Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/631d168e-9cf0-3088-b839-586a4f8ca92b.roa
File: 631d168e-9cf0-3088-b839-586a4f8ca92b.roa (raw, json)
Hash identifier: /NUx2uqwkHJelkF7sC99/tz1BAadeTDxTxfv33ACKVM=
Subject key identifier: 64:9B:10:19:77:16:D4:30:78:0B:E1:1B:EF:8F:43:23:13:26:8F:7E
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858492134446A06F17A6F8B153200
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/631d168e-9cf0-3088-b839-586a4f8ca92b.roa
Signing time: Sun 09 Mar 2025 10:20:49 +0000
ROA not before: Sun 09 Mar 2025 10:20:49 +0000
ROA not after: Sat 07 Jun 2025 10:20:49 +0000
asID: 36522
IP address blocks: 204.101.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:44:6a:06:f1:7a:6f:8b:15:32:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:20:49 2025 GMT
Not After : Jun 7 10:20:49 2025 GMT
Subject: CN=b77221b2-e2b3-4e38-bc6b-598fa8da49ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d9:94:70:18:01:1e:6e:16:67:f5:a5:b4:ff:
8a:40:ef:12:7f:ca:4c:f3:4b:06:63:fb:f3:1d:c6:
26:e8:42:84:d0:32:86:85:e3:fe:a3:08:3e:33:7e:
62:ec:49:bc:f6:16:5c:ec:ab:1f:08:e2:4d:a2:8a:
b7:f0:2b:93:6a:1d:fb:ae:2f:f6:fc:f8:e3:db:48:
54:e7:63:d8:26:9e:88:d6:ea:bb:36:73:ce:ee:06:
da:cd:71:b3:17:ac:01:d8:13:ab:fb:e1:ce:28:e9:
6f:39:79:a5:3a:36:6c:33:70:88:82:fc:32:ff:e5:
2f:43:15:d4:ff:24:15:d7:bf:98:8b:78:3a:6a:a9:
df:bb:44:03:48:82:6e:4b:c1:67:f2:7b:f4:79:29:
b8:5f:f8:c3:6d:40:e4:78:ba:7b:8a:99:5a:2f:22:
e2:02:d5:9e:45:77:2c:32:c4:d8:a8:ea:5d:86:ac:
0c:3b:14:ef:52:e1:e4:e7:95:c8:37:31:6d:11:d5:
8b:1a:c9:6f:b5:8d:b4:ce:99:32:0b:df:26:46:8b:
19:66:ef:9c:2e:b2:3b:1a:5d:ca:08:6d:22:e2:16:
8e:57:77:c1:df:b2:fd:b8:05:20:93:92:f5:e9:92:
b6:c8:db:de:3d:da:d7:76:ac:0f:9f:b3:9a:b4:08:
d6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:9B:10:19:77:16:D4:30:78:0B:E1:1B:EF:8F:43:23:13:26:8F:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/631d168e-9cf0-3088-b839-586a4f8ca92b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.209.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:c1:ba:90:3f:c8:f1:10:76:6c:ff:10:03:bc:88:be:b8:24:
af:68:fe:a6:53:ee:d8:e7:f7:b7:f2:af:f6:70:77:f6:8b:52:
bd:7e:ee:11:df:a2:f7:2b:53:2f:94:2a:7a:bb:e6:b7:d4:8e:
91:7d:c2:74:2f:62:75:08:4e:33:87:17:16:f2:06:a1:7a:41:
e6:3a:de:eb:4d:6a:47:7d:5a:e2:7a:eb:cf:52:e9:3b:be:b2:
05:83:45:51:58:20:f5:44:4b:00:fb:2c:50:19:78:34:3a:85:
bc:a6:0a:0f:a1:67:bc:1c:c4:1f:55:ba:00:25:26:88:d4:3b:
71:6e:5f:0d:f0:12:1b:ff:a4:53:94:8e:e5:13:12:27:9a:94:
e2:70:36:de:fd:e4:23:66:ab:1a:f4:b8:57:24:28:78:52:bd:
ed:ce:c2:32:49:16:17:42:f2:58:85:b1:b1:2c:cb:41:26:ee:
fb:7d:a8:a7:8f:f6:3f:54:cf:40:95:83:63:a8:84:6e:6b:2f:
4e:64:00:5f:e0:df:65:61:93:73:ce:86:0c:8c:60:25:83:5c:
85:81:92:f4:78:b8:54:b6:0b:1a:44:03:61:12:53:22:1f:20:
09:35:e7:40:81:5d:ee:03:5b:42:c4:93:15:ec:3d:ca:52:f3:
40:7f:1c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 07:51:41 2025 by rpki-client