Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/64b2fb2a-a043-3594-bcf7-ae49c664733c.roa
File: 64b2fb2a-a043-3594-bcf7-ae49c664733c.roa (raw, json)
Hash identifier: F0yvwgFnMJHy/FSmcX5qWn6ktiTs1dkFWctOVDAziHE=
Subject key identifier: DD:9D:94:A7:8E:20:2C:F8:4C:81:36:6D:52:B1:DD:C6:5D:57:34:8E
Certificate issuer: /CN=78ffdd14-7e7a-46d4-993a-4b51f8031030
Certificate serial: 010D0C9F43285848F54CF59FE67266D9F1F64640
Authority key identifier: FD:0B:B3:86:00:15:86:0D:7D:0A:2F:1B:5B:33:97:97:B9:95:4E:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/64b2fb2a-a043-3594-bcf7-ae49c664733c.roa
Signing time: Fri 21 Feb 2025 16:55:00 +0000
ROA not before: Fri 21 Feb 2025 16:55:00 +0000
ROA not after: Thu 22 May 2025 15:55:00 +0000
asID: 16509
IP address blocks: 165.140.58.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/78ffdd14-7e7a-46d4-993a-4b51f8031030.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/78ffdd14-7e7a-46d4-993a-4b51f8031030.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f5:4c:f5:9f:e6:72:66:d9:f1:f6:46:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78ffdd14-7e7a-46d4-993a-4b51f8031030
Validity
Not Before: Feb 21 16:55:00 2025 GMT
Not After : May 22 15:55:00 2025 GMT
Subject: CN=130842b7-2f26-42b8-996f-5ddfc7a11768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:59:54:b6:a1:33:9d:a1:81:30:bb:ad:9e:39:
8c:0e:75:02:04:9d:e7:9a:99:48:26:e0:83:a0:fe:
be:f4:c5:ab:07:c6:32:61:00:57:86:2b:f1:b7:a7:
e1:18:81:89:c5:a8:89:88:d6:9b:11:20:ad:57:4b:
7b:1c:e9:df:6d:17:6d:4d:54:7c:fc:d0:55:f9:f0:
51:f4:7c:82:47:1e:9c:f8:0b:5b:19:f2:f2:10:fb:
3b:1b:74:89:1f:63:78:ea:d2:87:a8:ab:e3:3c:ca:
b4:e1:04:76:e1:b2:fb:93:5a:60:5a:83:a5:fb:d0:
e0:2c:92:e5:90:e7:e9:44:90:04:b4:05:15:e0:1e:
1b:29:37:2b:a9:c2:4b:05:5e:54:4e:f8:78:86:dc:
3d:ba:77:70:d0:c3:a6:3a:27:7d:49:d3:50:88:6d:
b2:48:ca:61:c2:e1:0c:97:0f:93:26:8f:6e:84:2b:
1f:f6:28:18:fc:f5:b3:df:30:29:f1:4f:3b:87:ee:
18:a2:f2:c5:cc:f8:71:b5:18:ea:07:99:74:e7:ac:
7c:dd:18:2c:8c:5d:a2:b1:b0:ea:50:46:5b:91:47:
c2:f1:fa:ff:0d:3a:b4:53:8d:5d:1c:a5:7a:30:31:
32:a0:2e:4e:2d:97:0c:ef:ff:3a:72:d0:41:fb:ee:
40:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:9D:94:A7:8E:20:2C:F8:4C:81:36:6D:52:B1:DD:C6:5D:57:34:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/64b2fb2a-a043-3594-bcf7-ae49c664733c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/78ffdd14-7e7a-46d4-993a-4b51f8031030.crl
X509v3 Authority Key Identifier:
keyid:FD:0B:B3:86:00:15:86:0D:7D:0A:2F:1B:5B:33:97:97:B9:95:4E:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.58.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:e5:6b:7f:fe:14:00:35:9e:3c:7b:94:b1:d6:e5:df:30:92:
21:d6:fb:bb:83:d9:93:44:76:00:6f:b3:f9:2e:4c:8a:e2:55:
b1:e6:cb:0d:e7:7f:c3:e7:f5:d2:00:d0:57:81:5d:0c:04:c2:
58:c5:4c:cd:88:49:0f:31:78:f9:59:e9:31:d0:51:ca:f5:fa:
f0:47:c0:ce:fc:a9:7b:32:c3:ba:f3:0f:25:73:fe:7b:9e:75:
5a:96:c1:5e:e2:53:f4:b4:fa:0e:cd:49:31:13:97:79:30:80:
d9:41:17:92:91:59:f9:ad:0d:3c:f7:07:6f:e2:94:c5:ae:ca:
3b:26:de:a7:da:28:63:d3:02:fc:9f:46:ec:86:6d:d4:8e:ec:
35:b3:a2:e9:7f:aa:84:ba:c4:5e:cd:51:f2:07:54:06:b7:c2:
0c:7e:f6:6c:f6:42:4b:1d:24:4a:3c:01:ba:12:77:68:61:36:
02:ad:35:df:62:a1:a4:6e:2c:b0:14:ef:fd:5f:7a:f7:f5:e7:
4c:94:0f:e6:1a:87:b6:08:df:cb:f4:d6:c0:74:ac:ce:90:76:
56:f0:d9:2f:3a:ac:10:46:a0:7c:cb:fe:21:26:78:22:4e:ea:
40:e3:62:37:b3:6d:fd:b9:e8:9e:88:9c:c3:3e:1e:49:d8:0f:
19:26:fd:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:29:01 2025 by rpki-client