Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2172dad8-35ea-398e-992f-83a94e20e511.roa
File: 2172dad8-35ea-398e-992f-83a94e20e511.roa (raw, json)
Hash identifier: Q4jUHwZCt0C1pBCfitaTQLtIr2oge5mXHvRurJrSgSQ=
Subject key identifier: 79:56:9C:61:84:92:BC:09:19:D6:4C:E5:0C:CB:23:62:F7:24:31:65
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848BD20FDFC79A988E3B1C91A80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2172dad8-35ea-398e-992f-83a94e20e511.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 397221
IP address blocks: 156.154.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 09 Apr 2025 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:20:fd:fc:79:a9:88:e3:b1:c9:1a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=3201822b-e849-40a1-a2a7-17c6f151fd73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ad:dd:ab:f7:a1:c0:d4:3c:cd:d0:92:dd:b3:
8a:9f:16:cc:ea:eb:36:6d:ab:63:f0:5f:81:49:a2:
11:41:5c:b2:dd:46:02:d2:34:07:13:eb:4e:ef:47:
da:0d:17:34:7d:c0:3d:94:1f:21:de:2f:e6:06:1a:
2e:0b:9f:88:f7:fc:e5:50:42:dd:4c:a2:ce:04:c9:
78:10:ab:87:f2:24:b3:03:b7:ee:43:3f:e4:49:e8:
29:85:7c:14:5e:e3:ff:5e:89:8b:ed:83:39:46:b3:
1e:16:db:76:d6:de:eb:44:c8:f4:e1:76:4d:84:89:
6f:63:62:16:51:40:64:dd:c4:29:c0:48:a0:02:f4:
f2:3f:a3:b7:cf:38:70:8e:c6:0a:55:90:d1:e4:9a:
31:98:77:54:f1:0d:d2:8c:dd:16:c2:6d:93:14:b3:
73:39:3e:9f:25:44:3c:33:22:b0:b4:5c:bf:7d:38:
4f:59:62:61:89:58:37:dd:64:c6:f1:d1:48:84:28:
54:12:5d:03:88:45:1b:27:7f:2b:eb:07:c7:04:93:
ec:d9:15:f2:7a:3e:7c:0d:74:98:ad:9e:40:8c:31:
af:96:6f:60:5f:c3:51:90:fa:fd:c1:1b:c9:45:33:
53:21:b1:83:64:c4:f6:93:d1:d6:fd:f9:30:27:e2:
1d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:56:9C:61:84:92:BC:09:19:D6:4C:E5:0C:CB:23:62:F7:24:31:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2172dad8-35ea-398e-992f-83a94e20e511.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.64.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:4c:7c:77:9b:ee:68:30:3c:54:22:bc:33:49:4c:83:92:4b:
33:76:25:1b:2a:42:30:3b:de:b8:74:4a:02:d4:55:e3:4a:25:
90:39:4c:49:33:a1:45:3e:b3:cb:b5:82:a2:72:43:bf:f6:72:
27:04:0e:d9:8a:b3:98:b9:b6:fd:20:aa:d7:49:1b:61:38:ca:
ce:d1:65:fe:13:c7:97:46:6a:1a:b3:ea:85:9a:4a:4a:a0:15:
f5:0e:66:da:f4:3b:86:62:9a:75:38:1e:39:a6:a2:7b:f8:16:
0a:dc:e3:f8:1b:f2:5d:38:04:f0:42:43:d1:d9:b8:90:e3:2c:
35:7d:be:b8:a9:ce:87:16:d2:df:5f:12:63:59:52:c4:a7:1b:
61:10:9a:b1:4d:b5:63:71:2d:37:9a:c2:54:12:5e:89:38:7c:
9e:03:f5:dc:de:e9:04:4a:84:bc:fc:1d:db:d4:9c:dd:3b:ad:
63:e7:ed:45:ab:8d:d8:69:9b:20:99:45:5c:4c:25:35:2e:41:
c6:44:4a:09:67:87:7f:27:18:ae:73:dd:c9:e3:c6:82:cd:91:
c8:63:2b:5d:f8:cc:aa:52:5a:b8:20:39:56:a3:c8:67:9c:37:
75:2f:8e:26:26:22:02:4c:05:0c:7e:fe:59:8f:44:dc:17:05:
88:d2:a7:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:22:04 2025 by rpki-client