Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/875ef8c4-5f6e-3633-95c4-d1736b6f524a.roa
File: 875ef8c4-5f6e-3633-95c4-d1736b6f524a.roa (raw, json)
Hash identifier: ulZIAuEaRo+T2YIQMZhEEiQeHbDZPV0k/G0qzw9ncxY=
Subject key identifier: 79:1E:E3:FC:E6:AE:A8:54:DC:B7:CA:E9:B8:D2:1D:DF:9E:70:17:80
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858494B642845F201090F8B1614A0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/875ef8c4-5f6e-3633-95c4-d1736b6f524a.roa
Signing time: Mon 24 Mar 2025 13:00:53 +0000
ROA not before: Mon 24 Mar 2025 13:00:53 +0000
ROA not after: Sun 22 Jun 2025 13:00:53 +0000
asID: 397235
IP address blocks: 156.154.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:64:28:45:f2:01:09:0f:8b:16:14:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 24 13:00:53 2025 GMT
Not After : Jun 22 13:00:53 2025 GMT
Subject: CN=301d18c4-f51d-4a55-a595-0686c89df913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b7:fa:f5:13:84:14:44:c8:84:a0:76:d0:9c:
5a:7a:fc:2f:66:24:42:43:f6:44:73:99:29:e0:09:
0c:6b:96:a2:2e:b3:b8:d0:18:02:de:0a:cf:4a:b8:
6c:39:42:01:58:09:06:f2:8c:c1:8a:91:19:aa:07:
fe:a6:4f:74:41:e4:5c:17:be:23:6f:7a:ba:bc:f6:
4b:88:34:41:f6:5f:31:f0:e8:97:b5:5c:83:12:74:
6a:b4:79:54:10:36:8e:59:a6:ef:49:bb:97:a9:d5:
c1:96:f0:b6:a2:06:fd:f7:6b:be:04:17:51:33:69:
97:50:f1:51:41:77:43:51:fc:3b:a1:14:c2:63:48:
1d:7b:da:83:57:20:68:65:dc:05:58:06:48:b0:24:
51:c2:bb:71:c6:fa:36:a4:3c:2e:40:c5:29:4d:2b:
61:02:a4:0d:18:12:a7:ba:04:32:15:91:0b:49:cb:
1d:9d:81:6c:b5:a9:d4:83:0e:23:64:37:f7:03:b9:
63:46:e4:4d:26:4f:03:4f:13:a5:0f:d1:dc:18:2d:
fc:9b:70:7f:09:1e:84:a0:de:3e:a4:9a:b0:c3:1d:
90:fc:94:28:5f:15:14:28:b7:fd:38:48:66:ce:2f:
b3:b6:45:96:a8:15:15:f4:b1:58:c1:de:fd:16:38:
90:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:1E:E3:FC:E6:AE:A8:54:DC:B7:CA:E9:B8:D2:1D:DF:9E:70:17:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/875ef8c4-5f6e-3633-95c4-d1736b6f524a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.54.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:4b:ed:e3:db:59:d1:96:c6:11:57:33:ac:94:af:2c:ac:58:
19:89:40:cb:6b:83:e5:85:9b:ca:42:c0:8a:6b:e6:3d:b5:1f:
82:5b:fd:dd:fd:55:e8:63:5f:91:eb:0e:20:9c:46:0d:36:60:
94:d4:46:1f:e9:bf:de:ac:3b:5b:91:3e:9e:90:ff:bc:09:08:
3a:cc:73:b2:38:dc:e6:cf:71:a8:53:7f:21:0f:7a:c3:cd:ed:
61:b7:f1:0b:01:3b:33:46:5e:ae:18:12:24:ab:fa:cf:a0:64:
06:0c:d3:44:ab:72:29:33:6d:73:e9:a0:68:d2:8e:fc:80:ba:
1a:2e:bc:71:56:59:17:73:31:94:66:11:14:79:e2:8a:f3:66:
55:a4:de:29:e9:24:20:58:34:8b:ca:24:24:54:a5:57:0d:70:
1b:64:b0:21:c8:eb:0f:6a:92:c8:6b:fc:a0:be:a5:a4:e0:37:
66:36:69:e8:01:74:1b:99:ea:d3:0a:00:75:37:6f:64:9d:87:
fe:ed:b4:fe:ce:53:22:3c:c4:4b:7a:73:75:2b:bd:1e:75:16:
f7:45:2f:f4:9f:90:f8:ae:da:10:1f:55:72:6c:a4:ce:87:fe:
b9:3b:14:a3:f1:46:36:fd:54:44:6b:3e:83:e5:c2:42:b5:50:
de:c8:69:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:40:26 2025 by rpki-client