Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/3925ee21-557f-30f9-94cf-08e3240595ed.roa
File: 3925ee21-557f-30f9-94cf-08e3240595ed.roa (raw, json)
Hash identifier: dkrPx+33LXAwGg84cMGgFUjTNRTUo+I5x8U7yRlzLmw=
Subject key identifier: 3A:19:46:60:12:33:32:95:60:5A:C1:56:69:6E:D7:59:12:09:F5:40
Certificate issuer: /CN=d03866eb-6362-4657-aa66-83307258d945
Certificate serial: 010D0C9F432858491247F3DC05F1D2B0BF1BB000
Authority key identifier: 65:67:96:9C:5A:F7:28:6C:5C:24:E2:4F:E8:8A:B2:76:7E:B4:29:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/3925ee21-557f-30f9-94cf-08e3240595ed.roa
Signing time: Tue 04 Mar 2025 02:03:21 +0000
ROA not before: Tue 04 Mar 2025 02:03:21 +0000
ROA not after: Mon 02 Jun 2025 01:03:21 +0000
asID: 48678
IP address blocks: 192.101.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/d03866eb-6362-4657-aa66-83307258d945.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/d03866eb-6362-4657-aa66-83307258d945.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:47:f3:dc:05:f1:d2:b0:bf:1b:b0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d03866eb-6362-4657-aa66-83307258d945
Validity
Not Before: Mar 4 02:03:21 2025 GMT
Not After : Jun 2 01:03:21 2025 GMT
Subject: CN=bd023d7b-4246-451d-8daf-b186d9fd1fc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:40:b2:cd:30:23:47:65:c2:59:ab:b2:59:31:
14:11:cd:e5:27:27:96:db:32:3b:d0:c7:22:ae:0d:
de:08:d4:a5:64:36:9a:c5:d9:58:9d:7b:24:dd:2d:
a8:5d:1c:fc:ed:97:4d:19:b4:e4:06:9b:5f:62:51:
f4:ba:c6:38:be:c1:fe:12:25:9a:3a:b7:08:fc:0f:
58:a5:ce:77:d6:d8:dc:76:d2:db:d7:54:be:2f:c7:
9d:bc:da:7b:52:a2:bd:ad:ad:28:c9:31:31:04:8b:
98:37:37:7c:a7:eb:93:cc:c8:dd:90:12:b6:d9:95:
bd:02:83:ff:1a:5a:eb:fb:22:71:f4:88:7b:6b:ea:
9f:2a:34:fa:61:94:d3:e5:94:cc:74:fa:11:d8:b7:
f8:88:63:f3:21:b0:87:da:b7:1b:13:f2:b3:64:42:
8c:aa:7d:83:cd:b1:1c:c9:ec:f2:52:19:7d:6c:7e:
a2:24:43:89:ce:d5:2c:83:b5:93:53:45:28:5b:da:
8a:cc:d8:2f:47:7a:93:b2:eb:07:4c:5c:85:21:28:
5a:c6:42:ea:4c:47:38:13:2b:05:f8:ed:77:10:a0:
2e:b6:8a:9e:b1:42:a4:fc:86:71:da:be:be:5d:b4:
2b:d3:a7:31:7b:bb:46:45:bd:08:87:92:be:6c:c8:
01:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:19:46:60:12:33:32:95:60:5A:C1:56:69:6E:D7:59:12:09:F5:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/3925ee21-557f-30f9-94cf-08e3240595ed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/d03866eb-6362-4657-aa66-83307258d945.crl
X509v3 Authority Key Identifier:
keyid:65:67:96:9C:5A:F7:28:6C:5C:24:E2:4F:E8:8A:B2:76:7E:B4:29:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945.cer
sbgp-ipAddrBlock: critical
IPv4:
192.101.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:b3:0e:4c:09:23:78:2f:1f:1e:99:e2:77:e9:61:28:40:58:
a2:d2:14:84:b0:a1:5c:2f:5f:01:02:96:03:b7:1f:be:76:17:
3b:85:48:05:46:3f:dd:86:52:7d:bb:a6:0a:90:7e:bc:ca:c1:
94:17:aa:05:2f:78:54:ed:27:19:04:86:0d:cf:f0:61:cd:1c:
d2:b1:28:4f:ae:55:ed:6b:33:ae:46:67:fa:59:08:ac:e5:57:
ae:e6:39:d1:b9:f7:94:02:82:5d:05:a4:bf:f7:dd:4d:b5:c2:
f6:e7:57:2a:a7:48:da:80:c0:55:63:4c:4a:11:02:4b:e4:14:
66:fa:98:70:5b:99:14:de:23:b8:8b:c9:64:53:57:93:f0:52:
b6:38:e7:2d:58:04:f4:47:c6:c7:a6:52:3c:09:41:80:a0:e2:
92:55:ce:ed:1f:6d:c5:82:e3:5f:b1:91:4e:14:c5:3c:53:77:
2d:3a:09:b2:0c:87:62:eb:03:9b:12:19:29:73:44:66:70:78:
b6:94:03:55:e5:fe:55:87:6b:68:1e:b8:b2:11:91:ce:fe:9c:
db:d0:6f:71:0c:4b:8b:b9:be:7d:dc:19:22:b7:9a:ba:d8:76:
f8:b5:d1:25:35:a8:aa:a6:91:7c:83:51:2f:a7:56:86:c5:97:
f7:61:0b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 06:15:16 2025 by rpki-client