Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fda075d8-d658-3f96-8651-9c78927fd8f7.roa
File: fda075d8-d658-3f96-8651-9c78927fd8f7.roa (raw, json)
Hash identifier: rrE9dVyYAgd+hKZaMaA1+y8TYUAZVNyQ+V4QsoKC0i0=
Subject key identifier: A5:F9:C2:00:89:BB:5A:5A:38:83:A7:A9:66:B2:20:D5:01:47:FE:8E
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584921346A07E91F74CC90959C00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fda075d8-d658-3f96-8651-9c78927fd8f7.roa
Signing time: Sun 09 Mar 2025 10:21:06 +0000
ROA not before: Sun 09 Mar 2025 10:21:06 +0000
ROA not after: Sat 07 Jun 2025 10:21:06 +0000
asID: 577
IP address blocks: 216.208.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:6a:07:e9:1f:74:cc:90:95:9c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:21:06 2025 GMT
Not After : Jun 7 10:21:06 2025 GMT
Subject: CN=cda3ccbd-4917-47f7-9497-b1457b03a542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:75:34:78:86:91:fd:92:59:44:86:3e:3f:81:
7d:7c:72:b7:3c:f7:4e:40:cd:32:5c:25:df:ee:71:
43:cd:88:ea:20:48:46:5a:09:73:d7:b1:2d:ec:7a:
03:9c:8b:87:65:e1:11:41:77:b1:ea:df:8c:c2:93:
54:47:c6:a7:d6:de:ac:c4:c6:ae:5f:58:ce:01:e8:
d3:40:ec:e9:73:0a:f5:61:20:e5:1a:9a:f7:51:a3:
4f:55:6b:ef:14:0b:fa:54:00:9a:b8:8f:f9:8a:dc:
be:59:04:f0:7b:b3:7b:02:69:c5:05:bc:86:60:98:
4e:c0:72:1d:fe:8e:30:1a:7a:b0:1e:ab:29:03:50:
5a:38:af:85:a5:b8:64:b2:4a:fc:28:41:76:51:33:
f3:34:98:ad:da:18:af:3e:d3:94:6e:d0:2d:dd:d1:
7a:81:a3:12:14:c5:64:d1:5c:6e:a4:c3:96:3e:e4:
47:68:e0:f9:fe:dd:1b:b5:38:b5:32:7d:4d:b5:f9:
ca:13:ba:7f:93:4c:a0:48:22:e8:80:50:95:ed:df:
92:22:ab:2d:84:c8:70:a1:1f:02:85:23:eb:ea:f1:
3e:3c:fd:85:7a:b2:c3:35:f5:fd:77:5f:da:f2:5d:
74:c4:10:2a:00:95:b9:26:80:1b:6a:ef:d9:29:8a:
72:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F9:C2:00:89:BB:5A:5A:38:83:A7:A9:66:B2:20:D5:01:47:FE:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fda075d8-d658-3f96-8651-9c78927fd8f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
216.208.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:e8:a2:1d:72:1e:cd:94:02:b0:d4:73:66:2d:12:91:eb:30:
76:6a:64:eb:9b:e7:86:20:f9:62:62:b2:06:a7:a6:eb:bf:c0:
cd:96:5e:f6:cf:1f:74:96:e2:de:1b:0c:5e:7a:8e:61:66:31:
a5:04:39:bc:2c:4a:07:00:a3:04:d2:c2:45:70:67:e8:de:e8:
17:a0:4b:f9:a2:4e:3f:15:03:7c:4a:af:55:27:74:06:b2:10:
24:d5:0f:2a:ae:f8:31:61:20:2d:c9:21:83:82:e4:d0:db:6f:
48:83:9f:84:d4:d0:1d:2f:e3:a8:be:76:6b:2a:2b:b3:cd:01:
26:f4:0b:f3:a2:e4:44:35:6e:24:cb:7b:7e:a8:88:c5:0a:f7:
0d:37:13:6a:bf:ef:3c:eb:47:04:39:91:f6:ac:34:06:26:20:
a1:a8:93:87:a1:29:a2:77:80:be:05:57:57:71:e5:a5:36:ce:
07:22:04:7f:bd:79:25:47:76:d4:c6:94:7b:eb:f6:05:dc:a7:
ca:66:a9:86:e6:57:fe:68:d1:f6:0e:48:06:f7:32:45:7d:09:
d3:1f:7c:d2:75:12:d0:ef:b8:50:23:6b:84:40:b3:d3:a6:89:
1d:e7:fc:16:9c:94:34:4c:d0:7e:d3:b6:4d:0b:51:ca:2b:b9:
ee:f0:c6:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:55:59 2025 by rpki-client