Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cd3a8577-2cb1-3b74-aff1-b92c27c8a14f.roa
File: cd3a8577-2cb1-3b74-aff1-b92c27c8a14f.roa (raw, json)
Hash identifier: RPdNRq3eex+V0GXqNv2n5hla/+qicOpfW+7UlS0Yxyc=
Subject key identifier: 0B:A6:BC:D7:22:32:FE:9F:46:C6:C2:E8:09:40:18:CA:E2:70:B9:9F
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584921346261E1C8A28A51733580
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cd3a8577-2cb1-3b74-aff1-b92c27c8a14f.roa
Signing time: Sun 09 Mar 2025 10:21:03 +0000
ROA not before: Sun 09 Mar 2025 10:21:03 +0000
ROA not after: Sat 07 Jun 2025 10:21:03 +0000
asID: 577
IP address blocks: 209.226.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:62:61:e1:c8:a2:8a:51:73:35:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:21:03 2025 GMT
Not After : Jun 7 10:21:03 2025 GMT
Subject: CN=48be9527-3e32-4c59-b748-9a406c592d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5b:f7:7b:4e:5d:c5:44:68:09:12:8c:7c:c3:
c2:a2:0a:a4:d0:37:91:b6:fa:1a:17:6e:96:21:b2:
73:64:0c:e4:6c:64:28:cf:63:6d:14:84:a7:f5:da:
f0:be:3b:ee:32:c4:38:6d:08:59:1f:fa:bf:2e:69:
b1:23:f7:0a:04:24:21:99:0f:21:08:c6:f1:44:18:
eb:2c:e9:34:18:d5:53:8f:47:d5:14:54:ce:60:f2:
2a:09:e1:94:82:95:1c:50:61:8e:4f:74:1c:25:2a:
c3:73:0e:7c:46:1e:9d:62:d4:78:32:56:14:a2:ce:
7f:0d:1c:1b:b3:e3:e2:ae:52:14:31:09:fd:d5:e4:
16:e1:f6:b1:ae:51:95:df:bb:83:58:b9:89:97:a9:
74:4b:52:a5:69:56:03:ab:bb:6c:43:88:c0:50:90:
9f:aa:a7:63:9a:52:92:3a:ea:94:c8:28:d1:85:4a:
5d:de:5a:5e:bf:c2:f3:96:f3:1b:02:48:6c:7c:12:
4b:11:a8:32:a0:2a:69:b1:9d:1a:0d:48:0b:f8:1b:
8d:95:98:e9:61:14:66:19:14:59:8e:76:f4:91:eb:
d0:a0:34:a0:92:1b:9e:74:97:0a:01:e1:33:1a:65:
af:ef:2e:13:08:59:63:1d:61:58:d7:02:4d:94:4f:
03:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A6:BC:D7:22:32:FE:9F:46:C6:C2:E8:09:40:18:CA:E2:70:B9:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cd3a8577-2cb1-3b74-aff1-b92c27c8a14f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.226.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:a7:e3:ce:f8:d4:95:e3:d0:5e:55:6e:dc:76:08:6c:da:9c:
57:f8:cb:db:ca:2b:dd:48:b0:e1:39:c0:2d:e4:cd:83:96:04:
9a:47:b6:21:69:84:b7:f1:f1:5c:97:39:fb:ff:ac:1a:64:2a:
11:88:f2:9a:98:76:82:1f:a6:3d:22:7e:f1:63:1f:91:f4:db:
c4:f5:ff:0d:17:ed:ef:f4:22:01:0a:e7:0e:20:8f:e8:35:32:
63:2b:94:c2:4d:7b:a5:c3:99:e1:3f:70:0e:bc:7e:9b:1d:45:
25:1f:21:65:38:ff:d1:50:9b:bc:55:69:91:f1:0a:21:87:a5:
bd:b1:95:67:40:41:7e:2a:02:24:60:f4:c5:3b:bc:e6:9c:27:
97:41:26:0b:8c:48:04:9c:66:58:0e:24:05:e8:61:09:bb:a8:
99:b3:35:89:bb:fa:31:3d:c4:70:af:5d:1c:e3:20:14:35:e3:
44:f0:e9:ac:74:63:eb:e6:21:6a:dd:cf:2f:41:d7:b8:0c:ad:
48:fc:40:8e:88:ce:5f:40:f9:7a:88:5b:a8:ed:5c:f8:d1:ec:
a0:77:5d:ba:49:a5:67:80:ba:f7:4d:fe:4e:e7:ba:c5:96:49:
ec:c7:8b:f9:20:1f:04:05:2b:35:ca:d4:20:76:ac:99:cc:ea:
07:92:80:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:41:17 2025 by rpki-client