Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/8e7b5787-48fe-38de-a161-771a37574b62.roa
File: 8e7b5787-48fe-38de-a161-771a37574b62.roa (raw, json)
Hash identifier: zNI+rJE2aqZhZePPwkjWsRX2aPWWUFRNg7lSfZZ9T78=
Subject key identifier: 7C:C5:F7:24:0B:42:C0:E1:3E:E0:05:3B:6C:27:92:25:A4:B6:5D:D3
Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial: 010D0C9F4328584902EBF654CD7D5327B380A700
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/8e7b5787-48fe-38de-a161-771a37574b62.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 132819
IP address blocks: 205.177.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 09 Apr 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:eb:f6:54:cd:7d:53:27:b3:80:a7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=e2f5f906-8744-4c01-a17c-1604baa91cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ec:18:27:66:ca:62:70:96:da:e9:8b:7b:41:
f3:bc:bd:9d:4b:0f:f9:02:86:e8:c1:67:1a:24:6c:
b6:f1:8b:e1:d1:6e:87:94:ab:94:fa:4b:3c:6a:8a:
f4:dc:50:a4:81:c8:5d:76:86:7d:ca:83:e9:6a:94:
fd:cb:58:f7:eb:1f:59:d8:89:5c:26:41:f4:de:a5:
d9:74:1c:e1:be:fa:c4:5a:17:de:9a:88:38:90:cd:
5c:58:6d:4f:be:3e:f1:b7:04:92:3d:48:11:95:8f:
55:95:88:0d:46:fb:0b:6d:8e:70:e2:0c:ae:24:ad:
57:09:84:5f:72:ce:d9:04:92:d6:5d:3d:cf:19:b8:
5d:c1:cf:4c:38:e4:03:33:7d:4d:d1:fe:be:79:95:
cc:24:b6:4b:f3:de:15:ca:8d:c0:72:22:8e:13:e5:
69:88:b1:47:d8:ac:16:76:35:6b:cd:a9:55:b1:9a:
15:c4:91:16:7a:3a:8f:c6:d3:1e:67:7f:c4:61:f2:
00:cf:85:90:9a:b5:b3:1f:98:b8:28:3c:7f:84:91:
b9:36:7b:1a:08:70:c7:59:a7:fb:e4:4c:74:4a:fd:
8c:b9:32:6c:7e:c0:28:85:e5:03:6f:ac:6a:a2:f0:
d5:4c:89:1c:c7:c7:d0:c9:76:b2:93:d0:41:9e:77:
d3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:C5:F7:24:0B:42:C0:E1:3E:E0:05:3B:6C:27:92:25:A4:B6:5D:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/8e7b5787-48fe-38de-a161-771a37574b62.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
X509v3 Authority Key Identifier:
keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
sbgp-ipAddrBlock: critical
IPv4:
205.177.214.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:fe:9a:18:1f:23:2a:e5:2a:55:7c:10:4f:93:99:cb:62:d5:
18:76:57:94:bc:b4:f7:f0:bc:8b:9f:8b:1d:a1:53:0c:92:1b:
d2:d3:9d:43:dd:9b:30:28:b4:95:48:6b:f4:05:30:9b:80:af:
41:e3:1f:32:2c:9a:3b:e3:00:00:d6:df:2f:d6:79:a3:95:41:
16:9f:31:9d:02:0b:4d:32:b2:a7:05:7a:da:0d:37:f3:35:9d:
4b:35:5a:77:94:34:b0:71:28:92:10:9f:27:e2:00:1e:0f:3a:
af:3b:db:03:96:1c:61:77:1c:4b:fe:0a:b6:dd:67:bf:91:e0:
fc:58:bb:b6:ec:9e:48:f3:0c:4c:09:c7:f0:88:23:2b:ad:0e:
f8:0c:99:5f:e6:8f:13:25:80:58:d9:de:31:bb:4b:38:07:42:
c9:a5:f0:17:5c:c0:4e:0b:1f:aa:0c:a2:ff:1e:d5:0e:c8:cc:
93:33:d0:c3:8b:c2:41:72:58:44:b6:30:c0:ee:c1:4d:ee:99:
72:4d:3e:a7:1a:21:d6:88:57:bb:15:09:bb:cf:33:be:ca:05:
d7:7b:71:6f:e6:8f:e1:09:01:02:17:e5:d1:9d:e4:84:f8:2d:
2c:55:9b:62:e0:04:4b:0f:be:60:fd:4c:af:70:9a:44:aa:a0:
9b:5c:9a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:28:49 2025 by rpki-client