Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/be312af8-0f4b-3ebe-9616-d8b36d66765d.roa
File: be312af8-0f4b-3ebe-9616-d8b36d66765d.roa (raw, json)
Hash identifier: aB8HD6S6i1w34tCxRSGKPmzwh+POssVNlRho2Heb5TY=
Subject key identifier: DA:D7:B4:B9:1A:09:8A:B2:7B:5A:7E:7B:95:3F:BD:83:4D:C0:F4:39
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848BD20ED8B8DC931FA86D5F4F0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/be312af8-0f4b-3ebe-9616-d8b36d66765d.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 397216
IP address blocks: 156.154.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:20:ed:8b:8d:c9:31:fa:86:d5:f4:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=0c43ad9b-a827-4c9a-b150-b0c4eea4b170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2b:d1:9b:ca:91:4c:e1:d9:26:cc:98:2b:e6:
9a:4d:1d:a6:0b:a6:f8:fa:1d:34:6f:7f:e3:d0:2b:
5c:bc:57:35:d3:22:a8:c4:27:4c:09:74:d7:f6:17:
59:14:20:c0:1d:17:34:a1:94:5b:00:9b:5c:a7:ae:
e2:5d:ad:9f:a0:d9:b7:77:7c:0d:af:5e:7d:1f:11:
ab:c1:28:47:83:5f:60:d7:94:39:57:e0:d4:8f:98:
23:22:84:ce:81:e7:7c:b7:85:2e:10:f5:4b:75:29:
54:e4:35:6f:7c:4d:b0:40:8f:d9:34:fa:87:df:7c:
38:04:cd:07:27:58:0c:c8:97:a8:b9:5c:c3:38:53:
d6:52:5f:b5:15:10:93:99:26:55:2b:bd:ac:0c:55:
b4:f5:27:b6:d6:97:1d:15:39:50:41:eb:ca:e7:c5:
0d:70:b8:61:1e:70:f3:c8:47:ce:a3:cf:8c:22:17:
70:d8:a3:f0:3a:c4:74:95:1a:f1:9b:64:73:dd:c3:
d9:a8:d9:bf:c8:95:2c:1d:eb:9e:e4:d2:c5:74:0d:
0b:46:eb:41:94:c1:32:8e:b3:96:46:0c:a7:34:27:
b7:74:ac:77:d9:a5:cb:a7:a1:52:59:31:3c:7c:53:
9c:66:70:b6:48:a1:a5:c1:83:ed:a2:4b:66:18:ae:
33:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D7:B4:B9:1A:09:8A:B2:7B:5A:7E:7B:95:3F:BD:83:4D:C0:F4:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/be312af8-0f4b-3ebe-9616-d8b36d66765d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.154.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:5e:c0:e5:dc:7d:96:53:5c:7b:f1:b4:07:b0:e2:0f:f7:4b:
7e:6d:11:7f:47:b8:97:43:4c:9d:07:6d:cb:35:ad:9e:7d:bd:
63:dc:98:b1:6c:65:54:c6:a2:4c:31:9b:10:81:74:64:3f:8d:
be:1a:63:6a:56:34:9c:07:ce:a4:5f:a3:8b:eb:4b:da:6c:9e:
82:3c:06:5c:21:c8:de:cf:0d:5f:03:3a:e9:a3:f7:73:18:a4:
0e:11:ec:0d:b6:70:c3:ee:96:dd:29:f8:c9:e9:99:c1:6a:ed:
9c:a4:d1:35:09:3e:56:5b:0d:9f:7b:e6:06:a2:19:3b:5c:76:
3d:ac:d8:42:2f:5e:3e:40:dc:d2:1a:f9:04:93:a7:7a:ca:c2:
de:8c:d7:fd:92:3e:b9:ce:5c:17:e1:e4:01:37:41:c6:4f:9f:
b4:c2:53:29:2c:21:b0:7a:43:8c:41:4c:77:be:2f:ba:20:d8:
ff:c5:38:88:35:6f:9d:1e:96:e5:98:bf:88:b7:6d:75:b7:96:
23:1c:ef:7c:f0:f6:bd:60:bf:00:75:5e:75:07:9a:0e:8b:37:
3b:d7:2b:26:ae:57:5f:73:4f:86:72:02:76:bd:73:c4:a3:d6:
75:eb:c6:d1:b2:f3:02:27:d6:05:59:8a:81:30:e2:e0:f6:4a:
0d:d9:f6:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:47:02 2025 by rpki-client