Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/35b2f504-c110-33c5-a1ee-9ca72fe6c5c5.roa
File: 35b2f504-c110-33c5-a1ee-9ca72fe6c5c5.roa (raw, json)
Hash identifier: 9rIm7WX0r3usnIdHl6+JQI4qFQpqs9xDn8TOLwBHodA=
Subject key identifier: 9E:41:5F:41:11:AB:C4:C8:D6:27:BC:1C:32:13:6D:C8:FD:68:EB:52
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C58193E0B4DB38F1A083B080
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/35b2f504-c110-33c5-a1ee-9ca72fe6c5c5.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 67.54.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 16 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:93:e0:b4:db:38:f1:a0:83:b0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=9d7ea393-f99e-4965-833a-f622f3aa17ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5c:fe:65:d3:4a:01:99:a4:48:76:e7:58:7f:
c2:6e:37:79:34:1a:b1:d1:eb:be:63:b7:96:c5:5c:
bc:b9:e9:0c:97:ee:45:a6:99:1a:f5:ee:c4:55:36:
15:17:ef:77:57:12:d5:c0:67:ad:df:f0:3d:53:40:
42:a5:79:c8:fc:68:45:d3:72:1c:f6:e4:90:bb:1b:
8e:da:45:24:bd:6c:06:e9:da:3e:f8:f9:96:24:58:
96:ec:5a:d2:c9:36:41:96:38:ee:c0:79:00:8c:a8:
88:8c:30:1e:66:20:7a:d2:05:bb:c5:d7:4a:6c:35:
37:95:23:16:58:46:ba:28:53:69:e1:56:a5:ea:c7:
e6:76:4e:46:56:5f:b5:56:d8:56:97:b5:72:c6:98:
4f:ae:db:01:8d:f7:4a:3f:d7:7e:38:d5:2c:0f:45:
79:a7:30:4c:cd:0f:9e:66:6c:28:03:6d:21:80:8f:
eb:cc:95:e9:1c:1b:1e:db:7f:3a:be:30:09:4d:9c:
c1:c1:98:cf:a9:7f:66:de:61:ba:08:2f:30:a0:df:
94:85:fb:32:fa:5c:17:64:2d:19:b0:b1:7a:2b:c9:
88:42:18:71:0d:09:b3:89:94:8b:27:e0:4d:63:8d:
6d:b4:a9:2a:19:7a:bc:bc:3a:82:4b:e3:33:9d:09:
c1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:41:5F:41:11:AB:C4:C8:D6:27:BC:1C:32:13:6D:C8:FD:68:EB:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/35b2f504-c110-33c5-a1ee-9ca72fe6c5c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
67.54.146.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:aa:98:40:2c:2f:06:9f:ea:a9:c9:ac:50:42:da:c9:b7:ca:
56:5f:37:b5:b5:d1:d9:1e:8a:7a:5b:7d:47:09:ce:e8:81:04:
53:8e:c9:40:84:60:e4:16:1c:d3:cf:85:04:d3:10:4a:6b:4c:
5c:e7:83:be:08:96:bd:3a:84:8c:af:6b:a3:ca:66:90:14:b7:
d3:a2:3a:6e:d2:bd:13:bf:ec:78:bf:06:3d:bb:bb:c4:89:c2:
50:28:dd:85:0d:6b:f2:64:f4:8d:cf:27:b5:96:5d:a6:c2:c7:
4f:29:56:c0:5f:f6:ff:6a:62:91:cf:d3:34:0c:74:79:34:10:
f4:46:f5:ac:21:2f:06:6c:c2:7e:6c:c0:5f:3f:4a:1c:97:a7:
78:54:b5:52:39:a4:d8:da:14:28:69:ac:a5:0d:f5:1d:ea:80:
27:d0:fa:a6:4a:0a:e6:65:52:76:64:ba:b7:be:72:3f:20:0e:
9b:5f:0a:73:68:1d:7b:ec:68:70:05:e0:91:51:91:36:9b:3b:
48:f2:9e:40:69:71:a9:b6:a0:b6:89:b2:e1:bd:65:cd:08:9e:
54:f8:b9:57:63:33:77:b5:28:77:9b:44:9b:3a:04:71:16:35:
fa:8f:3a:af:31:17:fd:81:d3:52:4e:42:bb:66:f4:75:71:98:
21:8c:3f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 06:42:47 2025 by rpki-client