Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/fac0e226-115e-37fc-a995-03b2a82f48d9.roa
File: fac0e226-115e-37fc-a995-03b2a82f48d9.roa (raw, json)
Hash identifier: oR0swZZGVw4NNrXhHUIlSGoos8zuPjHX3L8QPc4qsCY=
Subject key identifier: 97:3B:92:B1:B4:F1:7E:5C:EF:EC:10:61:70:9C:BB:E8:93:E1:35:58
Certificate issuer: /CN=6063814d-5183-49de-90ee-84cbbecde422
Certificate serial: 010D0C9F432858494303EEF5D4CECD8939905B00
Authority key identifier: FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/fac0e226-115e-37fc-a995-03b2a82f48d9.roa
Signing time: Fri 21 Mar 2025 13:00:50 +0000
ROA not before: Fri 21 Mar 2025 13:00:50 +0000
ROA not after: Thu 19 Jun 2025 13:00:50 +0000
asID: 401307
IP address blocks: 136.228.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 18 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:43:03:ee:f5:d4:ce:cd:89:39:90:5b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6063814d-5183-49de-90ee-84cbbecde422
Validity
Not Before: Mar 21 13:00:50 2025 GMT
Not After : Jun 19 13:00:50 2025 GMT
Subject: CN=752789aa-bcbb-47b0-9d8e-b9792e54fb57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:69:0e:c0:d2:f3:23:00:9c:4f:06:ab:b6:8a:
a4:d4:3e:61:fa:6c:45:50:af:fd:1c:cd:61:dc:b1:
92:48:54:a9:bf:9e:fe:95:43:90:d7:2d:69:f2:54:
3c:0b:be:19:57:2b:e0:24:de:09:b7:bf:8a:76:3b:
1e:78:9b:6f:cb:51:da:23:54:58:4b:94:79:15:0a:
c6:81:62:89:97:50:82:a6:aa:2f:ac:48:4d:c6:16:
34:55:a3:1b:69:48:da:24:0e:97:35:14:a7:af:e6:
fe:35:53:83:f0:df:ed:e6:46:2f:9b:ef:7c:18:13:
71:b7:24:04:36:43:21:96:fe:ad:25:dc:a5:00:9d:
b5:88:58:dd:ee:bc:c8:07:a8:19:de:fb:84:8b:b4:
e6:aa:82:03:c5:c2:a1:43:83:3c:3e:6e:bd:53:8c:
91:d9:f8:43:a4:49:77:46:92:84:81:0d:c3:96:29:
11:72:b4:e9:b5:a8:59:d2:4d:e1:f5:56:9a:8e:85:
c7:96:be:ff:40:69:0f:ff:dd:2b:6e:f6:cd:cf:03:
b3:f5:58:c3:8c:de:81:b0:d9:08:97:46:68:ec:34:
82:7e:60:1a:dc:34:41:b3:4f:3a:48:3e:6c:53:71:
4d:2c:78:9d:e7:37:af:2d:18:94:00:80:7f:52:0c:
45:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:3B:92:B1:B4:F1:7E:5C:EF:EC:10:61:70:9C:BB:E8:93:E1:35:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/fac0e226-115e-37fc-a995-03b2a82f48d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl
X509v3 Authority Key Identifier:
keyid:FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
sbgp-ipAddrBlock: critical
IPv4:
136.228.43.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:52:c6:34:53:df:73:8e:80:e2:d2:93:b8:37:48:af:e6:5e:
0c:b4:61:c4:7e:b3:51:00:ab:56:ad:7a:41:7e:42:57:5f:98:
b5:a5:ad:ca:f5:75:6d:68:05:87:06:52:61:36:9a:b4:37:33:
f5:13:4a:55:3d:0c:f5:cb:bf:ca:cd:90:89:09:60:87:cf:52:
76:83:0a:db:a1:21:4f:f5:cb:79:6a:1c:0e:9b:26:1b:d7:75:
a7:07:5f:6b:a2:a6:31:ca:ab:82:ef:e3:40:57:8f:cb:a2:39:
7b:37:6d:2a:3a:6d:2f:4b:fc:57:af:32:bc:0d:23:a0:66:86:
17:2f:ce:b9:5b:6d:70:bf:74:73:db:c1:54:96:be:66:87:a7:
c8:ee:f4:c6:23:14:54:34:48:46:4d:23:30:e6:38:e3:47:ae:
e6:bb:90:95:9b:18:ef:b6:de:05:45:cd:8e:f2:77:22:8d:b0:
4f:f1:2c:49:58:28:41:6c:56:29:09:34:a1:2d:1c:e3:e6:a8:
06:29:5d:f9:e7:e6:f8:a2:88:34:01:94:c6:30:98:99:e2:ee:
a7:54:db:b1:43:56:9e:c8:1e:86:9f:6e:c9:0d:b5:28:ab:58:
50:74:9c:cc:f1:8c:af:f2:60:2b:98:43:e9:5b:38:30:61:24:
45:24:1f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:57:04 2025 by rpki-client