Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/58ad2792-dfe9-39d9-8e32-bb768e23741b.roa
File: 58ad2792-dfe9-39d9-8e32-bb768e23741b.roa (raw, json)
Hash identifier: srkorjdOQkO90Jj3SUzCqBHd4iwTX/A/uXTc1eQHMpc=
Subject key identifier: E1:34:AB:83:C3:42:E8:42:F4:9B:33:88:8B:D4:F1:FD:CA:4D:C6:5C
Certificate issuer: /CN=27c7a344-4bc7-468b-ad30-3b9c006cd0c8
Certificate serial: 010D0C9F432858498CFF0DD0F2B0392A9D539C00
Authority key identifier: D9:4A:87:E9:9F:64:F3:92:1C:80:49:03:D0:E0:01:6E:63:18:33:DD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/58ad2792-dfe9-39d9-8e32-bb768e23741b.roa
Signing time: Thu 17 Apr 2025 01:00:45 +0000
ROA not before: Thu 17 Apr 2025 01:00:45 +0000
ROA not after: Wed 16 Jul 2025 01:00:45 +0000
asID: 63267
IP address blocks: 104.171.208.0/24 maxlen: 24
104.171.209.0/24 maxlen: 24
104.171.210.0/24 maxlen: 24
104.171.211.0/24 maxlen: 24
104.171.212.0/24 maxlen: 24
104.171.213.0/24 maxlen: 24
104.171.214.0/24 maxlen: 24
104.171.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 18 Apr 2025 09:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:8c:ff:0d:d0:f2:b0:39:2a:9d:53:9c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c7a344-4bc7-468b-ad30-3b9c006cd0c8
Validity
Not Before: Apr 17 01:00:45 2025 GMT
Not After : Jul 16 01:00:45 2025 GMT
Subject: CN=4caddc44-7eb4-491c-bd47-3ddf6516b698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:80:36:a6:35:40:c7:1e:a7:88:c4:14:6f:a1:
e6:e4:b7:33:e8:2e:ec:ee:1d:3c:51:25:d9:e3:a4:
76:5b:f8:5e:b4:88:65:1a:b8:49:16:ca:b4:68:3e:
79:6f:34:08:bb:88:12:87:a6:2a:61:4a:16:2f:4f:
5e:88:83:31:51:50:15:be:74:50:af:23:d2:4f:8b:
9a:ac:ac:90:e6:e8:c6:79:77:09:0d:e2:2d:14:1c:
1a:b7:97:90:e6:4c:6b:6c:ae:52:24:9d:2b:71:f7:
bd:75:c5:26:37:56:c0:5e:2c:86:1c:f5:1c:b1:57:
c8:b6:17:26:7a:37:e8:c3:d3:4f:08:60:a3:08:bf:
73:a7:1c:ce:70:80:4e:21:4a:41:42:9e:d3:65:07:
a7:d0:31:d9:8e:95:de:2c:fb:41:24:b0:2f:32:0a:
e8:1f:46:60:01:97:9a:3e:38:c4:5f:6c:a0:df:6a:
d2:b7:b9:e7:a9:71:af:a4:ec:c2:5e:f1:0d:b4:4f:
af:02:34:f9:7e:c3:4a:30:2f:3c:e0:9b:d0:6d:c0:
07:1a:da:d7:36:8e:02:8a:fe:66:ff:26:04:55:d3:
c7:3f:a2:af:41:ee:a0:ed:5b:c9:3c:a2:41:fa:34:
50:bf:92:8f:f2:4e:a9:ab:6a:5b:fd:b2:a8:c8:d6:
75:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:34:AB:83:C3:42:E8:42:F4:9B:33:88:8B:D4:F1:FD:CA:4D:C6:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/58ad2792-dfe9-39d9-8e32-bb768e23741b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.crl
X509v3 Authority Key Identifier:
keyid:D9:4A:87:E9:9F:64:F3:92:1C:80:49:03:D0:E0:01:6E:63:18:33:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.cer
sbgp-ipAddrBlock: critical
IPv4:
104.171.208.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:04:c5:39:3f:34:cc:f1:7f:72:72:4e:13:53:8b:d8:25:be:
eb:9f:3b:9f:c6:f6:ee:d5:79:12:06:68:22:a9:2c:4d:1c:dd:
27:41:f5:fc:95:c2:c3:67:09:9e:bf:9e:4c:68:bf:1c:aa:04:
1d:ad:c1:a0:92:1a:1a:ff:8c:1f:91:fd:ee:c3:f2:af:5d:00:
cd:cf:e4:03:a4:5c:4b:db:ed:b4:c3:2d:cd:54:a6:3e:59:40:
38:08:03:db:89:0e:6d:e2:6b:12:b9:cd:f7:f1:f0:57:69:ba:
1c:48:bb:bc:88:14:d5:50:ee:5a:2b:4f:17:47:e8:62:aa:18:
fc:68:ff:91:ef:4d:35:2d:13:2a:21:c7:08:a7:5c:6c:1d:95:
5c:58:28:a3:11:74:2b:e2:f2:33:5f:66:7e:85:6b:6e:4f:bc:
1c:d2:4d:ab:14:cb:f0:14:86:b8:0a:de:f9:90:4d:66:c5:74:
09:0a:4c:a5:43:e1:74:ff:b6:ca:47:33:dd:fb:f6:69:ff:f0:
d0:45:48:7a:2d:2a:74:5e:8e:0e:59:bc:09:38:56:d2:1d:6a:
50:53:0b:18:7a:e5:d5:aa:b5:87:92:af:44:57:26:c9:46:0c:
ad:97:66:a8:a0:ce:fe:46:7c:1e:f0:4d:68:c8:b5:d2:45:e3:
19:be:1f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 06:10:28 2025 by rpki-client