Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0971af1f-9e32-3d66-b9a6-b4ef3ee401d5.roa
File: 0971af1f-9e32-3d66-b9a6-b4ef3ee401d5.roa (raw, json)
Hash identifier: EM5Yjuv88Vml7GqfgfANEQzsihmW0R3RtOTGmD9y80c=
Subject key identifier: 67:6E:B7:DF:99:8F:4D:AB:BA:D9:15:B7:10:6B:A4:4B:5F:C9:8D:A9
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F432858491AA6D02D8A1CF1DC9BF8D880
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0971af1f-9e32-3d66-b9a6-b4ef3ee401d5.roa
Signing time: Fri 07 Mar 2025 02:00:39 +0000
ROA not before: Fri 07 Mar 2025 02:00:39 +0000
ROA not after: Thu 05 Jun 2025 01:00:39 +0000
asID: 202
IP address blocks: 20.139.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 09:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1a:a6:d0:2d:8a:1c:f1:dc:9b:f8:d8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Mar 7 02:00:39 2025 GMT
Not After : Jun 5 01:00:39 2025 GMT
Subject: CN=9acac527-ce99-4e70-93ed-bd43c147c708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ee:8f:70:18:7e:f2:42:84:d9:45:0b:cb:8b:
2f:6b:96:48:6f:7e:12:56:9f:15:7e:48:3a:a6:03:
82:ca:f5:9d:19:fc:49:9d:ad:7d:9f:e1:7d:19:2a:
ef:23:2b:35:f8:0b:88:4d:0f:6a:30:a5:52:03:d6:
ee:07:3f:97:5e:8b:fc:5e:d4:11:a6:01:94:1a:66:
03:40:ab:b9:ec:1a:7d:38:aa:1d:8b:53:32:ec:34:
6e:9e:1a:04:3f:df:50:95:b4:15:f0:e5:34:71:ba:
52:b9:1a:6a:16:f3:03:5e:a0:14:23:4a:81:34:d7:
96:5b:96:70:f1:b6:41:8a:0f:9e:aa:b2:9c:07:18:
e6:0e:b6:47:de:b9:ba:06:07:3c:8b:89:96:1a:06:
3f:e5:9c:ff:51:3e:8b:14:59:5a:d4:65:f9:ad:5c:
0e:46:55:48:69:44:07:98:31:96:f4:fd:9e:34:a8:
1d:78:c3:a3:84:54:39:c8:36:0e:8c:fd:a3:df:05:
c8:ec:80:ff:d5:aa:08:aa:5f:0c:7b:e3:fc:a2:6a:
de:88:73:55:95:df:f9:b9:5f:15:a3:1f:9b:c9:f2:
8f:e4:1f:42:81:ae:5c:04:67:e3:39:66:82:a7:71:
70:6d:76:f1:94:cb:c9:66:e9:31:74:6c:8d:79:09:
27:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:6E:B7:DF:99:8F:4D:AB:BA:D9:15:B7:10:6B:A4:4B:5F:C9:8D:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0971af1f-9e32-3d66-b9a6-b4ef3ee401d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.139.6.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:d6:bd:57:b7:3a:8a:0c:80:1e:09:e3:68:e3:64:ad:0a:c5:
7f:5c:33:7c:db:b0:16:8f:7a:1f:22:ed:10:a0:39:bf:8d:ef:
ce:45:67:b8:5a:c8:ea:f8:3e:6a:fd:6f:54:61:1d:f0:19:71:
88:be:83:19:a0:3d:75:c6:8c:2b:a2:3f:4d:da:0f:88:df:8d:
c5:8d:b7:75:86:23:cf:03:30:27:12:ac:78:57:53:70:df:96:
31:eb:22:82:0c:b8:b9:32:11:cc:2b:11:39:71:9a:63:3e:b3:
a4:1d:e1:da:97:a2:76:da:b4:21:d1:3f:08:ff:d0:2c:d4:17:
60:33:a3:45:be:27:55:da:35:1e:7f:01:64:90:cf:4c:bf:ee:
a6:24:6d:fd:12:6a:41:13:13:ca:29:df:db:c0:fc:44:0b:ab:
ae:5f:d3:d4:f0:db:0a:1e:b1:8b:51:d8:2f:05:a8:93:de:a4:
66:d1:ff:29:ed:bc:c3:81:00:bf:37:e2:3c:ec:79:1a:0d:24:
e7:db:a0:e1:df:84:48:0e:73:8a:00:9d:2e:a6:62:fa:20:7a:
2d:75:73:e8:25:1e:6f:62:ea:d8:ae:e6:bb:30:69:1e:62:04:
09:80:b3:0a:86:cf:f0:82:f5:3c:3e:0f:46:0c:2e:be:0b:97:
cc:44:97:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:13:31 2025 by rpki-client