Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dc89003d-0379-3e0a-a7d6-43da48cd2a8e.roa
File: dc89003d-0379-3e0a-a7d6-43da48cd2a8e.roa (raw, json)
Hash identifier: Rx7X3yHjZYrQ+LyKhBOOV/FE7ew7XOCSYISEkouEMZQ=
Subject key identifier: 59:EB:BD:C3:87:CC:74:9A:75:68:36:33:1B:94:6C:4C:AC:15:BB:DC
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848BD20F7341A08F5635947F8C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dc89003d-0379-3e0a-a7d6-43da48cd2a8e.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 397223
IP address blocks: 204.74.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:20:f7:34:1a:08:f5:63:59:47:f8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=1babd55e-c3d9-4625-b2f1-6c7934185b93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:54:64:13:0b:48:88:9c:2f:31:1e:84:65:5a:
ff:2e:be:9d:95:31:6e:50:97:89:75:47:0a:4a:70:
0e:e9:e3:15:14:fb:4a:72:13:50:21:ac:c4:ad:01:
2a:e2:f9:8f:f7:ca:db:f1:26:d2:56:34:fd:86:2c:
7a:19:bf:4f:48:59:5b:6d:6b:c1:11:93:da:59:9c:
6f:be:f9:8f:d2:7b:81:d2:e9:de:cd:2d:04:d9:de:
12:97:82:61:bd:77:56:30:94:a6:c1:51:ba:fb:2b:
6f:36:ca:8a:ac:ed:52:7d:e4:88:7d:fa:28:9b:2a:
e6:7f:91:aa:d1:79:80:a3:bf:26:d0:7a:bd:6d:1f:
da:8c:18:eb:83:ea:25:7b:52:43:9d:d3:b9:9c:65:
9d:58:fb:81:4e:24:7e:4c:2f:9e:b8:32:b9:cb:74:
d9:87:d4:34:80:4f:24:0e:f5:7b:7d:fc:8b:cc:2a:
75:dc:2c:0d:72:bf:42:60:a9:6f:ea:3d:98:df:f7:
4e:b5:47:f5:a2:90:5c:4b:76:b8:0e:10:9d:28:7b:
55:f2:98:a1:bf:ba:fd:91:98:fc:ea:01:c4:bd:a4:
62:7c:c6:a4:17:51:fc:98:13:df:6f:23:61:79:dc:
61:15:46:e8:b6:bb:13:98:2a:be:88:2c:f1:77:5d:
7d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:EB:BD:C3:87:CC:74:9A:75:68:36:33:1B:94:6C:4C:AC:15:BB:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dc89003d-0379-3e0a-a7d6-43da48cd2a8e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
204.74.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:f7:5e:3f:ef:64:b6:90:85:fd:0d:d0:ca:1a:c5:f2:45:a1:
5f:cf:ca:db:5f:05:04:a9:f4:c6:fd:62:0c:18:b3:78:30:c0:
2f:91:ac:61:c9:f5:92:18:30:55:63:c6:71:5b:5b:33:a8:38:
dc:59:f7:df:ec:4d:c8:c7:bf:5a:e1:82:28:4f:1c:c2:00:21:
90:14:f2:26:fd:1f:c9:6a:75:c9:d6:35:ef:65:57:15:54:75:
2a:3f:f8:c8:40:44:45:4f:39:bb:f6:e3:a3:d6:76:94:fa:a2:
2e:09:fe:74:b9:f2:7c:3c:57:d5:23:14:25:74:b7:d1:be:64:
21:69:fd:ac:ac:bd:1f:41:0b:0a:4d:43:41:54:f2:8b:6a:21:
1d:e7:f4:8e:77:db:62:cf:68:80:aa:30:35:f1:c4:c6:1f:b6:
0b:4d:dd:fb:05:15:eb:47:07:94:18:54:ce:97:7f:5b:bd:9d:
be:67:0c:db:f7:da:c5:49:5d:68:fa:52:92:d5:61:4a:8a:83:
c9:95:4a:67:96:e3:28:e4:ec:4f:60:e5:a1:7e:11:c3:f0:e2:
54:20:82:c1:4d:e2:7f:e6:6a:7e:ed:9c:cd:a0:0f:b5:c2:aa:
90:2f:c0:a3:d1:40:c0:e7:d4:75:ce:d9:51:61:6c:fc:18:a9:
e1:82:da:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 11:47:17 2025 by rpki-client