Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/926b4ddf-17df-417e-972b-c86cc410fed2/0318cf55-47d4-3640-9ddb-6388db5f3fb0.roa
File: 0318cf55-47d4-3640-9ddb-6388db5f3fb0.roa (raw, json)
Hash identifier: cFgVqKYsKgDG0zockW9NOh4QcLgPYsMyWJVPMop+S0s=
Subject key identifier: 68:98:F1:8E:CF:73:5A:51:F7:74:C8:D7:39:AD:11:61:86:D2:0C:9E
Certificate issuer: /CN=926b4ddf-17df-417e-972b-c86cc410fed2
Certificate serial: 010D0C9F4328584953C4111D289DD6AD8CC45980
Authority key identifier: 10:57:31:6E:07:F8:5A:4F:36:73:23:D3:F2:37:89:9E:36:C0:BE:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/926b4ddf-17df-417e-972b-c86cc410fed2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/926b4ddf-17df-417e-972b-c86cc410fed2/0318cf55-47d4-3640-9ddb-6388db5f3fb0.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 395713
IP address blocks: 64.56.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/926b4ddf-17df-417e-972b-c86cc410fed2/926b4ddf-17df-417e-972b-c86cc410fed2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/926b4ddf-17df-417e-972b-c86cc410fed2/926b4ddf-17df-417e-972b-c86cc410fed2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/926b4ddf-17df-417e-972b-c86cc410fed2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 09:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:11:1d:28:9d:d6:ad:8c:c4:59:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926b4ddf-17df-417e-972b-c86cc410fed2
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=1ad79ad6-0299-4c2d-b0dd-4dde0ba750e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c7:09:41:06:40:9a:53:52:43:67:2d:e3:0c:
6d:9f:68:25:a0:82:c0:4f:70:06:fd:49:66:e6:0a:
8b:db:a1:c5:07:84:4e:8a:53:73:b9:c9:34:45:a2:
4d:77:57:60:d8:9c:59:a6:7f:7f:c6:44:05:3b:39:
46:04:98:df:5d:bd:15:eb:7c:00:96:29:33:d1:ae:
38:3a:92:5a:45:6a:1e:b0:83:db:40:f8:51:a1:f0:
39:0b:5b:98:e4:ab:be:fb:84:36:12:46:bc:9a:ae:
16:a9:45:18:c5:54:c3:7f:0e:4f:af:25:68:56:d3:
97:a6:3f:ce:77:86:44:fa:5d:7a:fe:f2:48:08:4f:
27:9a:3e:eb:3f:23:10:76:5b:da:eb:d8:5b:0a:86:
5e:7b:c0:57:8b:72:38:9c:5c:89:ac:65:13:f8:03:
43:a0:87:4d:11:59:fa:ad:7b:d1:1d:f0:ca:5d:f0:
4d:da:ac:d5:30:87:13:9c:03:ca:87:6d:39:e5:ce:
23:22:c0:01:ae:d3:72:14:df:b6:cb:f9:48:9e:82:
4b:f3:eb:e6:14:57:e2:82:16:59:ab:d1:6b:38:71:
f1:8e:c5:42:2f:45:d3:aa:ca:88:14:7f:c1:5b:89:
39:65:25:d0:59:8a:32:30:6f:c1:0e:14:51:ce:57:
db:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:98:F1:8E:CF:73:5A:51:F7:74:C8:D7:39:AD:11:61:86:D2:0C:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/926b4ddf-17df-417e-972b-c86cc410fed2/0318cf55-47d4-3640-9ddb-6388db5f3fb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/926b4ddf-17df-417e-972b-c86cc410fed2/926b4ddf-17df-417e-972b-c86cc410fed2.crl
X509v3 Authority Key Identifier:
keyid:10:57:31:6E:07:F8:5A:4F:36:73:23:D3:F2:37:89:9E:36:C0:BE:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/926b4ddf-17df-417e-972b-c86cc410fed2.cer
sbgp-ipAddrBlock: critical
IPv4:
64.56.212.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:d7:ae:92:15:c2:ad:bc:94:94:61:6c:7f:03:2e:c6:8d:7b:
ae:9e:bf:7f:36:61:d8:88:23:74:34:b4:a2:78:8b:cd:1e:e7:
5c:b1:78:fe:fd:94:bf:7e:74:ef:c3:60:c0:84:f9:0c:78:30:
bd:2a:8a:ac:10:da:d2:1e:f6:b8:5b:85:43:3f:a8:eb:dd:1b:
bc:cc:94:29:d0:d5:36:10:3b:e2:c7:87:14:e5:97:9a:74:24:
08:ca:dc:18:02:0e:df:1b:eb:b2:16:4c:79:ce:c1:06:cf:2c:
86:df:07:04:f0:2b:f8:81:24:5b:3f:9f:ac:ea:ba:84:54:c1:
5d:65:34:5e:42:6e:cf:ce:25:10:3b:04:3b:fa:30:b6:25:2f:
37:e1:5c:96:b0:7d:72:6e:44:62:e0:e2:29:78:c8:87:65:8d:
51:bc:a5:03:be:2f:c3:6a:13:87:df:52:87:5d:ee:51:52:7c:
99:55:a5:05:78:d7:c1:3a:06:22:bf:e2:9e:c5:91:62:31:c0:
21:52:d6:84:6a:9f:d4:e7:91:d0:61:b8:27:54:ce:c2:c2:5b:
25:fb:88:f4:11:ee:9b:83:dc:57:7a:24:95:a2:9f:36:bd:b3:
e2:e4:eb:1b:95:16:e4:c8:1b:34:a3:2a:e4:81:76:09:ac:9d:
de:aa:d2:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 07:08:06 2025 by rpki-client