Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2d76c6d1-7ad2-330f-ab06-54394e1bbe4e.roa
File: 2d76c6d1-7ad2-330f-ab06-54394e1bbe4e.roa (raw, json)
Hash identifier: Mni6bPP8ElPqMw+QGJeA1YNgrd7xp/S3omVOf036YnA=
Subject key identifier: B0:C1:93:E8:F9:A3:47:16:89:63:94:A2:E9:7D:01:E8:79:9D:1A:1A
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848F00C7806E469128E48239600
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2d76c6d1-7ad2-330f-ab06-54394e1bbe4e.roa
Signing time: Wed 19 Feb 2025 19:46:01 +0000
ROA not before: Wed 19 Feb 2025 19:46:01 +0000
ROA not after: Tue 20 May 2025 18:46:01 +0000
asID: 62240
IP address blocks: 166.1.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 08 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f0:0c:78:06:e4:69:12:8e:48:23:96:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 19 19:46:01 2025 GMT
Not After : May 20 18:46:01 2025 GMT
Subject: CN=a879481c-c9f0-4d3c-b575-8f8dcc51184d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:55:1f:ed:c4:17:a8:68:c4:0b:b1:bb:61:8e:
aa:e4:7e:ca:6f:04:f4:17:47:65:18:01:34:53:5d:
83:b4:c8:db:e0:3d:d7:1b:29:7c:e4:42:24:5c:a9:
a5:f5:48:9e:fd:03:d5:ef:f5:3d:59:3d:f7:80:6d:
5a:42:8a:7d:3b:e7:96:4d:27:bf:18:25:54:2a:8e:
b0:ce:70:c6:9a:c2:52:b7:fc:5a:9d:53:d4:8a:52:
a7:9a:ef:33:be:cb:e0:f5:36:10:2c:05:0f:18:f9:
7e:44:74:57:35:52:f6:3a:d0:3c:59:48:0f:87:c9:
29:44:ca:cd:48:2e:85:76:67:32:6f:ce:c5:02:10:
cb:53:5c:38:ab:ce:e5:0f:0c:06:de:7b:4d:0d:5e:
d5:93:e6:3d:92:e4:1f:34:bd:96:a6:d9:07:59:9d:
89:fa:45:be:18:3b:e3:fd:d6:51:fe:75:5d:16:0a:
99:8e:31:8c:06:31:5b:51:7b:50:a3:8f:78:1d:d3:
ee:13:8c:28:9e:4f:5a:28:26:3e:58:ad:00:78:79:
20:8f:2d:3b:f8:da:f1:b4:a4:a3:e2:19:be:06:6c:
e8:59:b6:23:73:62:44:1a:16:a0:11:ce:fa:1b:b3:
66:82:c0:46:26:f4:69:51:57:37:f5:ba:64:e7:27:
70:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C1:93:E8:F9:A3:47:16:89:63:94:A2:E9:7D:01:E8:79:9D:1A:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2d76c6d1-7ad2-330f-ab06-54394e1bbe4e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.217.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:06:b0:7d:b2:02:e8:ca:26:d6:95:60:b2:8f:3a:1e:ef:13:
0b:0e:92:26:3b:0a:1b:cf:ce:03:5d:d8:7d:0d:a7:b8:fc:65:
f2:ec:6e:0b:e9:a3:6f:dc:83:fd:34:ad:3b:b7:4a:58:f5:a2:
dd:1b:f2:a4:ba:03:bc:05:20:8c:6d:c9:cd:f7:75:f1:36:7e:
f9:3b:2e:40:f4:90:c0:97:74:17:0a:ca:eb:79:e9:73:d9:54:
ff:1a:4c:3a:db:35:cb:c8:c5:3a:e0:86:df:b1:2c:4b:aa:e0:
8d:29:69:9d:6d:ce:af:27:5c:dd:b2:98:ef:32:65:71:53:4b:
4c:52:12:4c:7c:27:ae:d2:18:5f:36:f5:a1:cc:ab:a1:10:bb:
44:d4:54:91:08:ad:c1:69:18:a3:35:9a:e5:e8:ec:07:fb:be:
b1:41:0b:43:e3:cf:40:1a:03:20:f8:f4:4f:06:06:fd:bd:e1:
bd:25:b1:6f:2b:dd:17:d4:d7:af:e3:9f:e8:75:e1:28:df:53:
d5:69:01:93:87:ef:81:6a:a7:30:56:79:25:cc:58:f4:46:90:
7d:53:a6:1e:bc:f9:35:d9:2b:1f:03:34:5c:19:73:d3:32:cd:
9c:01:6a:a1:db:64:56:7d:dd:42:65:b9:35:27:4f:53:be:34:
a1:b4:4c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:02:48 2025 by rpki-client