Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4d571960-9a8b-39ee-8c5f-6c24a1258b10.roa
File: 4d571960-9a8b-39ee-8c5f-6c24a1258b10.roa (raw, json)
Hash identifier: tyGaZZ0Mx4Noo+fWnP3mj5K4atzFMk9LKTkRhb+rO0c=
Subject key identifier: E4:40:E8:2C:F1:DF:64:29:6C:0E:29:64:5F:BB:C4:EC:BA:88:D6:E4
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858496FAF1EE72D89EBC081E5B780
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4d571960-9a8b-39ee-8c5f-6c24a1258b10.roa
Signing time: Sun 06 Apr 2025 13:01:01 +0000
ROA not before: Sun 06 Apr 2025 13:01:01 +0000
ROA not after: Sat 05 Jul 2025 13:01:01 +0000
asID: 397241
IP address blocks: 156.154.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 13 Apr 2025 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6f:af:1e:e7:2d:89:eb:c0:81:e5:b7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Apr 6 13:01:01 2025 GMT
Not After : Jul 5 13:01:01 2025 GMT
Subject: CN=f7620d81-b69e-4682-875b-34eca23ce820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:44:81:0e:4f:e1:95:cc:0d:fe:ae:92:21:d5:
f3:9b:ea:31:a1:66:a6:cf:4d:93:cb:46:6e:8b:0e:
0a:b0:26:66:c0:79:c4:d8:fa:4b:b1:df:ba:74:6f:
83:fa:13:50:38:6e:17:ac:5b:f4:04:e4:85:6e:b7:
2e:1e:e0:b8:e8:da:e4:de:3a:11:b8:12:5f:e3:b6:
5a:fb:26:15:1f:f6:c7:5d:f3:e1:75:9f:4f:e2:13:
4b:ed:35:a0:59:4b:59:3c:92:39:b9:97:5b:a2:d4:
8c:6e:19:8d:8a:e7:15:07:18:f5:8b:28:52:e8:53:
1f:ac:ec:bf:35:b5:69:5c:3e:0f:fe:91:be:fe:3a:
5d:f0:67:8e:90:6e:38:fa:72:3e:cf:6c:08:7a:4a:
00:86:09:00:cd:3b:59:96:88:da:d0:5e:66:cc:56:
58:3f:ba:86:1b:68:58:fb:64:d4:b8:39:ee:2d:7b:
fb:b3:9a:12:02:c3:8f:49:5f:8b:ae:b9:4e:f2:1e:
de:3c:06:6f:ac:d3:fc:ec:c9:19:2a:d2:5e:96:ce:
e5:ab:76:2d:47:75:37:3d:d3:f3:b9:ff:bf:63:68:
f2:33:10:42:01:86:72:ac:4d:c5:4c:e0:22:62:50:
05:48:66:3e:66:72:ed:a5:28:8e:65:01:10:89:c5:
b2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:40:E8:2C:F1:DF:64:29:6C:0E:29:64:5F:BB:C4:EC:BA:88:D6:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4d571960-9a8b-39ee-8c5f-6c24a1258b10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.100.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:06:4d:17:b4:04:61:4f:65:23:fc:03:9f:4d:bc:c0:40:ab:
61:e0:14:02:4e:67:2c:0f:64:82:b4:67:2c:71:ea:58:19:0f:
3b:d7:64:52:be:7d:0c:99:0b:0c:22:e1:b9:8e:8a:e3:7e:50:
e0:0a:0b:9e:dc:20:bc:0a:bf:9b:ad:37:97:11:9d:63:eb:96:
a6:67:d1:37:91:59:96:7d:0c:ab:f3:82:ea:4c:02:5c:7a:d3:
d2:a2:5a:3b:87:af:87:1f:ec:3c:9d:f7:c3:69:6b:80:53:3f:
29:37:14:b2:de:5e:17:d4:f1:8f:6e:d0:25:a8:cc:fb:8e:50:
1f:23:a0:a8:97:93:76:9c:f6:c6:55:70:1d:0b:88:48:74:08:
b1:de:fe:65:15:d7:82:cf:c8:a4:c7:ab:99:05:e2:22:41:31:
5d:60:fa:57:41:98:a8:bc:84:2d:c7:f2:ab:0a:e6:c0:80:f1:
93:ee:a9:17:04:15:94:7c:6c:f7:c2:03:40:1b:90:3d:9c:1b:
cd:39:af:af:7b:69:36:e5:20:ef:63:64:89:5f:95:03:29:1f:
50:9a:0c:2b:20:83:bd:14:82:f9:16:f6:7d:c8:27:54:02:d9:
ce:d2:7b:fa:f4:4f:5e:65:e6:a5:44:56:1f:bb:1b:b6:59:5d:
18:ff:b6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 11:28:20 2025 by rpki-client