Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/17cb60d5-3b92-3bda-a0e3-032197742f5f.roa
File: 17cb60d5-3b92-3bda-a0e3-032197742f5f.roa (raw, json)
Hash identifier: PucLaFrY8MRrYjL/GofgPgczkZm/h6MBO1W4yVa/1ag=
Subject key identifier: 97:8D:44:84:A1:87:7A:D5:E2:96:79:E3:9F:16:C7:C1:78:10:21:17
Certificate issuer: /CN=25ec66d9-6873-4655-8a15-555b07c2edb4
Certificate serial: 010D0C9F43285848FD56BEEAE0E2550E9D883FE0
Authority key identifier: E1:23:69:ED:D3:70:E9:73:D3:00:00:65:C1:38:FC:B7:ED:B2:79:06
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/17cb60d5-3b92-3bda-a0e3-032197742f5f.roa
Signing time: Mon 24 Feb 2025 14:00:52 +0000
ROA not before: Mon 24 Feb 2025 14:00:52 +0000
ROA not after: Sun 25 May 2025 13:00:52 +0000
asID: 400400
IP address blocks: 216.181.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 17 Apr 2025 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:56:be:ea:e0:e2:55:0e:9d:88:3f:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25ec66d9-6873-4655-8a15-555b07c2edb4
Validity
Not Before: Feb 24 14:00:52 2025 GMT
Not After : May 25 13:00:52 2025 GMT
Subject: CN=113cc555-73ee-46ae-9eb6-3fe1f95d3251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:5d:d3:7b:48:99:8f:03:5f:1e:55:08:53:5c:
44:30:98:02:31:db:76:16:7a:80:75:d1:fe:6e:08:
17:9b:dc:f6:45:d9:d0:a5:76:d0:6a:9f:1b:8d:66:
df:47:94:0d:a0:7e:e5:52:54:c2:d6:a8:de:7d:c5:
b6:0d:ee:e9:da:1e:5e:71:47:92:cb:dd:1e:80:4e:
49:b4:4c:76:83:ea:12:b4:85:f6:57:de:ae:3a:d1:
95:77:bd:7f:05:ad:9e:a0:35:d7:04:37:1f:a8:a7:
db:42:33:b2:05:eb:68:35:23:9b:37:46:ef:0c:cd:
e5:09:2b:ce:c2:26:45:06:3c:81:31:38:98:9a:c1:
66:90:29:ca:3c:ab:b1:03:c2:5c:2b:a3:12:52:f5:
8b:ec:93:6e:46:83:ad:72:1b:fc:08:ea:a7:e3:32:
95:a4:dd:80:30:f2:f7:19:08:0f:94:ef:18:2f:6f:
89:34:e5:d3:7b:69:c9:81:5d:ca:ee:05:ba:38:1e:
c1:ac:67:7d:17:aa:6b:2f:9a:59:5b:43:fb:ee:b2:
8a:39:a9:e3:ab:a2:e8:38:a0:5b:e0:7e:f3:e4:64:
88:6c:74:39:a1:2e:75:17:ce:1e:b1:c1:7a:1f:80:
73:45:eb:d9:16:b2:e4:0f:85:49:c8:34:69:fb:f5:
1c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:8D:44:84:A1:87:7A:D5:E2:96:79:E3:9F:16:C7:C1:78:10:21:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/17cb60d5-3b92-3bda-a0e3-032197742f5f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.crl
X509v3 Authority Key Identifier:
keyid:E1:23:69:ED:D3:70:E9:73:D3:00:00:65:C1:38:FC:B7:ED:B2:79:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer
sbgp-ipAddrBlock: critical
IPv4:
216.181.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
e3:55:3f:7b:a1:3f:9e:99:06:e8:48:93:c4:91:48:42:b0:c8:
47:e4:91:a4:a4:87:2c:2c:f9:50:da:a8:86:77:b4:fd:89:ea:
6e:eb:e6:92:26:03:de:83:70:af:89:76:78:9b:4e:43:c7:e6:
14:b5:2a:bd:2e:0a:b5:34:09:fc:30:6d:9e:17:21:9b:7c:91:
3a:7c:2e:67:7d:a2:3e:4f:b0:bd:f7:f4:64:9b:c4:f1:0c:51:
61:41:a6:9b:12:a3:3e:5c:99:7c:e8:48:b2:58:51:17:e2:16:
f4:6e:42:55:7c:ea:ab:00:6d:52:75:c1:e2:05:8d:79:8e:46:
6d:94:7f:7a:c0:5d:47:d1:c1:d2:fd:b9:2c:93:1d:42:fc:ff:
84:4a:07:b6:fa:c2:16:df:5d:b1:89:05:1d:02:6a:0a:ae:b2:
3f:16:fe:a8:76:16:ad:3b:fb:fd:6d:69:50:98:7d:3e:ff:f2:
27:e8:8d:5e:53:df:ab:95:86:e7:1d:1f:0e:02:12:62:05:f0:
10:f2:b0:7c:52:44:82:2f:a3:c2:c2:b5:96:49:87:51:5d:ee:
e8:1a:f7:e4:4e:bc:f8:06:1c:28:ef:20:42:a1:f9:a7:a0:81:
d8:63:46:7f:ff:aa:6d:b5:ca:84:7f:3f:9c:c9:7f:6e:09:b7:
ef:14:fb:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 15:33:23 2025 by rpki-client