Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0f955333-9dd3-39f3-949d-28224942588d.roa
File: 0f955333-9dd3-39f3-949d-28224942588d.roa (raw, json)
Hash identifier: 26qXZEHCOQJtvC6dgm+wz28h1BDVshrruKAnqcBDrng=
Subject key identifier: 05:36:C6:4C:AA:3B:C7:CB:35:DE:E9:FC:9A:B9:50:61:87:5D:DD:F0
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584953C423D89AA91EC6D91C5F80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0f955333-9dd3-39f3-949d-28224942588d.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 9009
IP address blocks: 166.0.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 18 Apr 2025 08:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:23:d8:9a:a9:1e:c6:d9:1c:5f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=2960543b-5bd0-45e1-be9f-8273f1334fa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c8:70:16:6b:b8:48:f3:56:45:a1:5c:a7:78:
cf:64:e0:00:e4:e8:20:bf:1b:2d:60:c7:26:10:28:
1e:76:d2:00:b1:c4:ab:9d:27:03:3e:3f:31:1e:98:
62:90:a0:a9:87:61:11:53:99:42:ec:80:4f:61:0b:
ea:d8:66:00:e4:95:37:05:c6:07:6f:c9:7a:fd:c0:
43:ea:f7:34:f8:70:dc:74:ab:f4:ca:be:1a:a9:9e:
65:2c:47:17:42:4f:24:60:d0:7d:9a:ce:9c:34:fe:
aa:56:a5:67:67:fd:a0:45:31:b9:a9:9d:81:0e:3f:
78:70:ac:9d:dc:7e:7c:90:9a:2c:fe:88:1d:5e:9d:
4c:e6:8e:90:dd:ff:92:46:8a:ac:22:57:40:5e:66:
ca:dc:5e:88:03:26:f7:25:a6:a0:82:b5:3a:f8:19:
4b:8a:12:41:8d:30:47:ca:0d:36:63:59:0b:84:66:
ad:2e:3f:66:37:0a:f7:c4:7b:8e:95:64:46:1b:5b:
46:ae:72:94:15:ff:4b:cf:2b:61:e5:01:a3:84:24:
d1:35:c5:12:20:35:87:a6:5e:44:8a:4d:2d:0a:f7:
49:8f:4f:6a:de:e6:cb:ed:0f:9b:aa:64:6b:82:bb:
1f:f3:b5:ea:22:5f:2f:b7:c2:d8:b6:47:2b:36:5f:
d9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:36:C6:4C:AA:3B:C7:CB:35:DE:E9:FC:9A:B9:50:61:87:5D:DD:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0f955333-9dd3-39f3-949d-28224942588d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.63.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:23:a7:f0:2d:5a:74:16:64:a9:51:26:48:b2:12:47:50:81:
9a:da:c1:dc:79:65:f5:a3:4b:8d:74:4b:6f:be:54:e7:26:30:
ed:da:b3:dc:eb:9f:d7:dd:c7:fe:34:d1:2c:c2:cb:96:9d:9e:
1e:1a:91:e5:ec:77:74:4e:c0:a3:80:95:ff:c2:99:61:17:4d:
84:e7:0e:3e:a8:b3:4c:c8:89:d1:c5:84:04:b7:bf:e3:42:68:
2b:15:f9:b4:b2:30:5c:74:4f:c5:62:db:8f:86:0d:52:cd:dc:
83:a1:c3:52:22:13:72:71:2b:e0:c3:cb:b1:35:9e:cb:57:7b:
da:90:10:6f:16:4b:3e:f7:08:f4:8e:6b:c5:4a:78:de:3b:6d:
d5:69:37:65:66:48:25:17:16:41:80:9c:0a:90:46:ec:d3:a6:
a5:de:6d:b2:a3:52:7f:86:49:1c:46:7e:05:3f:cf:05:d5:94:
06:16:53:83:38:42:e5:ae:2f:c5:4a:3c:3d:1d:ff:74:b0:e1:
d3:77:5e:f9:bc:d3:86:16:47:2a:85:f4:c8:1a:6b:a3:87:c2:
4f:ff:a3:05:d3:64:50:3f:48:db:5b:97:5c:1b:ec:14:bb:0c:
37:0b:41:45:d2:fa:7c:f2:68:af:e8:b8:ec:be:59:e3:f1:7e:
8b:5d:57:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:10:19 2025 by rpki-client