Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/f9656b2f-6dd0-313c-baea-4ee93b8e28e0.roa
File: f9656b2f-6dd0-313c-baea-4ee93b8e28e0.roa (raw, json)
Hash identifier: RCDnKkXaSxsh2BkhLG01PnRvVh8rblbv6bblgZMZ5hI=
Subject key identifier: B6:63:B5:65:87:EA:22:AF:CB:B8:F5:E2:23:22:43:71:7F:23:15:2D
Certificate issuer: /CN=98fa46f5-eef1-4569-9795-c233e7e74658
Certificate serial: 010D0C9F43285848DEA11542B7F356E6DBF38140
Authority key identifier: EC:E4:93:A8:0B:A6:92:FC:4D:01:36:6C:DB:03:4B:A3:00:90:84:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/f9656b2f-6dd0-313c-baea-4ee93b8e28e0.roa
Signing time: Thu 13 Feb 2025 14:00:50 +0000
ROA not before: Thu 13 Feb 2025 14:00:50 +0000
ROA not after: Wed 14 May 2025 13:00:50 +0000
asID: 8987
IP address blocks: 192.16.78.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/98fa46f5-eef1-4569-9795-c233e7e74658.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/98fa46f5-eef1-4569-9795-c233e7e74658.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:de:a1:15:42:b7:f3:56:e6:db:f3:81:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98fa46f5-eef1-4569-9795-c233e7e74658
Validity
Not Before: Feb 13 14:00:50 2025 GMT
Not After : May 14 13:00:50 2025 GMT
Subject: CN=f77d4110-507d-4fb1-ab32-3c4264200f81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:d0:02:54:aa:a2:94:49:fb:3c:e5:f2:83:c5:
2c:1e:ae:ed:e6:5e:9c:7f:a8:7c:1f:6d:dc:56:eb:
00:84:f2:bc:ad:40:e1:93:e5:8d:30:67:f1:a2:eb:
01:96:e3:ce:0b:2e:38:3d:36:8f:a3:e8:94:a2:a7:
b6:e2:77:47:e9:b1:02:65:0a:22:16:f7:7c:b0:52:
e9:3f:2c:d7:75:4f:7f:35:9a:15:54:1b:2a:ef:b9:
a5:60:8b:2f:2f:15:da:f5:d3:e9:63:9a:bd:3a:c3:
c1:14:6c:09:7e:b5:ec:7c:40:fa:de:6c:c8:03:77:
18:4b:1f:d7:e8:44:84:3e:93:13:a9:ee:fd:cd:eb:
8e:c5:14:10:88:46:3b:0d:16:3e:d8:f6:30:21:1b:
ea:be:69:9f:bd:87:74:55:a1:4b:15:ec:7c:d9:a8:
3c:51:43:a6:bf:62:2b:1e:5c:36:ef:47:2a:26:02:
a5:d8:b4:0b:41:00:79:9f:4d:7c:bf:dd:88:05:1c:
ef:cf:fe:24:77:62:d4:8c:33:69:51:3e:bb:bd:2b:
3c:95:ba:77:1b:a1:aa:88:ad:86:ae:00:09:72:6f:
ea:4d:c3:f4:02:e0:52:79:5d:3f:59:d5:e1:22:bb:
0b:8c:02:97:b9:cc:13:9f:9e:23:26:64:77:78:91:
54:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:63:B5:65:87:EA:22:AF:CB:B8:F5:E2:23:22:43:71:7F:23:15:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/f9656b2f-6dd0-313c-baea-4ee93b8e28e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/98fa46f5-eef1-4569-9795-c233e7e74658.crl
X509v3 Authority Key Identifier:
keyid:EC:E4:93:A8:0B:A6:92:FC:4D:01:36:6C:DB:03:4B:A3:00:90:84:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658.cer
sbgp-ipAddrBlock: critical
IPv4:
192.16.78.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:ed:60:a0:02:f7:61:13:05:12:6d:c9:70:d8:0c:1f:1d:76:
cf:69:f7:4a:a6:09:63:4b:10:e7:d4:dc:f3:87:40:8e:20:84:
cf:76:d2:6c:41:89:d9:80:27:58:99:c3:33:4f:da:98:9d:00:
61:a2:64:00:e0:f1:0c:13:29:dd:6c:0c:f1:3a:ff:15:2f:8d:
04:5a:5b:41:31:46:8b:99:61:57:9b:09:3f:20:b0:dc:64:cd:
cb:00:3b:82:25:40:68:ca:ab:da:53:25:8b:10:73:e3:91:e6:
29:51:a4:ac:65:8c:8f:b3:22:43:c7:56:d3:70:a4:97:34:bd:
d0:09:89:a8:63:7d:ff:22:dc:68:cb:d2:44:a2:55:62:6a:3b:
38:67:b0:cf:05:e7:c6:8b:6e:02:88:bd:84:8a:b5:30:18:81:
20:04:de:7d:3f:81:f8:bf:a5:40:6a:d8:c4:b8:bb:59:c8:a7:
08:60:ed:c7:34:a7:82:97:6e:fb:79:a4:27:d3:f0:6c:42:10:
b5:6b:39:fe:0f:78:6e:d9:b3:1f:ee:8e:1a:30:ab:6f:66:55:
7b:f0:53:af:66:42:62:58:45:89:39:76:51:bf:f5:74:51:fc:
3a:44:fc:91:81:ee:b3:cc:48:3a:73:3a:50:47:40:36:b9:6a:
89:c4:3e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:08:21 2025 by rpki-client