Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e0c4bdb1-49b5-3e71-8183-5a2dcee10856.roa
File: e0c4bdb1-49b5-3e71-8183-5a2dcee10856.roa (raw, json)
Hash identifier: l4Ls0KxjTPqbWcDswnNAwXoBFiXK0B7HshViB23BKX0=
Subject key identifier: D1:5D:B6:58:4D:C9:51:2D:34:59:32:B9:78:79:21:06:04:29:00:B6
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848F00C6A7DC3B51562CC6BD280
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e0c4bdb1-49b5-3e71-8183-5a2dcee10856.roa
Signing time: Wed 19 Feb 2025 19:45:54 +0000
ROA not before: Wed 19 Feb 2025 19:45:54 +0000
ROA not after: Tue 20 May 2025 18:45:54 +0000
asID: 62240
IP address blocks: 166.1.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 08 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f0:0c:6a:7d:c3:b5:15:62:cc:6b:d2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 19 19:45:54 2025 GMT
Not After : May 20 18:45:54 2025 GMT
Subject: CN=e3a87682-c102-4983-a302-50a50bb98032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f5:8c:8f:f9:bd:7c:16:24:fe:24:5d:a1:ce:
f4:11:48:d5:fa:86:66:25:b2:1c:ee:55:cb:ff:e0:
cd:74:70:d2:ad:34:d6:3d:de:93:c3:63:39:6c:ff:
9f:dd:42:06:1b:ba:04:50:88:f4:04:b0:8f:52:f5:
1d:63:d2:72:88:11:cf:d9:dd:8e:7b:23:86:d8:4e:
9f:fb:24:ee:29:5c:4f:c8:56:32:3c:9a:4f:8c:41:
39:65:fe:bf:ef:46:6f:4d:93:99:f4:73:d5:35:8d:
21:b8:9c:3f:d1:6d:73:ba:20:ea:19:99:ab:84:bc:
41:08:86:cc:43:74:82:4e:cb:a5:61:c0:a1:1f:50:
75:20:7a:72:65:2d:4c:2e:7a:94:df:9a:f5:d1:68:
ae:29:c3:1c:3e:2e:a7:b7:14:a3:78:bc:87:67:0b:
84:4d:5c:d6:d3:cf:25:c4:83:32:08:f5:20:90:6c:
8f:a6:21:f7:ed:2f:06:72:91:98:3a:cb:b5:eb:f1:
d0:cb:5a:80:04:be:78:50:b8:e5:1e:ad:83:cb:3e:
12:a8:c8:54:c0:58:29:f4:66:af:0a:ad:35:ee:66:
86:fd:01:40:2a:a4:71:20:a9:c4:53:30:0d:9b:b9:
9a:c4:ea:32:79:02:78:0f:63:62:e2:d3:ca:76:77:
15:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:5D:B6:58:4D:C9:51:2D:34:59:32:B9:78:79:21:06:04:29:00:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e0c4bdb1-49b5-3e71-8183-5a2dcee10856.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.50.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:15:0c:5b:da:61:10:68:8a:12:07:e5:89:3b:d5:45:77:27:
70:50:9d:00:dd:fe:01:db:1c:46:4d:b2:cd:1f:f7:98:64:7c:
e9:81:2f:d5:79:f0:c8:84:dd:50:d7:97:77:65:b5:e5:34:df:
b2:ad:17:2c:76:84:6e:52:17:72:47:eb:13:ba:64:f2:05:5c:
4f:75:fd:73:c2:09:4a:b2:ea:cb:eb:7b:af:35:74:1c:e0:16:
c3:97:4f:11:7b:9d:fa:10:1b:05:93:b2:0d:fb:14:11:ca:75:
26:2c:9f:8e:41:78:28:44:76:c4:c2:8b:19:06:cf:7e:28:dd:
5e:10:2a:df:e1:d1:30:7f:6e:d9:16:30:5d:43:3a:13:a1:e4:
ed:a1:c3:48:29:8f:05:68:4a:b3:0d:f1:4b:25:7e:6b:31:95:
33:30:aa:bf:ac:49:8c:f2:6a:a1:f0:9f:0b:b2:2f:44:d6:91:
32:23:95:44:af:74:c6:0c:1a:f7:54:5d:88:e2:07:3d:1e:91:
f1:0c:8e:ff:be:fe:18:b7:88:d6:f6:55:1c:4e:38:91:bc:bb:
85:fe:d5:62:7d:5f:71:7d:a0:16:7a:6f:98:c6:fb:5e:bf:34:
ea:39:13:e2:0d:91:b7:0f:bb:4b:40:74:33:68:38:34:24:5f:
27:5c:c5:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:28:27 2025 by rpki-client