Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/c30a8ef9-d88d-3512-a09f-c24916de3193.roa
File: c30a8ef9-d88d-3512-a09f-c24916de3193.roa (raw, json)
Hash identifier: gCM1R9eMm3uI1mMlocn20jrOqweTmFMjQbNoJqvVGBA=
Subject key identifier: 4A:62:7E:88:2C:11:AA:9A:FB:1E:C1:58:0D:74:D8:17:84:76:0C:FC
Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial: 010D0C9F43285848BFEBC1EC409904FDD0E80900
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/c30a8ef9-d88d-3512-a09f-c24916de3193.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 36040
IP address blocks: 136.22.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 13 Apr 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:c1:ec:40:99:04:fd:d0:e8:09:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=1703a4b0-ea21-400b-a287-8ba15b8bd7b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ea:27:e1:1a:01:93:3c:3f:59:7d:32:63:dd:
c9:43:2e:fa:31:9d:2d:94:3d:93:76:a6:c7:98:d0:
7e:f9:2b:03:77:98:16:eb:22:85:c2:3e:1b:3d:ad:
f5:fe:de:dd:40:6a:45:97:49:f7:aa:9f:b9:22:7a:
fa:2b:0d:f9:cf:ed:84:27:4c:aa:b5:b8:0b:cf:eb:
7b:10:fc:f2:08:cf:7a:d0:39:cc:fd:97:ae:e5:07:
18:4a:a2:5a:34:8b:87:bb:e9:23:be:50:67:29:7b:
64:c5:71:38:91:ec:cc:b3:cf:7b:9a:e5:88:a5:10:
59:de:c8:66:4f:aa:11:c0:51:6f:1a:03:54:65:b1:
20:33:be:f8:77:68:fa:ab:67:6b:5e:55:9a:2a:38:
26:12:da:9c:d5:e0:53:0a:2c:e9:ae:6d:05:f9:da:
80:96:cc:64:47:2a:5b:d1:34:cd:1e:42:fe:42:61:
d5:f2:d6:5c:17:4b:d4:b2:36:59:1a:07:73:bc:af:
4f:b3:56:13:78:09:de:c9:1c:e3:ad:43:f9:d5:50:
8a:0c:3e:4e:49:41:28:d6:16:63:3e:97:44:9f:04:
a4:78:e7:b1:c5:23:8c:5f:7d:34:0a:d9:a3:be:6c:
30:3e:7c:b0:5c:71:82:46:25:a8:e7:81:4b:ad:88:
a5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:62:7E:88:2C:11:AA:9A:FB:1E:C1:58:0D:74:D8:17:84:76:0C:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/c30a8ef9-d88d-3512-a09f-c24916de3193.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
X509v3 Authority Key Identifier:
keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.148.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:0d:1b:c0:17:db:cb:40:c0:08:d7:df:e7:05:eb:f0:c3:64:
3e:f1:cf:31:64:1a:de:fe:73:19:b2:60:cd:fb:ae:1f:20:70:
13:17:2e:83:cc:32:00:01:2e:93:a1:5e:ee:87:47:04:bc:66:
0f:83:06:61:0b:b1:7e:e4:84:91:ff:a4:f2:85:a5:d8:c1:eb:
2c:6d:0e:c3:7c:ef:e4:3c:6e:51:ea:7b:bb:1a:df:b3:84:a7:
83:41:36:50:b0:ca:9e:3f:88:33:8a:d4:06:86:5f:e4:8c:c6:
bd:2d:f0:23:b2:b9:28:5d:bc:e9:2e:30:c4:8f:68:d0:13:cf:
d0:91:ff:26:7e:a4:be:19:d1:64:e5:b5:12:aa:02:f2:23:12:
70:c6:30:bd:2c:64:5e:bc:15:ba:96:ba:ba:62:fd:c5:8c:23:
82:95:e5:d5:d7:a7:17:9d:41:6f:cf:89:87:76:7a:a6:ed:42:
40:86:66:8a:12:d2:dd:ab:5a:73:60:72:4f:8f:2d:e1:79:9e:
6a:33:c9:10:5c:4b:96:20:d3:a9:d0:83:45:78:7f:0b:9b:1a:
16:0d:7c:ac:af:b2:ca:f9:c8:2b:b7:04:f7:57:b4:fc:1a:0a:
7b:84:6f:4b:65:3d:6b:bd:55:0a:d3:2c:a1:53:6d:66:52:b1:
02:9d:e2:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:17:45 2025 by rpki-client