Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d6ca33df-5e18-3772-b6f8-ddd10a1433e6.roa
File: d6ca33df-5e18-3772-b6f8-ddd10a1433e6.roa (raw, json)
Hash identifier: Zsp4PkQwKJR42l/QRN1HOIqV7rO3mOF7yfY9jJJko64=
Subject key identifier: B8:CA:9B:18:38:6D:04:18:77:5A:67:AD:85:74:53:7F:08:55:56:66
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285849028F8DF3D719F99EA401A3A0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d6ca33df-5e18-3772-b6f8-ddd10a1433e6.roa
Signing time: Wed 26 Feb 2025 10:54:41 +0000
ROA not before: Wed 26 Feb 2025 10:54:41 +0000
ROA not after: Tue 27 May 2025 09:54:41 +0000
asID: 30036
IP address blocks: 104.201.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 13 Apr 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:8f:8d:f3:d7:19:f9:9e:a4:01:a3:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 26 10:54:41 2025 GMT
Not After : May 27 09:54:41 2025 GMT
Subject: CN=c25b25f8-8576-471d-8641-d25e4b8d6c90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:44:35:1a:36:f8:07:6d:1d:f9:0d:a2:95:10:
b0:12:9d:d7:66:9f:1b:24:25:f3:2d:d7:e2:70:f4:
69:4d:5e:9c:1b:c8:1f:b5:26:f8:7f:00:a7:5c:83:
20:9b:8e:37:c4:33:ae:11:68:25:bc:01:ca:23:e4:
5b:da:c6:9a:31:2b:cf:a1:42:73:07:60:68:0b:6e:
61:04:8e:d0:43:02:cf:84:64:96:ea:dc:e6:f4:e3:
f4:1a:05:fb:da:4b:ec:25:54:37:e8:aa:e2:9c:ed:
37:4e:c5:87:6d:37:97:8d:7d:61:aa:46:37:33:26:
61:b0:c4:e1:3b:d1:43:e7:cb:50:85:2e:92:59:88:
cd:86:90:d4:70:3f:e3:39:05:76:4d:e6:3a:a7:b4:
fb:81:5d:f8:5e:4d:23:c8:f6:06:10:d4:fd:19:28:
f1:34:1d:c7:0d:61:66:ad:b2:a3:f7:5c:64:f1:26:
e1:59:53:cf:59:17:07:e9:cd:ee:24:2f:b0:f5:f1:
e5:93:79:2f:e8:e0:1e:84:8d:e5:4d:a5:d7:aa:0e:
44:00:8f:c1:ec:c4:89:c2:50:1e:f2:46:86:f1:67:
83:bb:55:14:bd:c6:29:cb:ed:d6:85:ae:02:28:1f:
a9:95:32:83:c6:56:49:53:ba:bb:a3:82:cb:ba:10:
7c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:CA:9B:18:38:6D:04:18:77:5A:67:AD:85:74:53:7F:08:55:56:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d6ca33df-5e18-3772-b6f8-ddd10a1433e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
104.201.115.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:15:05:bd:a0:49:81:d2:11:33:5b:27:51:4b:b5:a2:2f:d3:
dd:14:bf:4d:0d:7c:2e:cf:9b:42:34:f9:9d:bd:ce:e0:8a:f3:
da:ae:4e:b5:5f:62:75:7c:08:fa:d2:06:d3:e9:31:cb:b1:b5:
28:e9:f1:e4:87:9e:e8:c5:73:a1:61:39:93:4f:cc:0b:79:3c:
fd:77:73:b0:d2:dd:61:d8:3a:ee:1e:bd:86:8b:22:ee:5e:12:
a0:65:ea:4e:04:54:54:a4:71:62:98:cc:c0:d0:56:46:e4:7a:
97:bd:24:37:7e:d6:48:aa:cc:07:95:13:65:cb:cf:5b:dc:b8:
30:0c:54:ea:49:8c:c5:fc:cd:6b:66:aa:c6:28:40:30:53:68:
ed:27:b2:a3:d5:c7:6e:2e:60:76:1c:97:71:1c:07:9f:a2:fc:
d1:b9:16:a4:e4:51:78:f8:db:b4:03:eb:73:31:91:1a:01:fd:
8f:44:30:02:ce:eb:7f:0f:7f:03:75:a5:2a:a6:34:b0:ba:f1:
c7:34:0c:3b:0e:0d:52:55:09:93:0d:d2:2e:6f:6f:65:74:11:
70:b0:91:61:45:6d:0c:a9:bf:b1:1f:79:b2:25:02:ed:a7:ac:
e0:7e:9a:2d:4e:65:0c:c4:16:0f:88:35:85:78:60:2c:15:0a:
e8:6c:30:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 12:49:41 2025 by rpki-client