Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1f99f127-fa9c-3eff-956b-c87acddd57bc.roa
File: 1f99f127-fa9c-3eff-956b-c87acddd57bc.roa (raw, json)
Hash identifier: Y4/HK7f4su9IsbZUWCsmuVkv/W5wxOeRfvrhy9ov5+Y=
Subject key identifier: AD:29:3F:C0:13:83:7F:DC:C2:21:C1:C2:12:E4:0F:2E:30:65:AE:BE
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F432858493243D3DE72AEEDFB8CCD3E80
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1f99f127-fa9c-3eff-956b-c87acddd57bc.roa
Signing time: Sat 15 Mar 2025 13:00:52 +0000
ROA not before: Sat 15 Mar 2025 13:00:52 +0000
ROA not after: Fri 13 Jun 2025 13:00:52 +0000
asID: 8987
IP address blocks: 130.137.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 09 Apr 2025 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:32:43:d3:de:72:ae:ed:fb:8c:cd:3e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Mar 15 13:00:52 2025 GMT
Not After : Jun 13 13:00:52 2025 GMT
Subject: CN=4159551e-7fc9-4499-ad7c-5d1a193ac2f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7e:18:b4:76:e8:84:82:76:39:33:71:f0:2a:
8e:75:08:06:1a:ee:14:33:e6:5a:d8:5d:cf:06:aa:
fb:9b:24:a7:65:c2:1c:d9:5d:92:7c:86:ff:6b:5a:
a0:9b:78:a1:a5:e9:ac:74:40:13:61:13:44:02:43:
58:a8:59:55:e2:93:11:bf:1e:6b:08:d5:96:16:80:
44:f4:7a:45:ff:f2:e4:a0:e6:1c:7e:be:10:8e:22:
bb:a0:e7:fc:f2:9d:8a:67:10:d2:9a:68:d1:5a:4b:
05:52:58:43:a2:24:5f:f9:f6:78:4f:40:9e:55:fb:
ef:68:23:f5:cc:19:2b:3c:e0:69:84:d4:34:ae:2b:
d3:ef:fc:a7:ed:70:38:cb:ef:e2:ae:d1:90:7c:a8:
f2:ef:24:43:65:ba:de:b1:47:67:09:e6:a8:f4:3b:
14:9a:88:f9:2b:0e:62:86:31:d0:44:56:c5:13:6b:
2d:7e:37:5b:95:6c:a5:e7:e0:6d:c8:5b:8b:3b:b0:
23:ef:2a:e1:50:5e:7e:dd:6d:4e:6e:bf:07:ce:fd:
fd:9b:bf:95:27:34:cc:05:5d:e2:20:c0:d2:35:77:
ea:d6:8d:d0:de:03:0f:43:ea:6f:fa:64:f1:f7:65:
3f:b3:da:32:0c:b1:0d:35:b6:b2:ed:93:95:b6:93:
9a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:29:3F:C0:13:83:7F:DC:C2:21:C1:C2:12:E4:0F:2E:30:65:AE:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1f99f127-fa9c-3eff-956b-c87acddd57bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.205.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:f0:15:81:4e:4d:b7:1d:26:78:80:f2:46:af:b3:f0:6f:58:
6a:ec:04:bc:e1:70:12:bd:63:f3:0c:64:42:1d:35:99:dc:ba:
5b:82:a9:90:f5:fb:65:7d:79:d4:79:ae:a6:94:bc:1c:72:1f:
c5:3d:1d:9b:9b:a3:69:d9:29:af:3c:a0:d7:f5:93:ec:17:1d:
d1:d8:e0:6a:28:d1:48:b8:66:a7:35:1b:a9:9c:7c:ef:0b:43:
c9:02:58:48:05:d0:58:4c:d3:d4:67:da:ab:3b:e8:3c:11:cd:
c2:a0:73:59:61:59:37:38:ec:4e:f2:aa:f6:06:04:a8:c9:d2:
7b:d4:db:34:b6:3c:c8:16:ee:2f:6f:2b:07:86:ee:b1:94:3d:
56:82:77:62:92:11:1e:e0:40:e5:51:29:70:a9:a1:28:22:51:
ef:b9:1e:fe:0b:74:01:5b:ca:93:f4:18:29:32:92:9e:d6:1e:
6e:f4:ed:00:33:60:ce:b4:ae:41:d9:a9:1c:0e:12:96:f6:70:
05:a8:c0:7f:c6:99:73:89:4a:98:9e:60:33:d2:11:e2:15:f4:
fd:6e:16:6d:e7:25:c3:87:53:17:fd:82:78:8b:aa:37:32:34:
54:91:84:63:19:ad:eb:84:7c:53:9f:28:3e:d2:36:56:62:ed:
67:ad:77:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:36:05 2025 by rpki-client