Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/dd261199-356b-307b-8c42-eac053b036ac.roa
File: dd261199-356b-307b-8c42-eac053b036ac.roa (raw, json)
Hash identifier: WE4/7rYWnoRu2+AHdQq9uZDU2gq0Jt0QhVNw9OmE9Ko=
Subject key identifier: A1:CD:40:C8:EF:ED:C4:15:26:A8:6E:5D:6F:D4:9B:A6:66:6A:83:BF
Certificate issuer: /CN=e286fd28-0939-48b9-86ba-cbe791497d15
Certificate serial: 010D0C9F43285848EF61605ECF7C1F1456858E40
Authority key identifier: 1A:A4:9C:18:83:7A:8A:F6:9B:C9:28:DF:33:44:30:F2:DD:71:0E:9C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/dd261199-356b-307b-8c42-eac053b036ac.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 16509
IP address blocks: 142.202.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/e286fd28-0939-48b9-86ba-cbe791497d15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/e286fd28-0939-48b9-86ba-cbe791497d15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:60:5e:cf:7c:1f:14:56:85:8e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e286fd28-0939-48b9-86ba-cbe791497d15
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=9c12fc89-5e2c-47b6-94b2-b41b23503c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:55:a0:b9:f5:52:6b:46:80:68:d6:f7:99:5b:
f7:8e:5a:d8:cd:0d:90:ba:a9:10:c7:9c:60:8e:54:
c9:07:ab:cc:50:0b:0f:d4:3d:01:92:ae:d6:ce:c4:
82:ea:ec:d9:85:46:6f:22:04:9e:7f:13:65:6e:77:
60:76:17:e0:b9:25:4b:d1:9c:ec:21:a5:75:9b:f0:
fe:05:43:b4:90:7e:0f:8b:2b:55:4c:9b:56:40:8d:
21:ce:8a:2b:f9:f7:9c:b7:5c:04:c0:1f:fe:ed:da:
df:40:b2:19:25:b0:7c:25:f9:bf:2b:99:41:fa:76:
15:9b:b6:cc:3b:a7:7d:ef:e8:ca:88:2f:ee:eb:80:
10:35:ac:fb:0b:44:ce:f9:38:03:87:85:d8:23:5a:
6b:91:01:f9:10:00:bd:1c:13:fb:69:53:50:da:28:
12:89:16:d1:0a:93:a8:7c:1a:02:a8:3c:ff:2c:09:
6a:8d:e8:ad:19:a7:04:99:b3:93:a8:7c:e0:6e:ed:
8d:7a:c7:b8:64:e4:e4:4c:2b:13:4a:28:ee:73:bc:
6a:0c:9a:98:67:af:5e:33:36:bc:13:25:15:7f:b3:
8d:7f:59:03:84:db:94:69:a1:1b:3b:46:7c:80:9d:
b5:53:1d:34:f6:79:31:7c:06:7e:10:e4:f0:c2:44:
da:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:CD:40:C8:EF:ED:C4:15:26:A8:6E:5D:6F:D4:9B:A6:66:6A:83:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/dd261199-356b-307b-8c42-eac053b036ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/e286fd28-0939-48b9-86ba-cbe791497d15.crl
X509v3 Authority Key Identifier:
keyid:1A:A4:9C:18:83:7A:8A:F6:9B:C9:28:DF:33:44:30:F2:DD:71:0E:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15.cer
sbgp-ipAddrBlock: critical
IPv4:
142.202.204.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:da:55:48:45:68:53:4d:2d:fe:8e:94:56:94:3d:ec:9a:97:
71:61:3b:8d:02:ae:4d:fe:4a:71:62:09:78:e2:a5:d3:14:fd:
64:9b:22:af:b5:0d:52:a0:4a:4b:26:c4:fe:c4:52:70:96:56:
12:87:ff:b0:d4:14:ad:c5:2e:fc:8f:80:a8:89:c5:27:9c:58:
02:b9:e5:22:89:4e:05:8e:80:f2:77:fa:a1:ca:a0:cf:43:9a:
4c:ed:76:83:89:70:ef:17:3e:21:85:dc:62:46:67:a6:87:ed:
6b:2e:bd:f6:26:92:40:be:33:f8:45:9a:1c:9c:47:14:52:bc:
b3:cd:de:1e:69:63:fd:82:47:4b:00:29:69:6b:4f:e6:31:a6:
77:0f:30:68:96:5a:52:c0:62:8f:bd:3d:a9:dd:21:01:93:b8:
12:87:37:d0:0b:a1:59:a3:66:a0:54:9e:14:ad:44:24:b6:18:
23:4c:13:21:a2:4e:af:34:78:73:bf:f6:7c:96:63:a7:5e:8f:
89:3b:a5:49:a5:58:54:5b:4c:4d:2b:4b:f6:98:4f:94:a2:68:
93:2e:11:97:de:2b:63:2b:2e:1b:6f:b0:0b:bf:13:38:68:79:
89:3b:7f:79:d3:2f:e7:92:17:46:e1:1e:11:02:14:fd:d5:e6:
2a:08:97:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 08:28:22 2025 by rpki-client