Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8d658794-56d7-3b38-8373-803b9414aa8b.roa
File: 8d658794-56d7-3b38-8373-803b9414aa8b.roa (raw, json)
Hash identifier: p9md1bff3H/Fe/JfcvgInRboJ3yb+eKredGC9XVyXLY=
Subject key identifier: 45:F0:EA:D6:0A:7E:24:5E:71:FD:BD:C5:DC:CF:FB:44:C6:DD:CF:0A
Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial: 010D0C9F4328584917DC299C27C93EA8A0864880
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8d658794-56d7-3b38-8373-803b9414aa8b.roa
Signing time: Thu 06 Mar 2025 02:00:39 +0000
ROA not before: Thu 06 Mar 2025 02:00:39 +0000
ROA not after: Wed 04 Jun 2025 01:00:39 +0000
asID: 20473
IP address blocks: 8.9.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:17:dc:29:9c:27:c9:3e:a8:a0:86:48:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Validity
Not Before: Mar 6 02:00:39 2025 GMT
Not After : Jun 4 01:00:39 2025 GMT
Subject: CN=8b17c1d2-bf82-435f-8c8b-1263803d9fef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b8:bd:53:8d:63:40:76:7f:09:ec:2c:69:cc:
5f:24:01:0f:af:1a:07:ce:15:90:c7:73:a6:84:70:
f4:52:57:b7:17:63:f8:d6:52:0e:63:ab:f8:5a:be:
cc:4c:f3:ac:26:53:8c:b5:25:29:1c:81:78:fd:5a:
e4:dd:32:bb:31:4e:02:95:19:55:c2:18:65:b4:24:
f8:90:fe:ef:e2:a8:c3:6c:61:73:87:ce:26:6a:88:
d3:21:2e:d8:d5:b6:e3:c6:7e:02:8e:30:2a:2e:32:
76:af:5e:3b:63:dc:d3:ae:07:b1:15:ee:86:72:72:
63:e6:84:a2:28:d8:f7:e0:13:ae:51:83:73:bd:af:
a1:04:83:67:29:b9:9e:a8:5c:cf:48:40:e2:82:7f:
fd:25:a1:cf:c8:f7:06:b9:69:52:28:a7:97:90:c0:
cb:d1:e1:c1:83:c8:9d:e6:42:ef:9c:b5:e1:8b:2c:
31:59:a8:02:4e:b6:c6:68:c3:c1:cf:0b:bf:ac:52:
eb:0f:df:ce:6e:b8:ec:63:87:73:6e:56:74:f1:d3:
a3:8a:21:a4:fb:77:dd:66:1a:21:1c:18:72:f7:ff:
94:4c:a9:ed:05:c6:db:b6:6b:0d:36:00:a3:b5:33:
03:e5:90:09:0e:71:27:b5:af:1e:10:98:56:d9:28:
a2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F0:EA:D6:0A:7E:24:5E:71:FD:BD:C5:DC:CF:FB:44:C6:DD:CF:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8d658794-56d7-3b38-8373-803b9414aa8b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
X509v3 Authority Key Identifier:
keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
sbgp-ipAddrBlock: critical
IPv4:
8.9.5.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:ad:45:b1:27:aa:d9:36:9d:68:d6:cf:b5:dd:65:a9:75:73:
67:fb:7b:ef:7e:e0:2a:3e:d2:18:c5:84:01:06:dd:b5:e7:50:
94:09:96:04:e9:1d:3c:d1:db:93:c3:18:9f:69:66:fd:b6:94:
7d:eb:87:e8:ed:e3:c3:fb:c3:c4:27:5e:dc:ad:7b:08:ac:db:
f5:1c:40:ff:38:fc:ea:39:cd:a9:6d:db:ff:98:4e:03:0c:49:
fb:0d:bb:76:ab:3a:90:ee:7d:41:42:02:23:56:2e:8b:32:75:
01:fd:50:77:c9:17:a4:65:86:7c:10:04:97:54:dc:e2:92:a2:
e8:64:be:25:8e:e1:00:b3:93:3a:1b:dc:c7:b6:67:6b:9c:f5:
12:76:64:db:a8:5a:9e:d7:1d:cb:06:1e:16:f7:b5:86:37:83:
a8:21:cb:a7:b3:6b:36:75:44:4d:98:cc:84:c8:4b:24:96:3e:
c2:9b:02:19:3c:c1:26:05:3f:e3:01:09:ea:06:56:7d:89:19:
66:28:88:df:30:98:b6:0d:94:62:21:30:30:ff:b7:eb:38:61:
be:3c:36:30:e9:36:4b:c1:69:35:ab:03:3e:0f:d3:96:14:3b:
b8:61:14:bf:15:ba:2f:10:fa:05:be:25:3a:8e:0a:df:aa:7f:
2b:53:96:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:49:54 2025 by rpki-client