU=
Subject key identifier: 98:36:A1:9A:47:C5:7C:A0:FA:5A:CB:5D:17:0C:28:51:99:F1:EE:6F
Certificate issuer: /CN=7bebf1fd-be49-4771-87fb-2d0488be4cab
Certificate serial: 010D0C9F432858492CAE8464A70260D74C82A900
Authority key identifier: A6:AD:23:24:BF:14:90:C2:B8:53:86:42:68:F2:81:07:01:EB:97:40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/50916351-782d-3e23-995d-6f80e9033c13.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 198949
IP address blocks: 66.22.108.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/7bebf1fd-be49-4771-87fb-2d0488be4cab.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/7bebf1fd-be49-4771-87fb-2d0488be4cab.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:ae:84:64:a7:02:60:d7:4c:82:a9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bebf1fd-be49-4771-87fb-2d0488be4cab
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=89714e4e-dae1-4295-ab3b-8ec938d8ed01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d9:a6:9d:d7:e4:e3:9c:06:07:1c:39:99:59:
93:97:61:ec:ed:9d:e3:b5:3f:08:ba:c1:7c:73:35:
69:ba:55:58:f8:81:6a:94:06:c0:9c:07:d0:df:bf:
f2:46:3c:e5:1c:69:52:f6:fd:02:e8:19:bf:50:61:
ca:19:3a:71:c6:3b:70:fe:88:d8:f8:f7:91:d9:37:
64:47:89:66:25:3b:2a:f9:83:61:ca:9e:9d:03:b6:
05:11:f9:50:81:df:61:14:de:2a:72:c9:2e:ab:82:
92:db:2e:32:08:52:35:8a:9d:54:19:20:ed:9a:ff:
27:6c:be:93:9d:04:7a:2a:13:51:71:85:f9:ca:f0:
dc:cf:c0:15:10:aa:05:0e:01:50:08:93:83:53:3f:
78:32:47:d0:0c:8c:84:b7:34:28:f1:ca:e0:da:2c:
26:e2:57:63:c8:4d:35:24:3e:d3:ae:9f:e5:9f:54:
ab:a9:94:f9:e4:28:ad:fe:2b:f7:3b:2f:85:ae:93:
1e:8e:c3:c8:4b:66:98:34:82:44:38:82:7f:06:ad:
8c:a5:ce:4a:d0:79:52:0f:01:16:4e:6f:66:30:3b:
80:0f:4c:b5:d5:70:e4:b7:fe:de:42:22:32:58:e3:
ec:ff:cb:8c:dc:61:dc:8a:d9:d1:05:77:fd:a7:ec:
24:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:36:A1:9A:47:C5:7C:A0:FA:5A:CB:5D:17:0C:28:51:99:F1:EE:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/50916351-782d-3e23-995d-6f80e9033c13.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/7bebf1fd-be49-4771-87fb-2d0488be4cab.crl
X509v3 Authority Key Identifier:
keyid:A6:AD:23:24:BF:14:90:C2:B8:53:86:42:68:F2:81:07:01:EB:97:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab.cer
sbgp-ipAddrBlock: critical
IPv4:
66.22.108.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:41:1a:06:14:dd:72:37:4a:e6:9f:18:b3:9e:6a:2f:05:ff:
dc:97:52:48:ce:e1:3d:7a:86:53:48:99:0c:3d:d1:65:2d:90:
d7:ab:0c:68:03:04:9b:0c:af:70:47:1b:8d:b2:50:29:b9:6e:
40:0e:95:8b:66:73:bb:d3:56:4c:76:fe:b5:b0:e9:45:c8:f0:
1b:16:9f:86:9f:e0:c0:06:4c:17:f1:22:4a:5b:01:2a:d1:9e:
f2:29:f4:8e:81:1c:03:48:24:b2:01:53:4a:ef:40:cf:8d:a2:
63:21:c1:5c:78:67:f8:27:70:8c:e3:df:29:3d:dd:00:90:95:
91:e3:b5:c2:ff:63:22:27:b3:36:3e:d0:3c:ae:6c:27:08:f4:
cb:f8:1c:16:b4:8d:48:8d:11:a5:0c:1a:23:2f:7b:61:f9:e9:
08:2c:b6:ef:63:27:50:7f:b1:a5:98:db:41:4c:4b:8d:60:64:
6a:25:1c:d8:ed:53:c5:a5:49:94:50:a1:69:71:a6:db:cb:81:
a3:ba:38:f8:e6:a4:5d:9a:c3:53:99:d6:f1:58:9f:fd:9f:db:
2f:d0:fc:9f:ac:1f:47:35:24:bf:7f:b4:77:e5:e2:ca:e8:76:
e9:df:6c:1b:ed:61:ee:02:57:59:4c:b3:7e:f2:6f:e4:73:aa:
e4:15:10:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 22:57:52 2025 by rpki-client