Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3ad98945-2947-3f7a-97a4-2a209440aa50.roa
File: 3ad98945-2947-3f7a-97a4-2a209440aa50.roa (raw, json)
Hash identifier: selS2O01LLLLKaZ2TOqANMvGanQC1LyszzCu+wQPhiA=
Subject key identifier: C6:6F:2D:1E:B9:45:4D:2A:3E:C7:98:6C:92:54:11:97:30:18:11:91
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848BD2111BD27B6248E37552440
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3ad98945-2947-3f7a-97a4-2a209440aa50.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 397229
IP address blocks: 156.154.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:21:11:bd:27:b6:24:8e:37:55:24:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=e626ae34-4b6e-4436-8cf2-cd8d2bd26768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d0:da:c2:28:4d:71:57:0f:aa:f1:8b:fd:ab:
56:fc:0c:48:ac:10:54:ab:d6:5d:af:95:f8:67:24:
42:5c:b0:2a:3c:74:77:8d:aa:84:3b:e2:1e:19:b9:
3c:3a:53:73:74:37:36:c1:40:8c:0c:9a:68:7a:56:
df:e7:ed:77:cb:a1:77:24:5f:15:24:dc:b3:f1:bd:
df:4d:09:db:f8:eb:4b:2d:47:33:43:1a:d9:9f:3e:
ba:c4:4d:1b:7e:e8:95:bd:43:1e:31:c5:bf:31:ca:
8d:ae:9d:23:b0:4f:1b:78:9c:71:58:a0:50:fb:18:
32:33:79:7c:02:49:f5:bd:e1:2b:78:f3:69:07:c4:
a3:44:89:a4:06:49:79:b6:22:ee:fc:79:a8:67:8b:
f5:d2:d7:50:7a:f7:79:12:2a:5d:28:7d:db:f5:91:
1f:48:5f:ee:87:e8:ad:89:dc:bb:3b:25:15:22:eb:
4d:a8:23:06:bd:e8:27:8a:a1:dd:b7:ac:32:2d:d1:
15:d9:a1:f0:25:46:00:4c:f9:b2:cd:81:2b:92:a4:
85:1c:38:dc:f4:19:1d:45:81:38:d6:5b:9c:dc:30:
3c:e8:36:d5:4b:97:b8:ba:d1:fb:e9:dc:44:cf:16:
61:53:4c:40:e3:55:58:06:df:d5:4e:e8:f4:95:1e:
7f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:6F:2D:1E:B9:45:4D:2A:3E:C7:98:6C:92:54:11:97:30:18:11:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3ad98945-2947-3f7a-97a4-2a209440aa50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.172.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:90:6a:86:55:df:10:eb:13:44:7b:53:d3:70:ac:e4:f7:dd:
29:e1:f8:f7:2e:04:19:11:c0:5f:67:f9:f1:95:e8:3e:7e:d3:
53:14:4e:14:24:06:c5:e7:c3:e2:7b:14:05:24:8d:4c:0b:78:
81:e3:15:4b:63:01:19:f0:b0:e2:63:3e:4b:68:61:63:8b:35:
9f:dc:f3:de:58:73:ef:2c:61:d8:dc:d1:da:15:18:63:04:08:
fb:dd:82:27:b6:0a:b8:7c:fc:40:36:87:fd:46:7d:0d:7b:53:
8d:40:f6:9f:d9:67:e7:aa:5d:14:34:83:90:41:47:d8:4b:51:
79:9e:8a:14:5d:8f:62:e0:2b:56:11:80:0b:64:52:bf:d1:ca:
53:62:36:4c:39:b9:db:13:a6:ee:fc:59:f0:94:16:11:68:14:
f6:ba:93:16:4f:65:74:41:ca:b3:14:e6:63:27:45:a3:7c:62:
fb:0a:7d:fa:1a:63:01:52:17:8b:b8:d4:b1:30:88:b8:fd:eb:
af:06:1e:48:c7:00:06:2a:c1:1e:a2:d3:25:25:41:ad:cb:23:
5e:5d:15:1c:20:9a:20:21:d6:d8:67:49:8a:f4:60:e9:a4:ed:
a3:b2:c4:14:21:1b:e9:45:1c:72:68:4f:2d:d1:d4:a8:c8:5e:
66:b4:e8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:13:40 2025 by rpki-client