Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/3892e32d-8417-3d0c-bdb6-14c814ef21db.roa
File: 3892e32d-8417-3d0c-bdb6-14c814ef21db.roa (raw, json)
Hash identifier: 8MwUDjdd8zxwUIhppuHcRDKrFPY+lB9VfoL+SWGK/Kc=
Subject key identifier: C9:6B:C7:AD:CE:09:49:D9:DE:95:F5:28:78:42:69:A5:54:BC:C9:CC
Certificate issuer: /CN=590468a2-be81-410c-b887-a35157322fb1
Certificate serial: 010D0C9F43285848E436705B1293CC80A8FB5780
Authority key identifier: CF:DF:9C:BF:5D:27:FD:69:41:08:E0:A4:C0:BC:C2:DA:A9:E8:0E:89
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/3892e32d-8417-3d0c-bdb6-14c814ef21db.roa
Signing time: Sat 15 Feb 2025 14:00:51 +0000
ROA not before: Sat 15 Feb 2025 14:00:51 +0000
ROA not after: Fri 16 May 2025 13:00:51 +0000
asID: 13487
IP address blocks: 66.103.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/590468a2-be81-410c-b887-a35157322fb1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/590468a2-be81-410c-b887-a35157322fb1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e4:36:70:5b:12:93:cc:80:a8:fb:57:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=590468a2-be81-410c-b887-a35157322fb1
Validity
Not Before: Feb 15 14:00:51 2025 GMT
Not After : May 16 13:00:51 2025 GMT
Subject: CN=17e2d9cb-ec97-490d-8093-1ec705a4dcd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4e:2b:63:20:4c:c6:8b:94:a8:a4:ec:e9:03:
15:67:40:16:7a:a5:57:bd:af:07:9a:06:9f:33:89:
55:a7:f8:fd:16:24:67:eb:23:d0:a8:eb:81:e0:bf:
de:34:58:81:b7:cf:f2:5b:45:fc:d1:ce:25:82:d3:
c1:cf:72:43:96:e3:24:04:e7:d6:01:61:d4:ba:f8:
fb:f0:c6:f0:9d:f1:90:8f:7e:78:4c:37:b6:1f:e9:
93:ef:84:b6:ad:0e:5d:2a:e8:4e:db:be:ee:3a:a3:
3c:b1:e0:b7:6e:00:dd:ed:e7:17:70:b5:5b:df:2d:
b5:35:b2:0a:8b:05:f3:e6:b4:84:4c:0c:d4:6a:44:
ea:30:e4:41:40:2f:0a:e2:d3:83:eb:15:bb:c4:b3:
3e:06:84:92:91:7a:95:97:f3:a5:54:c4:12:93:90:
8b:e3:3c:55:9a:99:08:52:74:2a:1b:dc:9b:3e:89:
0d:64:70:17:eb:7a:82:e3:bf:31:81:3a:fd:3f:ce:
a0:22:32:87:b5:84:a8:32:bd:69:72:f2:9b:73:0b:
8c:72:6b:51:df:b5:db:61:03:03:ae:f8:78:bf:09:
ee:bf:36:d3:c0:39:5f:13:da:4b:6f:f3:3c:67:47:
e0:c2:f1:b7:3e:7f:14:42:e9:b9:50:2c:ba:a5:30:
ee:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:6B:C7:AD:CE:09:49:D9:DE:95:F5:28:78:42:69:A5:54:BC:C9:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/3892e32d-8417-3d0c-bdb6-14c814ef21db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/590468a2-be81-410c-b887-a35157322fb1.crl
X509v3 Authority Key Identifier:
keyid:CF:DF:9C:BF:5D:27:FD:69:41:08:E0:A4:C0:BC:C2:DA:A9:E8:0E:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1.cer
sbgp-ipAddrBlock: critical
IPv4:
66.103.154.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:d1:db:56:d5:8e:10:59:cb:26:6a:d0:6f:9b:9e:80:a2:c1:
44:d8:8f:84:4b:fc:ca:b1:fb:c8:dd:b1:40:ab:5d:41:8a:7c:
2a:7f:3e:9a:9b:40:ac:a3:29:b7:56:ae:03:62:b4:59:15:a7:
90:e7:ef:f7:fd:26:2f:6c:90:70:43:9f:56:17:46:23:85:34:
db:cb:0e:41:2b:fc:e2:94:a8:c1:27:c0:a6:dc:29:48:3b:64:
74:54:03:00:33:bf:dc:c1:04:e4:09:63:76:db:ac:a5:a5:93:
b0:ba:30:bd:c2:1f:e0:2c:a8:83:95:07:3e:d0:6a:fb:f3:b7:
0f:42:12:4e:32:51:d9:63:da:3d:48:13:31:e2:0e:50:4b:11:
fb:55:74:c4:b0:6a:61:a7:f6:ec:29:bc:47:68:b9:53:61:e1:
6e:48:60:d6:5a:cc:7f:21:f2:be:57:97:b6:ca:b4:f9:69:8b:
f2:05:32:41:5e:ad:81:92:93:08:de:5e:ac:41:ec:ed:66:f0:
3c:71:f5:17:37:93:5b:e1:3c:af:14:c3:5f:c7:24:bd:60:16:
ff:ea:b1:c6:b0:ef:59:ce:17:06:9b:5e:bc:bb:cb:f2:c9:98:
4b:c8:74:e7:1c:da:c4:dc:9a:eb:67:fa:2c:48:98:c9:64:33:
b6:ad:3b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 13:32:26 2025 by rpki-client