Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074/10c0c4bf-39f2-3de1-87c7-61e3ec92176a.roa
File: 10c0c4bf-39f2-3de1-87c7-61e3ec92176a.roa (raw, json)
Hash identifier: h8xas0t7VnhUouwpyYS4mSdm9MV9M1qLmCWPBgZYItg=
Subject key identifier: 22:90:7C:A0:65:E3:7C:D5:BA:2B:BF:26:F5:C2:74:87:30:9F:67:64
Certificate issuer: /CN=1cef5c7c-f81f-4afe-a833-6ad9053c4074
Certificate serial: 010D0C9F43285848A9961B6A51172D295EF02A00
Authority key identifier: 31:71:4F:AA:2B:76:A2:15:A0:6C:E2:FB:75:AB:5A:57:73:73:3E:1A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074/10c0c4bf-39f2-3de1-87c7-61e3ec92176a.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 18628
IP address blocks: 208.112.128.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074/1cef5c7c-f81f-4afe-a833-6ad9053c4074.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074/1cef5c7c-f81f-4afe-a833-6ad9053c4074.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:1b:6a:51:17:2d:29:5e:f0:2a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cef5c7c-f81f-4afe-a833-6ad9053c4074
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=d07ef521-5d0a-4601-9cf7-975cee725fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:18:05:c7:81:ea:8c:ea:7d:e3:75:d9:99:1c:
db:eb:f4:eb:6e:fa:72:ed:d9:c1:0d:5e:a5:8f:26:
c4:db:8d:af:83:80:47:35:e8:49:07:5a:31:58:fd:
eb:81:ee:b8:a0:3d:d6:84:66:45:99:ae:8b:d0:75:
c3:29:9c:5b:81:57:2e:82:43:b8:17:2f:18:68:bb:
9b:77:f9:a0:58:ff:e0:4e:d2:5e:2d:ec:d8:63:a0:
5b:be:03:1f:c0:c0:e0:75:4f:62:2f:b0:36:c1:e7:
41:1d:5f:03:b5:28:c9:95:9b:f3:19:b8:dc:bc:7e:
e6:43:5c:29:30:15:88:0b:e3:6f:67:cc:ed:ee:ed:
bd:26:9a:1a:af:eb:7c:08:74:ac:bc:07:52:39:a6:
7f:72:a3:e0:dd:39:c5:e5:ac:61:fe:4c:70:d8:a6:
9c:d5:cc:82:41:cf:96:c9:c5:fe:72:8b:23:d0:74:
db:69:f4:ff:5f:51:d7:d5:e5:f2:2c:fd:7f:b0:5e:
f8:62:ff:06:6b:66:ca:e5:7b:14:9f:46:0a:8c:3b:
1f:33:77:56:34:8b:23:ff:1b:4a:c9:78:7c:04:40:
b5:96:e9:f5:96:dd:23:10:53:34:24:70:58:d3:8e:
98:20:04:c6:c5:04:ec:f1:bd:75:d7:af:71:c5:4d:
b7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:90:7C:A0:65:E3:7C:D5:BA:2B:BF:26:F5:C2:74:87:30:9F:67:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074/10c0c4bf-39f2-3de1-87c7-61e3ec92176a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074/1cef5c7c-f81f-4afe-a833-6ad9053c4074.crl
X509v3 Authority Key Identifier:
keyid:31:71:4F:AA:2B:76:A2:15:A0:6C:E2:FB:75:AB:5A:57:73:73:3E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074.cer
sbgp-ipAddrBlock: critical
IPv4:
208.112.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:fb:9b:99:16:8c:14:91:d9:15:89:d2:78:a6:27:97:9e:ba:
2d:a5:7f:1b:d9:65:bc:53:a4:4b:f4:e8:32:61:9e:4d:20:ee:
0d:06:9e:c0:49:dd:44:67:c4:b0:f6:45:19:2a:3f:cf:d4:f7:
eb:0b:db:cd:61:c4:a9:7a:39:c6:80:c4:1c:33:e1:8e:35:31:
8d:5f:96:7c:d5:18:6e:dc:86:51:01:d8:b2:80:f6:a4:cd:6f:
ae:83:cc:b3:83:e7:3f:a9:9f:88:a7:4c:43:e0:5f:53:8e:31:
62:40:3a:f2:e9:78:54:dc:55:73:b8:9c:49:3d:11:a9:ae:d3:
91:b1:fd:74:80:c0:91:36:98:ab:1e:0e:60:3a:8d:82:87:5b:
f9:7f:3c:fe:21:eb:c6:cc:57:5f:22:51:c2:88:c0:ea:62:53:
1d:82:09:db:74:3c:a6:22:96:3a:a9:84:ca:ac:2c:b5:39:d0:
9f:34:57:65:d6:71:41:b6:65:02:9c:e4:79:34:53:44:67:63:
40:c1:f5:09:11:b3:4a:f6:2f:a3:f3:67:12:db:9b:b7:a3:c4:
42:b8:f0:f4:47:e6:c5:71:0d:c2:e9:0a:4f:cf:c9:68:cc:98:
e4:f6:bf:7f:22:49:f2:24:86:5f:27:b4:e4:a2:34:8c:2c:fa:
8e:64:13:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:08:44 2025 by rpki-client