Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e24ab8b3-fd8b-3fca-b634-12f206081141.roa
File: e24ab8b3-fd8b-3fca-b634-12f206081141.roa (raw, json)
Hash identifier: Zk1mSArxrZLAvWwkIMqDysoQS0QpoWCDZYK6HCw1JLI=
Subject key identifier: 85:3F:22:48:8C:38:14:82:B6:4F:06:03:F1:E0:4B:A2:CE:DD:7D:08
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858496FAF22C259A7C467CF15DA00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e24ab8b3-fd8b-3fca-b634-12f206081141.roa
Signing time: Sun 06 Apr 2025 13:01:01 +0000
ROA not before: Sun 06 Apr 2025 13:01:01 +0000
ROA not after: Sat 05 Jul 2025 13:01:01 +0000
asID: 397242
IP address blocks: 156.154.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6f:af:22:c2:59:a7:c4:67:cf:15:da:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Apr 6 13:01:01 2025 GMT
Not After : Jul 5 13:01:01 2025 GMT
Subject: CN=9cf219bf-e1c0-4b6e-9726-a14fffb3bff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:af:fa:1a:ae:e8:37:cf:74:dd:a7:90:d9:19:
ea:78:04:54:c9:0a:f1:5e:0f:94:a9:2d:f1:dc:43:
4d:24:ae:cd:fa:b8:d0:03:86:8f:74:c2:a1:59:49:
c5:cd:c1:f4:e5:44:0b:31:be:49:a5:45:02:70:93:
eb:72:09:68:31:85:53:56:df:ed:df:09:f4:23:3f:
c9:1a:d3:82:3e:f7:9c:53:db:78:81:66:46:2c:3e:
50:ac:a5:fa:a7:a8:61:82:08:28:37:8a:e1:60:f7:
65:f3:eb:f6:88:fd:e8:a1:94:e8:8f:8a:48:80:3c:
7e:7c:5d:88:ac:c3:8f:dc:1b:20:d2:54:1a:56:74:
a0:38:5c:11:8c:e2:3a:33:f5:09:39:ea:51:38:ff:
fb:5c:dd:2e:d7:2e:48:a3:9c:bf:73:83:9c:4b:f0:
53:05:91:2a:23:55:47:bd:6b:40:a6:de:c2:73:44:
8a:e5:70:b9:dc:af:d3:2f:7b:20:3e:8d:58:41:14:
3f:d3:22:ca:2b:a5:bb:6c:a2:ad:fd:5b:57:42:de:
0f:c6:7b:8a:88:10:d3:8a:88:b5:36:a1:3c:e0:7d:
e7:97:1a:6c:b7:b1:93:2b:e7:d2:be:5a:d9:1f:61:
66:94:b0:ef:65:27:e8:5d:5b:29:56:99:3b:8f:6b:
9c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:3F:22:48:8C:38:14:82:B6:4F:06:03:F1:E0:4B:A2:CE:DD:7D:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e24ab8b3-fd8b-3fca-b634-12f206081141.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:df:e0:9e:8a:ef:0c:35:b9:f6:8e:f1:ee:a5:7e:ad:f8:3a:
de:a9:ae:24:a1:62:f9:9c:1c:2e:ba:33:bd:bf:2e:ce:f1:60:
7e:e4:9b:c2:37:c8:3a:dd:8f:2b:cc:a9:d7:bf:1f:0a:bd:64:
77:5c:1b:04:92:25:34:af:e6:a5:44:0b:23:41:f7:59:6e:0c:
d4:49:10:51:09:62:d6:e8:8e:63:a8:e1:af:51:46:8e:46:5b:
d4:2b:83:9a:36:85:d8:dc:4e:31:0c:b1:22:c0:c2:50:7a:09:
69:7e:55:e5:2e:88:75:ea:a4:64:8f:37:95:43:07:eb:6f:07:
6a:b2:c8:87:dd:c1:0e:5a:94:2d:cf:b0:0b:25:a8:6a:a1:53:
70:2c:21:07:be:fd:0c:6c:ae:f9:dc:0e:53:bb:1a:94:a0:58:
5d:ee:4c:63:cd:27:4c:31:28:bd:a2:a6:a8:c8:78:12:e5:db:
da:7e:7c:d8:25:9f:6b:48:30:6b:62:4c:d6:ce:db:65:fe:16:
06:87:6f:da:b4:61:a5:ca:51:b6:73:cc:92:e2:7b:4b:71:b3:
83:68:ef:72:1c:00:31:44:c2:46:b4:13:d5:3e:eb:9b:c4:64:
ea:ef:64:07:6e:e0:ea:d5:02:65:b3:34:94:65:56:a5:11:c3:
cf:25:af:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:45:50 2025 by rpki-client