Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fa782e23-6f23-364d-a991-e124d0e95e13.roa
File: fa782e23-6f23-364d-a991-e124d0e95e13.roa (raw, json)
Hash identifier: +TDDUMJ4oWWgykcI9JPKvEXJdAO5/HFGDwEEsy3M02w=
Subject key identifier: A2:56:60:8E:C4:77:E1:00:34:59:97:59:6E:91:A8:3C:66:2C:EE:7D
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848A9965C876214E028AC91FEC0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fa782e23-6f23-364d-a991-e124d0e95e13.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 397222
IP address blocks: 156.154.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:5c:87:62:14:e0:28:ac:91:fe:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=fe27ef0f-37c7-4e42-9bd4-c91fa5c047d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:79:8c:60:e1:fd:6b:4a:5e:04:a4:a6:7c:1d:
0f:8c:3c:72:b8:9a:f5:e4:d2:92:a7:35:b3:b7:2c:
f6:17:e3:e4:cf:fe:dc:32:e1:fc:8e:ac:7d:5b:00:
3d:08:3d:19:15:b8:a4:d1:73:6d:51:93:37:6b:99:
7b:73:40:b2:3c:30:6a:b4:cc:ae:d9:4b:1b:9f:7b:
12:b7:c3:8e:a4:81:2b:9e:09:75:3c:0f:38:cf:a7:
1c:4b:09:62:bd:cc:78:1b:b9:92:3c:a4:cb:c8:eb:
6b:e2:03:13:f8:d8:98:84:67:e4:b5:34:f6:c9:f4:
dc:b2:75:43:0d:c8:cc:c0:06:51:53:09:2f:d9:b1:
57:c6:06:ef:a0:10:20:fa:11:56:8f:5f:c2:38:87:
4b:41:ad:54:ea:ea:13:35:e4:09:ed:a7:81:92:de:
6c:37:60:1b:42:6a:38:c1:d2:04:61:80:4b:18:48:
6e:47:f4:b4:c3:86:b0:09:a6:e2:3a:28:d1:9d:fe:
e9:da:a3:01:c5:c4:dd:f3:8c:56:d9:65:c7:6a:4c:
82:90:2e:0c:91:d4:47:1e:07:dc:cd:32:c2:c4:d6:
a1:b9:94:68:e0:95:2c:4d:bd:cf:5d:f3:a6:83:03:
d8:00:de:10:ae:12:6b:39:22:b3:53:98:6e:ac:66:
98:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:56:60:8E:C4:77:E1:00:34:59:97:59:6E:91:A8:3C:66:2C:EE:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fa782e23-6f23-364d-a991-e124d0e95e13.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.171.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:8a:e4:f3:d4:2c:78:4f:d6:1c:0e:76:0d:f3:ff:c2:5d:2d:
58:14:a7:fa:af:35:d2:20:7d:80:72:9c:61:02:53:f9:6b:e0:
dc:38:1e:a7:a1:cd:ca:25:7e:50:bd:d9:5a:69:c8:53:50:e8:
c4:a3:6b:4a:b0:8d:f2:fa:03:d1:c8:24:df:3f:d6:50:ab:e3:
a9:be:e9:3b:53:db:4c:f4:f2:42:67:8f:ff:76:54:e4:b1:0b:
37:f9:69:3d:b3:3d:8b:cd:e6:6e:c6:68:0d:be:de:08:69:92:
3a:5c:fc:2b:4f:82:17:c5:88:b5:27:76:ea:24:a4:eb:d9:05:
9f:98:1f:a0:a2:55:02:dc:5b:02:5f:3a:b0:6d:71:52:5d:d4:
d7:6b:c7:b4:83:3e:ba:72:c0:a8:f1:15:cd:75:fc:00:86:b8:
76:25:b1:08:25:a7:a1:63:a9:ae:b6:f4:1d:30:e1:c3:6f:ef:
31:0e:b0:42:26:af:6d:9c:8f:a4:c0:27:23:4f:36:dd:cd:f9:
29:a1:f7:18:42:10:99:e7:fd:bd:b3:f9:8d:b9:a4:c2:1a:29:
ae:c6:06:98:8d:91:29:d6:e0:c2:3b:73:be:af:98:ba:9b:10:
57:66:6e:90:22:cb:bd:49:b4:ce:68:a9:02:ae:3b:2a:8a:73:
9b:df:9b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:01:28 2025 by rpki-client