Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/2dbef95c-c607-3c9a-a265-4a14cc6c3fe5.roa
File: 2dbef95c-c607-3c9a-a265-4a14cc6c3fe5.roa (raw, json)
Hash identifier: boL3eBuc0b72m+GDtHB7dSQgmksv+6ekzoQQGE/XvNM=
Subject key identifier: 67:D8:C0:E8:99:36:C9:8A:E9:01:05:4D:B7:28:CC:F1:2A:73:4C:C9
Certificate issuer: /CN=b02b2a27-63d2-435f-8114-d98e289edc6c
Certificate serial: 010D0C9F43285848FD569B9D898667E6E9018680
Authority key identifier: 68:FD:10:A9:76:FA:09:AC:44:0A:CF:EB:95:4C:B2:32:BF:35:91:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/2dbef95c-c607-3c9a-a265-4a14cc6c3fe5.roa
Signing time: Mon 24 Feb 2025 14:00:52 +0000
ROA not before: Mon 24 Feb 2025 14:00:52 +0000
ROA not after: Sun 25 May 2025 13:00:52 +0000
asID: 16509
IP address blocks: 208.71.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b02b2a27-63d2-435f-8114-d98e289edc6c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b02b2a27-63d2-435f-8114-d98e289edc6c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 09 Apr 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:56:9b:9d:89:86:67:e6:e9:01:86:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b02b2a27-63d2-435f-8114-d98e289edc6c
Validity
Not Before: Feb 24 14:00:52 2025 GMT
Not After : May 25 13:00:52 2025 GMT
Subject: CN=137e7e96-29b1-49db-a556-46b30e15c02a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ea:fc:b6:81:9e:1b:ee:ea:d4:80:9a:88:5e:
f7:c0:10:68:89:d6:f7:81:3c:89:77:fb:a3:85:28:
46:24:4e:fd:23:70:ba:cf:f0:f3:98:ec:ca:69:44:
51:f0:31:2f:af:d4:e2:f8:92:70:75:02:68:0f:e6:
c1:63:85:30:96:94:b7:8b:c4:a2:73:78:0a:ae:c8:
67:d6:e7:1d:7f:9f:2e:d6:2b:be:d4:20:89:13:9f:
e2:0e:03:5f:c8:a2:20:27:c0:83:c5:80:e1:e7:c7:
8e:58:fb:47:bc:86:63:0d:a5:47:54:52:b0:bd:41:
55:f4:42:b1:f3:b2:ad:33:3f:ba:94:93:e5:ab:c6:
67:66:66:8c:35:14:b9:7b:28:8c:df:e7:f9:8f:28:
49:ad:94:d1:b4:98:8b:11:73:e4:0c:6c:8e:ef:56:
5e:18:fc:cf:3f:a5:e5:99:32:40:01:44:cb:dc:b9:
8f:fc:d0:ff:4d:02:bf:1e:d4:d0:b0:f2:87:2b:c8:
81:ff:3c:ba:9a:2e:d6:3d:83:77:fb:5c:a1:e7:09:
60:e5:db:8f:f1:97:b3:24:40:c5:b6:55:de:25:3e:
bf:c2:91:8b:08:3f:f1:c3:2b:07:00:0f:5b:b8:f6:
d8:59:22:63:17:7c:15:47:a5:29:75:09:29:55:68:
8f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D8:C0:E8:99:36:C9:8A:E9:01:05:4D:B7:28:CC:F1:2A:73:4C:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/2dbef95c-c607-3c9a-a265-4a14cc6c3fe5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b02b2a27-63d2-435f-8114-d98e289edc6c.crl
X509v3 Authority Key Identifier:
keyid:68:FD:10:A9:76:FA:09:AC:44:0A:CF:EB:95:4C:B2:32:BF:35:91:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer
sbgp-ipAddrBlock: critical
IPv4:
208.71.208.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:1b:6c:e1:6f:94:73:84:35:fe:92:e9:8a:df:8e:c7:3f:1c:
f0:87:9a:cc:2a:59:84:f6:40:8f:c8:f0:6e:9b:60:50:2d:9f:
64:8a:7f:e2:c2:83:47:9a:db:b6:09:94:d3:8c:8e:f8:a2:e8:
b9:86:66:47:0c:05:99:0f:ec:24:a4:ba:3a:19:06:fb:d0:6a:
29:1e:16:eb:1a:ac:7b:9b:85:1a:07:55:5e:d9:d5:64:54:29:
2a:68:9d:09:65:09:86:5c:c7:b4:b6:8a:13:f1:ec:49:4b:2f:
a7:bc:23:65:62:a7:67:f5:b5:a4:60:55:0e:2c:a0:bb:19:3d:
dd:eb:63:ed:bc:b6:7f:18:47:d3:65:9f:00:6e:ea:79:77:3a:
4d:8e:92:0d:88:ee:27:9e:15:0a:1b:6c:d3:39:3f:5c:01:a6:
1d:c9:7d:c9:c9:6d:c3:de:f5:54:d7:c1:5a:f7:7d:a2:43:85:
a2:43:02:11:d5:e1:78:d3:00:7a:dc:ac:e7:be:6c:7a:75:0b:
9a:7d:e1:39:f2:12:ed:f0:15:bf:81:f9:5e:ff:dc:f1:89:90:
a3:92:bc:5d:86:f7:b6:d7:9a:e2:e9:ab:ed:92:24:d9:6d:76:
b4:0b:bf:f9:de:2a:86:62:9d:64:77:22:2c:39:55:b4:e9:95:
23:63:21:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:28:49 2025 by rpki-client