Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e9c507f9-7008-39a5-9078-122e5b8624be.roa
File: e9c507f9-7008-39a5-9078-122e5b8624be.roa (raw, json)
Hash identifier: forBf+kD4GI5ZfxAikU+qakTdQZDQ/gABjdL6EHWjsM=
Subject key identifier: 2A:5D:95:91:14:E1:A1:A2:32:61:B4:37:4B:0A:7A:56:0F:2B:06:2E
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848A9964C74D6B202830B9AA980
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e9c507f9-7008-39a5-9078-122e5b8624be.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 397219
IP address blocks: 156.154.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:4c:74:d6:b2:02:83:0b:9a:a9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=f94694cd-9173-40ab-a25c-25f98b655215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d5:54:57:de:5c:69:2f:ee:14:fa:00:f3:36:
98:a9:d2:ee:25:38:ad:59:1e:25:ca:c9:b7:84:8a:
a2:8a:6b:4b:e1:36:27:18:d5:f5:91:76:66:24:9c:
26:bb:b4:43:9e:f6:22:c1:24:ef:15:4e:b7:ef:52:
1b:ef:a9:ab:10:2c:a6:5c:d1:99:e9:75:62:17:16:
04:25:51:54:29:76:4a:9f:02:ff:5b:c5:9a:63:f0:
53:e6:06:a1:19:f8:53:f0:73:d2:e0:4c:f5:9b:b3:
15:58:d5:63:7c:27:b6:6d:40:d3:78:25:f4:2b:48:
31:a3:ba:b5:d3:48:56:a4:58:53:05:e5:0c:59:d1:
07:52:25:23:4f:68:08:37:d5:d4:87:b2:d5:58:d6:
61:39:7c:d5:9c:25:8f:bc:53:5c:61:93:87:5d:26:
71:2a:8d:71:ec:ca:eb:10:13:76:72:ef:09:8c:c8:
a2:11:03:23:3a:01:7f:4c:fa:01:c6:46:ec:8e:1c:
e6:c8:8e:1c:ce:c8:19:73:fe:bc:56:86:b2:37:ce:
1b:8a:87:ad:24:27:ed:99:16:cf:c6:48:86:47:5b:
33:2c:0a:5e:b6:08:e8:63:dd:76:4b:29:a6:fd:55:
80:53:b2:5b:ca:27:b2:83:5b:4b:1f:fc:9a:53:f9:
41:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:5D:95:91:14:E1:A1:A2:32:61:B4:37:4B:0A:7A:56:0F:2B:06:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e9c507f9-7008-39a5-9078-122e5b8624be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.65.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:8c:0f:0f:61:ed:00:06:1c:19:b6:35:be:8f:54:73:af:8f:
70:f2:81:ef:f6:89:67:8a:0f:82:cb:3b:74:4d:8d:9c:cc:e1:
24:eb:cd:a1:96:40:b4:22:1d:3c:ca:c5:05:96:75:42:4e:2f:
f1:16:c9:00:91:d0:dd:2c:b6:87:06:08:e5:73:37:8d:da:e3:
f3:89:59:2e:b4:f0:ee:25:db:1f:69:ec:52:e1:dc:6e:87:15:
89:3c:ff:6e:22:72:9b:77:37:78:33:26:f4:fb:c3:06:d1:bf:
f6:6e:cb:a2:5d:51:20:d1:d8:53:b1:35:55:6a:7c:b3:3d:81:
b8:fe:07:57:69:68:6c:66:4d:db:af:a9:4f:67:0d:1a:dd:61:
30:f4:53:57:dd:59:bd:3f:17:70:27:b4:5c:f1:fc:ad:71:51:
cf:f7:fc:f8:26:58:a4:4d:f3:5b:fd:4b:98:a7:13:28:d3:ac:
cc:07:d7:af:20:9c:8d:94:40:7b:8e:6a:1b:08:28:04:9b:40:
33:ef:92:64:ba:8f:ba:75:57:eb:06:7c:2a:98:e6:3f:a1:fb:
c8:13:4e:52:76:6b:67:cc:91:aa:91:4e:0b:74:77:21:e6:e7:
15:22:15:f6:50:83:65:cb:9d:3d:ba:44:b3:e7:c2:da:88:b0:
8b:ef:30:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 22:04:20 2025 by rpki-client