Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/d4270aa3-b47c-3342-a435-e6733dda251f.roa
File: d4270aa3-b47c-3342-a435-e6733dda251f.roa (raw, json)
Hash identifier: jKgxB3VONBRVr0Rm6RQDbAF+2POFMId4vY2g6BDoSbQ=
Subject key identifier: 83:C8:9E:FE:05:AE:BC:61:D2:C4:E2:F0:A1:E6:12:36:54:FE:75:27
Certificate issuer: /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial: 010D0C9F43285848C5817DEA93DED3AAEA549700
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/d4270aa3-b47c-3342-a435-e6733dda251f.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 36492
IP address blocks: 172.102.8.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:7d:ea:93:de:d3:aa:ea:54:97:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=74d96597-1a0e-4727-8bd0-042f34a1df69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:db:d8:28:55:31:71:0c:6d:cb:05:79:40:55:
e8:84:0a:2f:cc:82:05:af:13:7d:e6:98:9e:78:6a:
4c:7f:f2:70:cb:ef:94:e1:f1:93:54:42:d4:e4:08:
45:7a:cd:42:85:3a:69:a1:3f:09:1d:d2:2a:c1:7a:
b6:09:36:d6:6c:19:3c:52:1e:20:7d:d7:c5:8c:49:
8d:c9:f3:ea:61:28:52:81:52:69:4a:2a:0a:25:f2:
16:6f:60:b9:86:49:4e:f6:c6:ad:f6:98:13:b2:b8:
36:76:1b:8a:9c:d8:c6:d6:92:44:68:29:a5:02:d4:
8b:a7:a8:4b:92:ea:5d:65:6f:18:6c:9e:a0:b9:16:
ed:0a:e6:44:85:0e:26:f0:f6:f4:e3:97:04:d3:89:
75:b4:77:ac:00:18:d8:fe:ad:87:38:ac:11:2e:c2:
98:34:0c:a8:f2:e5:c1:c0:84:4e:ed:f8:07:07:74:
fd:a2:a1:22:c4:c5:72:db:e4:17:cd:81:dd:ac:1c:
b2:72:35:2d:88:d9:f3:fb:e8:a9:24:f1:52:12:2b:
95:fd:55:14:3c:21:b7:50:34:fd:06:3a:cb:90:9f:
ed:75:4c:8c:8e:c3:ee:1a:09:9b:4d:f7:a1:0e:da:
82:da:f3:be:37:04:ce:e3:bd:3a:fd:21:16:29:b7:
df:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C8:9E:FE:05:AE:BC:61:D2:C4:E2:F0:A1:E6:12:36:54:FE:75:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/d4270aa3-b47c-3342-a435-e6733dda251f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
X509v3 Authority Key Identifier:
keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
sbgp-ipAddrBlock: critical
IPv4:
172.102.8.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:a9:61:a3:ec:ae:2c:1e:f6:6d:fe:2b:2c:5b:06:01:77:86:
ae:8c:2b:00:e4:7a:b4:b9:76:91:b8:b1:05:c4:49:83:d8:35:
cb:4e:e9:7a:23:63:78:b1:e9:8a:d7:54:22:6f:30:57:70:a7:
ed:1f:b2:a9:83:a7:af:d3:15:24:53:e2:35:35:03:c7:7a:26:
63:07:b4:77:be:8b:85:23:52:19:0d:10:a1:f2:a0:98:79:6a:
64:81:70:d2:3c:7a:cc:61:6e:db:38:00:3f:47:a0:6c:26:9f:
69:d5:99:00:e3:e7:73:f5:ad:4e:37:07:ed:ba:a6:09:c3:be:
b1:f2:53:a6:73:c0:31:29:bf:6d:31:7e:79:59:ec:d0:9e:d3:
27:a3:df:77:6e:96:ed:7e:dc:12:f9:b7:d1:e8:b4:ed:03:4f:
05:84:14:4f:3e:7e:68:60:3c:bc:af:db:b0:6f:4b:d1:95:42:
c1:c4:17:6e:2d:63:dc:53:84:51:83:c7:6b:61:07:fa:3a:53:
3e:99:47:ff:d1:53:2a:a6:28:fd:43:44:ea:e4:25:ea:bb:22:
ed:a0:c1:43:6b:8d:9e:7e:50:66:6b:a3:88:83:ac:58:8c:56:
90:a1:97:b5:44:4b:ea:1c:73:cd:f9:98:a6:c6:d4:d4:cc:5a:
39:37:68:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:42:03 2025 by rpki-client