Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/a7027107-6e94-30b6-8510-73e3051693e9.roa
File: a7027107-6e94-30b6-8510-73e3051693e9.roa (raw, json)
Hash identifier: oBXDHhOCrMp26KuLGUpoTNHwJlWj0F+yEONRMOfxh48=
Subject key identifier: 2F:37:49:1C:18:2B:1F:AF:DC:B7:B3:3B:DF:4E:F1:BF:FC:8E:53:6D
Certificate issuer: /CN=f0830a41-5b6e-4cbd-a54b-a3350aa02e0a
Certificate serial: 010D0C9F43285848DEA120545095026BAF0B4180
Authority key identifier: BD:52:9A:21:FD:4F:91:3E:D4:28:17:8E:BC:5B:CC:CF:35:7B:5A:E1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/a7027107-6e94-30b6-8510-73e3051693e9.roa
Signing time: Thu 13 Feb 2025 14:00:50 +0000
ROA not before: Thu 13 Feb 2025 14:00:50 +0000
ROA not after: Wed 14 May 2025 13:00:50 +0000
asID: 209242
IP address blocks: 23.141.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:de:a1:20:54:50:95:02:6b:af:0b:41:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0830a41-5b6e-4cbd-a54b-a3350aa02e0a
Validity
Not Before: Feb 13 14:00:50 2025 GMT
Not After : May 14 13:00:50 2025 GMT
Subject: CN=724da7d9-e16d-4389-bb67-a2b1d3d45361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7e:2a:78:43:49:f3:72:fb:75:c9:7f:35:10:
de:0b:c9:23:af:a8:2e:f8:56:99:a8:e6:88:de:dd:
b4:fb:69:62:db:ca:28:70:29:25:f6:d6:3e:16:49:
dd:ed:5b:29:5c:f9:3e:f8:d9:7d:04:e0:5b:1a:ce:
d4:b1:2d:1e:92:64:c9:3f:bb:43:69:16:98:4d:3b:
95:bc:90:91:a9:6d:96:d8:2a:c5:b0:ce:62:8e:44:
ae:0e:f3:12:2c:cd:8b:83:d4:c3:44:7b:07:8a:1b:
31:f6:e7:1e:de:b6:1f:d4:72:17:54:a5:38:16:9f:
b6:e7:e9:2c:b5:d3:cd:2f:8e:01:85:d2:e8:44:2a:
f1:81:59:89:c2:74:b7:bc:9d:7b:f3:90:43:07:be:
40:b1:53:89:f5:98:ed:ca:6b:4c:98:43:6d:61:d8:
a1:5b:86:78:29:93:27:fd:ee:75:b0:d8:b4:6b:86:
20:63:d9:6b:59:a6:99:46:42:e3:e4:f9:09:23:d0:
3a:c0:73:14:f7:d0:83:d8:3b:f5:c1:e7:d3:a5:f2:
2b:48:e3:6a:2a:05:32:ba:b6:49:e7:8d:d5:03:43:
fa:c0:07:84:65:51:19:55:50:59:16:5d:00:8b:3e:
5a:c9:04:3d:82:ef:7a:4f:e6:14:8b:b0:50:4c:62:
2b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:37:49:1C:18:2B:1F:AF:DC:B7:B3:3B:DF:4E:F1:BF:FC:8E:53:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/a7027107-6e94-30b6-8510-73e3051693e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.crl
X509v3 Authority Key Identifier:
keyid:BD:52:9A:21:FD:4F:91:3E:D4:28:17:8E:BC:5B:CC:CF:35:7B:5A:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.cer
sbgp-ipAddrBlock: critical
IPv4:
23.141.168.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:af:58:36:3a:9c:70:eb:fc:21:6e:91:ab:d7:c4:8b:54:fd:
87:8c:18:83:6f:2a:2b:4c:e9:ac:06:6d:c2:68:a9:09:79:4d:
50:7e:20:e1:66:a4:bd:b5:53:c0:58:93:7b:fe:78:c5:ad:93:
c7:6c:bc:35:6d:b8:87:3b:c5:06:bf:15:8e:ac:f4:48:49:e1:
74:48:53:f8:b4:9c:79:f6:9b:28:58:6e:e0:b5:47:e1:a8:f5:
f5:a7:10:e2:71:5b:ff:61:87:c3:45:7d:4f:a2:93:c2:e7:92:
d7:cc:6f:58:61:f4:f1:7c:c9:f2:de:19:ac:c5:71:78:67:1b:
80:34:9a:43:33:6f:59:3b:45:16:5d:ac:1b:6b:b8:84:57:94:
01:5c:01:49:fe:cf:aa:ef:3b:c0:e1:06:a8:8a:5a:f2:ff:bc:
b3:ec:0e:6e:c9:5c:bf:72:f9:ef:bd:87:b4:fd:ea:20:53:e0:
90:ca:c8:d2:3b:65:8f:0c:e2:34:f0:d8:f9:20:c7:d7:93:24:
a2:d7:a1:ea:95:6a:70:56:94:13:25:f5:5a:ab:41:3a:0f:15:
51:1f:06:31:35:11:57:0a:1b:d3:b3:4c:49:b8:ee:6a:b4:b0:
23:60:74:e6:ff:2a:ff:b5:b3:eb:6a:c2:fa:22:c9:ef:2c:b4:
45:c5:2e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 08:27:57 2025 by rpki-client