Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ebd5f0ba-0855-35b4-b758-5607a432fd86.roa
File: ebd5f0ba-0855-35b4-b758-5607a432fd86.roa (raw, json)
Hash identifier: 4CSrO/JWoIm4zHD2NjwJf8KCBdPs748/PUKVD3LUvLE=
Subject key identifier: CF:06:8C:AC:85:24:22:70:9A:BD:59:C0:F5:85:02:47:72:D3:6D:41
Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial: 010D0C9F432858490CB169BD91E90B6B37538AF8
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ebd5f0ba-0855-35b4-b758-5607a432fd86.roa
Signing time: Sun 02 Mar 2025 02:00:40 +0000
ROA not before: Sun 02 Mar 2025 02:00:40 +0000
ROA not after: Sat 31 May 2025 01:00:40 +0000
asID: 19437
IP address blocks: 131.153.102.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0c:b1:69:bd:91:e9:0b:6b:37:53:8a:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
Validity
Not Before: Mar 2 02:00:40 2025 GMT
Not After : May 31 01:00:40 2025 GMT
Subject: CN=b3715b72-7b9d-4c2a-b61e-aa16f4cc9a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:28:80:19:4b:99:51:18:ce:95:2d:43:b7:5d:
3c:fc:c1:78:ec:9f:f4:f4:a3:bb:71:9c:b4:d3:a9:
2c:8a:0a:a4:9a:24:fe:85:c5:f9:28:c6:7f:46:f0:
ba:55:43:ae:b0:df:50:c1:95:ac:fd:d6:df:49:37:
93:09:50:c6:68:3e:88:6a:77:bd:0a:b1:0a:95:82:
c6:11:83:e9:ca:a5:bc:99:03:9c:2b:57:98:e5:fd:
c6:9a:20:99:b4:8e:e0:1d:e1:bb:1f:44:ec:c4:c5:
ae:92:7e:21:cb:c1:11:9a:36:ee:46:47:c2:0a:fc:
a6:2c:88:d3:9e:b2:5b:cb:74:31:23:ed:b7:b9:b4:
79:64:73:74:8e:e3:54:98:66:ae:75:10:29:10:1e:
94:75:9a:1e:61:d5:0c:a3:a9:4d:f9:ae:36:3e:c6:
1d:d5:52:6e:37:3b:5f:10:22:44:d7:3d:fa:54:f1:
0c:21:ab:d6:1b:cd:b9:1c:ec:53:f6:0d:12:57:27:
ba:c3:bf:19:ae:20:44:d4:af:9d:e4:cf:b7:39:05:
74:b0:52:9b:ba:11:2a:09:5b:b8:fa:88:11:d4:53:
de:73:a8:85:6d:cf:c0:80:ff:54:e5:86:2f:54:a9:
cc:21:e3:e0:ad:ca:d9:95:3a:54:4b:c2:73:37:c2:
9e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:06:8C:AC:85:24:22:70:9A:BD:59:C0:F5:85:02:47:72:D3:6D:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ebd5f0ba-0855-35b4-b758-5607a432fd86.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
X509v3 Authority Key Identifier:
keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
sbgp-ipAddrBlock: critical
IPv4:
131.153.102.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:ea:08:9d:32:9e:d1:dd:dc:2d:e1:f6:63:ac:ca:01:3b:b0:
1d:67:e8:e7:03:10:8a:ab:c5:7b:02:56:42:64:78:50:c6:b6:
28:82:5a:db:9c:0a:08:7d:c7:a0:bf:59:c3:c3:ba:06:37:32:
9e:88:6b:2f:ae:82:c2:7e:f6:2d:01:93:17:6f:c6:7f:73:b8:
ff:e5:95:70:0f:61:bc:1f:72:81:84:b0:42:64:2c:9f:54:36:
f0:38:a3:f5:26:72:64:92:2a:0c:52:07:99:8c:36:4b:71:b7:
dc:a3:a5:a8:e7:54:b9:c2:cb:ee:a0:a1:fc:cd:e6:5d:23:cb:
e2:0f:fc:4f:54:ec:4e:32:6c:11:1a:27:dd:92:b0:f4:46:83:
00:4d:b6:42:d9:42:18:2e:64:6b:18:1c:a0:b6:db:79:00:cd:
8c:89:fe:90:fc:1f:57:48:bb:54:95:be:66:6e:1b:7f:c5:0f:
45:65:08:55:59:b2:2f:3a:86:32:2a:45:37:4a:c7:34:ba:25:
48:0f:66:82:1b:23:f3:35:65:58:c7:cc:81:ff:ce:e9:97:aa:
56:67:fa:92:75:f0:aa:35:2c:48:09:05:0e:83:3f:3c:35:cc:
82:62:a0:29:db:fd:b8:c5:33:72:f5:62:34:b2:37:b0:9e:84:
4f:24:94:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 00:19:11 2025 by rpki-client