Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d0b8c29f-1480-36f1-b42e-c8b8bc11d106.roa
File: d0b8c29f-1480-36f1-b42e-c8b8bc11d106.roa (raw, json)
Hash identifier: +qeehD1IZgXdj7smhKZVAdncKZ2WiyII3S07suw5orE=
Subject key identifier: C0:64:27:9F:27:B6:10:CA:08:E1:DA:B6:89:02:13:1A:07:1A:77:53
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848A996589C8696C77C6DEE1A80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d0b8c29f-1480-36f1-b42e-c8b8bc11d106.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 397241
IP address blocks: 156.154.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:58:9c:86:96:c7:7c:6d:ee:1a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=c80364d7-6a34-49e1-9ba5-1e4e1fe851e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:19:6c:15:55:47:35:9d:69:10:b1:18:46:f8:
1a:c8:aa:5f:9f:26:8f:ac:c3:88:a5:41:42:d3:cd:
a8:34:15:f9:eb:36:f9:0a:58:51:5e:ed:84:7c:c7:
8e:1a:2b:05:d9:eb:cf:2d:5c:44:09:0c:42:4c:f5:
98:bf:c6:36:45:78:cb:d1:c6:63:5d:4b:d5:be:26:
89:03:1f:8e:af:3b:47:58:54:86:83:32:9e:9d:86:
82:da:7e:75:b0:2b:b4:a2:f8:30:06:74:5a:22:5a:
8e:16:d2:9b:57:22:13:25:e8:9b:df:ac:95:4e:c5:
6a:c8:c3:e4:de:92:0b:82:eb:2a:cc:da:e1:c5:04:
0a:7e:e9:47:f7:7f:55:36:11:ba:68:ee:14:bc:43:
80:4a:73:11:e8:b7:2a:5b:af:d0:85:7a:36:03:e2:
30:a4:09:e4:19:73:ba:2a:ac:e5:ea:ba:e3:ac:cc:
c0:07:3a:8b:90:86:57:5b:4b:0c:97:db:e0:8d:cc:
bf:5b:44:00:1b:02:1e:48:e6:98:80:c7:b2:9a:2d:
53:36:9f:34:37:0d:50:ba:78:94:55:cb:fb:03:07:
4f:a1:7e:be:eb:e5:39:af:12:01:6f:b3:a8:f7:0d:
e9:d6:ae:c5:af:dc:1a:31:9b:7a:57:83:a8:72:43:
16:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:64:27:9F:27:B6:10:CA:08:E1:DA:B6:89:02:13:1A:07:1A:77:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d0b8c29f-1480-36f1-b42e-c8b8bc11d106.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.159.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:12:fd:84:f0:e4:c2:4c:d8:d1:41:89:63:24:ab:be:00:bc:
ca:a2:c0:07:c3:1e:96:03:df:1e:ac:6f:91:95:17:e5:57:7d:
22:43:6e:6b:cb:ea:c8:7e:02:c7:f1:4a:cd:b9:41:c5:8d:33:
89:10:a0:ec:07:50:30:ce:f2:b9:f1:44:03:c3:ce:75:d5:a2:
0f:f5:4e:e4:ee:cd:ce:f5:43:15:da:98:29:02:83:e5:00:0e:
61:ab:15:61:30:7d:81:fe:2b:96:8e:d3:37:ad:f2:37:3c:e2:
59:e6:5f:2a:87:20:e6:59:4a:f2:d1:c4:c0:68:e6:9b:3a:fd:
3e:04:15:ff:fb:39:57:ec:3f:b2:dc:5d:38:90:e9:46:01:ac:
00:e9:22:4c:3b:c2:0c:ba:8a:a1:c5:40:cc:1c:04:b9:0e:7b:
d8:f8:ff:95:08:e9:18:d6:75:54:b4:ce:16:4d:ef:31:6a:d6:
42:dd:ba:3f:21:02:5c:40:33:ad:cc:c2:7c:34:c6:0e:b5:f9:
4c:1e:4e:a1:6b:74:14:a0:67:1b:e0:71:21:26:93:d1:4d:04:
2e:15:f4:15:4f:05:23:06:0f:79:0e:19:da:6d:8b:b0:82:fe:
1a:50:2a:07:6f:88:c2:61:39:e2:cc:51:ba:98:62:4b:99:b6:
e2:44:8f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:55:57 2025 by rpki-client