Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/14911894-bb25-32ec-a0c7-c729eece742c.roa
File: 14911894-bb25-32ec-a0c7-c729eece742c.roa (raw, json)
Hash identifier: lmp/Ez53h/lcUVT7PnJyKAC8kHfZTcs9G5vPSJieCpI=
Subject key identifier: 32:7F:0D:C5:95:73:F8:1E:F5:F8:93:C9:41:F8:8A:FE:7F:6B:88:7B
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858494B6428BC2A28793E4E288B80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/14911894-bb25-32ec-a0c7-c729eece742c.roa
Signing time: Mon 24 Mar 2025 13:00:53 +0000
ROA not before: Mon 24 Mar 2025 13:00:53 +0000
ROA not after: Sun 22 Jun 2025 13:00:53 +0000
asID: 397242
IP address blocks: 156.154.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:64:28:bc:2a:28:79:3e:4e:28:8b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 24 13:00:53 2025 GMT
Not After : Jun 22 13:00:53 2025 GMT
Subject: CN=8ca39c7e-5500-4aa5-a67f-bf23f711e345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a8:37:41:b1:d1:d2:91:01:d5:63:7a:03:56:
1f:c4:ed:82:72:de:48:c8:e1:41:ef:c6:44:a1:1c:
af:c2:19:53:0e:b4:bc:6d:17:97:d8:7f:1f:2b:b3:
7b:94:d6:99:16:db:f6:99:6c:62:35:a6:7c:10:44:
ba:4c:16:14:34:f6:08:98:4d:86:83:36:9b:5b:27:
38:d6:0a:79:1b:33:b5:64:48:27:07:bf:ea:e4:d9:
df:de:bc:9a:06:34:e9:cf:43:c9:b8:a4:8c:45:5e:
02:e2:e4:32:0a:c7:d7:e5:9c:35:79:b1:c9:9c:5b:
f2:30:bc:1d:dd:1d:4b:1c:54:2c:3e:8f:84:04:46:
49:67:32:99:a1:fd:c5:09:da:4f:c8:db:84:1b:7c:
1e:db:91:0c:42:e9:7f:8a:78:7a:85:25:dd:43:60:
2f:72:49:ad:f5:4e:1e:9c:96:12:c9:42:7c:69:81:
60:0a:ed:f4:63:aa:3d:8a:74:5a:3e:7d:eb:d6:2d:
cd:f8:0f:b5:bf:c2:2b:fa:73:52:3b:35:e5:ee:1e:
21:4f:60:84:ad:da:61:43:d0:61:af:f2:62:44:dc:
7f:a0:a9:8c:ce:a0:ce:20:ca:90:b9:60:25:8c:44:
a4:10:cd:c5:b3:74:20:42:47:22:84:26:50:1e:1a:
42:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:7F:0D:C5:95:73:F8:1E:F5:F8:93:C9:41:F8:8A:FE:7F:6B:88:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/14911894-bb25-32ec-a0c7-c729eece742c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.54.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:76:77:77:5f:64:51:60:27:6e:c0:fb:6d:49:f2:f4:8c:d7:
85:c0:7a:6d:e1:cd:ab:60:6d:9c:bf:c5:48:b3:e7:7c:af:69:
79:7c:e2:3f:ca:a2:0e:87:e2:ed:d4:f0:ab:0f:82:55:b7:da:
5b:37:44:a5:96:ad:72:bd:25:8a:83:6a:cc:90:90:ec:49:69:
4d:05:31:06:b8:55:d1:48:67:75:40:86:9a:d0:c0:0c:cd:6f:
e3:45:cc:ed:67:0e:ad:d6:7c:67:6c:a4:a1:1b:22:f2:d9:b8:
10:11:b6:07:e9:5a:c8:cb:b5:61:c3:e7:53:e1:0b:0c:ae:aa:
bb:e6:f9:db:fc:b4:3c:0c:1e:a7:73:a2:00:12:2e:9d:f3:71:
7b:47:bf:50:14:dc:7c:55:5f:c2:a3:71:96:44:26:a6:97:2e:
a0:c2:00:95:c0:3d:28:4d:2f:85:f1:6c:ce:b8:31:0e:c7:ed:
8b:66:97:51:9e:c8:e2:b1:39:01:e5:03:fb:be:9d:79:cc:72:
5d:0b:df:0a:09:ce:d1:96:31:44:58:be:16:32:34:18:f3:4a:
98:a1:93:04:e6:9c:16:a1:8a:c0:13:06:68:27:13:56:75:6b:
27:f5:f3:e9:0a:58:92:1f:9e:82:d2:e1:b5:7e:8e:98:4e:be:
33:88:df:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:28:42 2025 by rpki-client