Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/828b930b-7b34-36a0-b4bd-a9d0526461ed.roa
File: 828b930b-7b34-36a0-b4bd-a9d0526461ed.roa (raw, json)
Hash identifier: ylPhlvt7EKu9NeOi30Bj6T47GMzDHg4W3ufMhnF1gEA=
Subject key identifier: DB:00:C7:0B:84:B1:3F:F6:55:C6:01:EE:1B:93:3A:E7:2A:FB:70:81
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C580FD689680878B38F18A40
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/828b930b-7b34-36a0-b4bd-a9d0526461ed.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 198.45.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 17 Apr 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:80:fd:68:96:80:87:8b:38:f1:8a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=d47082f8-1b72-4bec-9572-bd50ec8257c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4a:39:23:c1:cb:67:ed:67:74:a7:e3:dc:0c:
63:e6:f2:5b:c2:86:22:e1:bb:d6:fd:dd:a1:28:a4:
94:07:1f:d6:4b:90:45:73:70:c6:45:4c:87:93:a3:
ec:a2:e3:be:e4:3e:52:97:11:0c:e5:b4:6c:85:e2:
b2:25:24:3c:d6:c2:96:ee:00:f5:d3:29:f2:dd:3e:
48:3b:9c:3d:3a:6b:0f:c7:9f:50:8c:29:b0:4c:1f:
3d:36:18:41:0b:cc:4f:31:de:06:c9:68:68:64:6e:
b9:cd:45:7e:c1:19:80:c9:ee:17:ba:c7:0a:bb:6d:
8d:3d:22:ce:f4:6e:51:2a:9b:e5:05:d8:59:f3:68:
bd:97:78:46:e7:fe:fa:44:52:d5:8a:05:2e:76:d5:
96:89:f1:ba:9d:cd:00:7e:e7:9e:6a:24:0e:df:16:
eb:6c:06:d5:59:a4:e4:bf:fd:c2:92:05:e5:e2:66:
df:21:ba:25:7e:55:70:89:25:22:b5:1a:db:5a:f8:
5f:f0:d3:3b:e8:66:89:c7:0a:9b:d8:b9:17:f6:30:
90:75:17:bf:21:f1:3c:21:b2:0a:73:8b:47:cb:0e:
b9:c8:4e:a7:6b:2f:27:47:a4:d9:a4:3e:06:9f:b4:
b7:13:e7:64:37:39:fe:e1:d4:9b:bd:4f:6b:3e:e5:
31:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:00:C7:0B:84:B1:3F:F6:55:C6:01:EE:1B:93:3A:E7:2A:FB:70:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/828b930b-7b34-36a0-b4bd-a9d0526461ed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
198.45.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:7b:00:a0:f6:50:b4:de:d2:dc:d8:fd:f6:c7:b6:0d:b1:9c:
a5:7a:61:da:19:8f:e4:c9:71:b3:23:88:11:da:69:7f:82:fe:
9d:88:b3:3e:81:97:fc:37:74:17:d8:7a:51:87:bd:33:51:f8:
a1:d0:91:e1:64:d9:11:db:d7:93:0c:5a:f5:25:d1:69:6d:23:
a1:9c:7f:b2:13:06:ea:d2:f6:46:76:5f:2e:8f:b2:ab:d6:00:
ae:09:99:e2:64:77:ea:15:ba:cb:72:cc:1e:aa:54:a6:85:4e:
6b:e3:a2:58:82:d8:96:f8:e4:0e:89:96:2f:fc:69:42:be:cb:
dc:13:65:5c:2e:6c:11:bb:64:4c:c7:39:c9:fa:26:c7:be:c9:
59:bb:48:8a:ef:bb:20:b8:ad:71:59:a3:c7:a2:80:0a:21:b3:
6a:5f:fa:a2:b2:04:9f:ee:8d:fa:94:84:05:b0:01:ce:0a:30:
2a:64:08:33:0a:b0:aa:a4:3d:da:94:04:01:fa:cc:d1:55:65:
8a:96:4a:8a:88:3e:b8:22:27:85:ed:fb:f2:d1:10:84:32:bb:
fa:9e:f1:c8:bb:37:84:6d:d6:f0:64:11:0b:cd:f8:7b:a2:44:
08:5f:06:d7:9c:8c:33:48:05:5b:42:ef:f2:c9:46:d1:f4:48:
47:1f:25:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 05:31:41 2025 by rpki-client