Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/746a8ccc-6d5a-3361-9f87-0c280ea1a436.roa
File: 746a8ccc-6d5a-3361-9f87-0c280ea1a436.roa (raw, json)
Hash identifier: reVnqMQN3YcDYFhML34qTGEQUH3jGzdfSB1ahndSV5k=
Subject key identifier: A8:D3:2C:0D:35:65:3C:F6:21:19:91:60:DF:FD:D7:01:07:AC:5F:8C
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584921346D2BD84056A940A37040
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/746a8ccc-6d5a-3361-9f87-0c280ea1a436.roa
Signing time: Sun 09 Mar 2025 10:21:08 +0000
ROA not before: Sun 09 Mar 2025 10:21:08 +0000
ROA not after: Sat 07 Jun 2025 10:21:08 +0000
asID: 12132
IP address blocks: 216.208.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:6d:2b:d8:40:56:a9:40:a3:70:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:21:08 2025 GMT
Not After : Jun 7 10:21:08 2025 GMT
Subject: CN=2a8de71b-7b74-4d28-b2e9-488ab761fe96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:da:50:31:4f:e9:27:98:0a:12:bc:b1:77:c5:
cd:6e:66:a4:eb:33:65:6f:80:f9:0e:f3:84:0b:9e:
9b:04:0f:ae:0f:48:d1:7b:d0:b4:b7:f3:61:99:cd:
c5:ad:59:80:21:ce:20:a5:1b:2a:e9:66:38:f2:b6:
ee:73:09:e1:7a:0e:25:13:2f:c5:c2:a7:15:10:11:
11:18:8a:15:e8:40:c3:52:ed:13:4d:59:cb:53:84:
e0:19:65:8a:13:cf:b1:e1:3a:bd:3a:b6:3b:44:28:
5e:e2:1b:46:e1:27:25:e3:4f:7b:5b:7d:0d:30:f3:
40:a8:a8:50:d8:86:30:56:51:29:44:00:f9:9f:41:
96:00:81:48:84:89:c1:54:f1:4c:14:95:0a:f3:35:
a3:2c:c4:fa:71:df:ed:4b:2f:f3:b0:d8:e4:46:61:
e8:14:e3:d4:41:9c:39:db:75:70:c3:96:ab:a6:c9:
7a:83:64:02:5c:1c:5d:a9:5e:4c:09:91:b2:30:d4:
1a:f9:64:24:28:7e:1a:f4:ce:73:ca:72:2d:1e:fd:
b7:4f:09:84:9c:b7:42:ba:14:ae:4b:f3:3c:33:04:
30:93:37:b4:46:ce:2e:72:1a:ef:14:56:74:82:90:
97:14:86:12:f8:2d:8b:18:d6:1b:b8:02:73:cb:47:
63:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D3:2C:0D:35:65:3C:F6:21:19:91:60:DF:FD:D7:01:07:AC:5F:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/746a8ccc-6d5a-3361-9f87-0c280ea1a436.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
216.208.169.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:f4:e0:56:0d:06:1b:b9:7c:84:82:39:6e:8e:23:91:66:e5:
57:ab:d6:98:2f:b3:5c:48:6a:0d:e2:99:11:9a:c3:14:ac:0a:
06:13:77:00:7c:57:26:ba:63:85:06:0e:10:b1:c2:86:3d:9e:
d1:90:03:18:75:e2:95:2b:3a:85:67:b3:09:0c:80:56:2f:32:
cf:5b:7c:aa:79:74:a2:82:31:cb:26:86:72:38:43:cf:60:c5:
90:93:2b:a9:5b:44:01:e8:8c:bb:98:36:e8:8f:ab:c6:6c:77:
a7:35:fc:e2:46:16:8d:89:44:25:15:63:56:21:94:32:dd:a0:
eb:9f:e9:8d:8b:99:54:02:56:f8:2d:85:2e:b1:5b:37:5b:de:
b0:8f:7f:75:d1:1e:0d:48:5a:36:6e:bd:44:67:e9:01:4f:ab:
0c:42:9a:1a:df:98:ff:48:d9:9c:df:15:92:24:36:d3:d2:1f:
e8:ae:bc:de:cb:d8:d9:04:7b:7c:44:9c:0a:d9:83:52:ff:91:
f5:2e:0a:dd:bd:93:4e:67:1c:38:00:bf:c1:55:93:d3:11:61:
e8:48:e8:74:a1:0a:a8:d5:33:09:35:59:ec:aa:cb:f4:2f:93:
f0:ac:0c:46:e2:1e:27:a5:9e:ba:63:fb:7e:39:3f:4e:c4:2f:
ca:40:43:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 18:59:16 2025 by rpki-client