Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/78a9f3c6-a2d3-3141-b9af-806bffcada9a.roa
File: 78a9f3c6-a2d3-3141-b9af-806bffcada9a.roa (raw, json)
Hash identifier: US66vO7oCxK+CDn8xl9ZOl4mtp/wSdH1ukguZ5SIy+E=
Subject key identifier: 70:49:73:79:DC:B3:42:58:8A:BF:2B:B7:6F:43:77:4E:CD:3B:99:CE
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858491246E62F7891A5E7F6829D00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/78a9f3c6-a2d3-3141-b9af-806bffcada9a.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 397219
IP address blocks: 156.154.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:e6:2f:78:91:a5:e7:f6:82:9d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=bcdd20ed-a04f-4ea5-995b-4e515791248e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:16:00:49:3d:a2:2d:ac:46:61:2d:df:ba:4d:
48:16:85:38:3e:4d:74:6e:43:36:d7:bc:44:61:4c:
d8:b6:14:06:99:22:f5:d5:40:53:bb:ef:3a:46:f6:
5e:87:53:2b:49:c9:ce:f5:a3:55:71:9a:6c:0e:eb:
93:2c:b7:3a:e3:d1:8e:df:d7:9b:0c:c3:31:47:f9:
40:1f:8f:df:62:57:f7:c6:73:85:21:9c:a2:a8:f9:
8b:ed:50:2d:cd:c9:35:aa:94:28:3e:1b:bf:29:84:
d4:f8:f0:6e:37:1e:46:81:79:73:db:26:14:30:1f:
2f:28:44:6f:a9:eb:2c:2b:0a:d0:b8:4f:89:98:6b:
33:e6:4d:c1:17:d8:e4:b8:c5:5e:3e:d0:ac:f2:4e:
6e:9f:c9:37:f4:54:3a:7f:df:5b:f1:71:c8:dd:ec:
13:b1:4e:04:9b:b2:1e:53:d2:a8:52:bf:54:ee:9f:
63:79:56:54:a7:ba:4c:a8:be:d7:c2:8c:06:58:ad:
39:4d:ad:e3:09:61:a9:bd:09:ac:4b:51:14:89:00:
cb:23:b5:1b:15:66:5f:ff:2e:7f:d1:c3:38:8a:35:
2a:e0:50:11:d7:12:ad:6d:34:55:31:6a:08:24:8e:
90:91:94:f2:99:ce:3c:68:72:e7:2b:86:ce:3e:01:
54:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:49:73:79:DC:B3:42:58:8A:BF:2B:B7:6F:43:77:4E:CD:3B:99:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/78a9f3c6-a2d3-3141-b9af-806bffcada9a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.106.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:76:b3:59:24:a7:76:ff:04:69:35:50:93:ab:6e:60:f8:b8:
39:06:d3:27:e9:db:22:7b:36:09:fd:fd:43:08:c2:4a:2a:25:
2a:79:ea:e0:c5:6e:02:f6:1a:c0:fc:00:2f:1d:d2:b6:bb:58:
61:da:26:39:fd:21:d5:c1:e1:42:53:bf:b6:37:82:d3:fa:9b:
54:99:bb:96:bb:3a:bc:5d:cb:66:fe:9d:18:3c:c6:a6:5e:5d:
e0:1c:84:3d:46:35:01:9c:ed:66:32:ac:de:a7:c4:14:67:90:
74:e7:2f:4a:cc:ef:91:ff:d5:8d:17:0f:18:a8:21:e2:b5:3f:
d7:16:9d:4a:84:3e:e3:1d:24:79:74:c0:35:c0:4d:4d:4f:86:
1f:af:9c:e7:c0:2e:5b:db:95:bf:7a:cd:f0:21:bc:6b:fd:15:
f6:ea:5a:11:44:dd:bc:06:60:b8:1f:0a:89:59:bf:29:64:87:
0c:3d:4f:3d:f6:39:e1:11:ed:55:dd:a8:53:86:de:86:b6:81:
ca:48:9f:1a:a5:50:cd:b2:00:83:5d:6d:ed:2f:6e:47:4d:dc:
99:59:e4:0d:b0:e9:db:67:94:85:4a:4d:2e:b9:49:41:c5:a5:
c5:7f:5d:74:e1:ec:70:93:17:73:88:2a:1c:c1:6f:09:43:d7:
f0:f7:c0:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:11:38 2025 by rpki-client