Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/aea14efb-c109-32d8-ae22-1f7f2768265d.roa
File: aea14efb-c109-32d8-ae22-1f7f2768265d.roa (raw, json)
Hash identifier: dilKM/UL/E2WvJl0+Hv2VAD+Gq01o7Aqxs7OcZSZ5MA=
Subject key identifier: 08:30:53:94:26:25:F8:AD:39:F4:58:C4:11:66:9C:6B:A3:6D:F9:F7
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848BD20EF057148E0F85EF09A00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/aea14efb-c109-32d8-ae22-1f7f2768265d.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 397239
IP address blocks: 156.154.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:20:ef:05:71:48:e0:f8:5e:f0:9a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=43eb8b6b-e613-41ff-9ad8-58d76d0a4c61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6a:58:52:4d:e7:39:7a:c4:72:43:2d:a6:73:
fb:fa:59:ca:88:7f:40:5d:7c:92:2f:06:8f:c5:dc:
c8:11:95:d5:99:37:2f:38:d1:af:cc:18:ab:3f:b1:
be:a0:e3:2a:3d:c4:80:2b:07:db:6d:a3:c6:43:ba:
42:27:10:82:44:0f:ca:8a:ba:46:e1:1c:09:61:b8:
b1:3b:1a:14:ff:40:a5:1c:74:f9:dd:32:73:24:01:
4a:41:07:03:23:b3:7a:93:38:0d:45:52:dc:1c:f5:
30:4f:71:f0:d5:da:4d:bb:95:c3:1f:52:d3:1d:b4:
aa:c6:f7:ae:c8:d9:5e:c2:53:b0:57:54:d5:37:46:
b7:b7:5e:f4:39:e1:97:b3:ba:35:f7:af:94:f1:72:
03:64:c2:bd:2c:e8:9a:1c:c3:cc:f7:fc:d5:b6:15:
f8:a6:4e:5a:d1:fc:30:06:8d:d2:86:49:62:06:dd:
14:41:2f:00:4c:a0:c1:60:ff:a6:54:61:16:f9:40:
3c:c3:76:a2:94:26:dd:35:df:6c:f4:0a:ab:7d:e0:
10:1e:bc:26:0e:9a:45:58:d4:63:d5:11:99:26:0f:
95:0e:99:47:18:b2:51:b1:23:bc:ee:63:e3:ed:5d:
27:82:7e:68:3f:a9:d5:f7:e0:8f:cb:b8:21:f6:1f:
9e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:30:53:94:26:25:F8:AD:39:F4:58:C4:11:66:9C:6B:A3:6D:F9:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/aea14efb-c109-32d8-ae22-1f7f2768265d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.154.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:b2:f9:5d:9c:f5:37:61:14:be:97:18:c6:ee:6a:e2:52:bd:
92:91:7b:74:3f:14:72:26:72:0d:db:88:0a:9c:dd:f0:bd:d1:
d7:5b:ab:e9:89:02:80:82:98:f3:9f:b2:c6:3f:c0:f5:7b:1f:
85:d3:f9:61:23:49:35:6e:46:30:17:83:57:75:d6:c4:fd:5d:
ba:5a:a3:00:8e:c2:ff:4b:e3:eb:f1:76:c2:1e:ec:3d:59:7a:
2c:55:19:13:67:49:86:d0:87:e7:a7:a2:29:5c:13:1a:15:e1:
a0:85:2b:69:04:6d:f8:97:b5:00:ac:d9:ce:0f:75:04:c4:db:
e0:91:aa:a1:0b:e5:ad:41:a1:f6:b1:b8:2b:1a:8a:b6:b6:f4:
4e:e1:34:65:f5:64:a4:bc:ff:91:34:47:04:04:db:1b:90:46:
b6:88:5c:b4:eb:1b:b4:66:74:c4:a3:58:1e:aa:6f:90:fe:f2:
b5:a4:df:a3:8c:26:90:79:c1:aa:9a:4e:67:36:5b:cc:fb:5b:
9d:a6:d4:96:da:e4:c6:4b:c3:b0:0c:e4:03:00:91:44:23:66:
26:7a:8c:42:68:4e:6e:06:33:7a:1f:9a:2c:36:d5:fe:6e:79:
0a:8d:4d:e5:7b:84:1f:69:e1:26:aa:90:63:8f:c6:c9:ee:e6:
e5:c9:65:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 15:55:24 2025 by rpki-client