Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/72efeae3-ceb6-33d5-a3ef-3123898a1542.roa
File: 72efeae3-ceb6-33d5-a3ef-3123898a1542.roa (raw, json)
Hash identifier: oJgeOMGS9Q6+yLNapf0y1INXMEUAYTD3Md/d2D7Mifg=
Subject key identifier: 52:AC:43:45:CB:D5:B5:D7:C6:81:D4:D2:1C:D8:D1:D5:83:7A:03:58
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F432858491076421BDC5311D629C79380
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/72efeae3-ceb6-33d5-a3ef-3123898a1542.roa
Signing time: Mon 03 Mar 2025 10:25:02 +0000
ROA not before: Mon 03 Mar 2025 10:25:02 +0000
ROA not after: Sun 01 Jun 2025 09:25:02 +0000
asID: 30036
IP address blocks: 108.178.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:10:76:42:1b:dc:53:11:d6:29:c7:93:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Mar 3 10:25:02 2025 GMT
Not After : Jun 1 09:25:02 2025 GMT
Subject: CN=8cd00df9-6599-456d-bb8e-d478afd1ef4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:39:bd:ec:44:80:f5:e5:ed:98:b2:ff:b0:09:
6b:a7:7c:86:87:6f:4f:d3:91:85:74:ee:04:e4:0c:
9f:08:65:6e:73:e3:9f:2f:52:f0:00:0d:ab:1f:15:
60:61:d8:96:24:da:1c:55:fe:13:8c:a2:bb:7d:3f:
c5:6d:77:7b:43:a0:be:fe:59:46:0b:fb:83:18:89:
3b:a0:e2:5b:50:5b:c8:07:a1:ad:f4:db:15:c6:51:
c8:fe:15:c7:c3:8a:6c:58:85:56:d2:73:b0:ec:66:
20:ac:58:2c:ee:75:db:46:7a:e3:01:4b:31:10:d9:
8d:25:15:b0:b7:8c:15:f4:90:e8:2c:1c:fe:6d:92:
93:ef:cb:00:22:25:c1:ab:c7:16:32:0c:7d:1d:6f:
e2:d1:42:b8:bd:67:23:53:0d:50:7d:22:93:75:76:
6d:42:63:60:a6:31:20:b3:32:0c:01:0b:a6:96:08:
10:7e:f1:61:bd:ac:0e:55:17:e6:bd:3a:51:a4:ca:
b9:30:f2:b3:18:fc:1e:b1:ad:fc:db:14:8e:ee:ba:
45:c3:ac:7d:5b:5a:78:b8:bf:b0:09:34:da:bf:ca:
fe:fa:80:0e:86:96:c7:08:e9:51:d3:a3:0a:b4:d2:
ae:27:c0:ef:90:97:df:e6:cf:26:70:14:fd:24:3c:
66:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:AC:43:45:CB:D5:B5:D7:C6:81:D4:D2:1C:D8:D1:D5:83:7A:03:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/72efeae3-ceb6-33d5-a3ef-3123898a1542.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
108.178.249.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:94:b6:c9:2d:af:b1:c2:3d:7b:26:17:d8:93:3f:a1:5c:93:
02:6f:47:e4:b7:96:00:29:a5:fb:a0:96:f8:c9:e8:02:3f:72:
e7:1e:31:89:76:49:c5:3e:af:6e:32:b2:9c:47:c8:c5:27:c3:
55:c2:b6:6e:60:1f:85:5f:90:56:56:13:7d:a9:5a:ce:60:6e:
a1:e6:f3:ab:bc:93:ff:b3:4c:91:db:cd:c2:53:f6:7d:aa:82:
27:e5:7a:0a:cc:41:6e:a5:37:7d:ea:ca:89:73:6c:a3:15:ac:
3f:c6:6c:bb:2b:7d:8f:be:18:49:08:82:df:7e:54:46:ad:23:
00:b8:8c:11:5e:44:18:13:a5:b6:ed:07:f0:68:26:2e:0e:54:
98:ba:f0:af:9a:e8:98:88:8b:c9:cc:0d:23:de:5f:af:26:4c:
54:61:88:bf:53:19:ff:ce:58:4a:2c:a7:1e:04:ac:33:2c:a4:
51:ac:59:29:1d:7c:56:02:83:b9:75:98:91:72:1c:f6:e2:be:
bf:e5:74:3a:bf:a4:08:cc:cc:19:37:6a:37:80:dc:fe:0f:9c:
6d:b1:99:68:cb:f5:04:44:a3:d1:54:e5:f1:57:dd:18:b0:d1:
e8:ad:d3:13:0b:7a:b2:37:ea:63:64:52:03:c9:9c:50:5f:2c:
8d:37:37:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:39:22 2025 by rpki-client