Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/adbe894e-fc78-4889-85f3-6253e78715e5/d6136437-2c3d-3410-ac87-344049aebb3b.roa
File: d6136437-2c3d-3410-ac87-344049aebb3b.roa (raw, json)
Hash identifier: jmsPIzfapPqKvho40/N8cvVKzUuCbhud+OIYP9u5jNw=
Subject key identifier: FF:73:1F:04:6A:26:D6:87:69:1D:D0:5F:9E:4B:53:15:6A:A2:D8:2D
Certificate issuer: /CN=adbe894e-fc78-4889-85f3-6253e78715e5
Certificate serial: 010D0C9F43285848C6E6304E2103C3055FCBA980
Authority key identifier: B6:53:E7:CF:69:62:9C:B3:BC:CB:35:08:2D:33:06:39:E7:0A:AD:4B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/adbe894e-fc78-4889-85f3-6253e78715e5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/adbe894e-fc78-4889-85f3-6253e78715e5/d6136437-2c3d-3410-ac87-344049aebb3b.roa
Signing time: Wed 05 Feb 2025 02:00:39 +0000
ROA not before: Wed 05 Feb 2025 02:00:39 +0000
ROA not after: Tue 06 May 2025 01:00:39 +0000
asID: 62744
IP address blocks: 204.8.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/adbe894e-fc78-4889-85f3-6253e78715e5/adbe894e-fc78-4889-85f3-6253e78715e5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/adbe894e-fc78-4889-85f3-6253e78715e5/adbe894e-fc78-4889-85f3-6253e78715e5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/adbe894e-fc78-4889-85f3-6253e78715e5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 18 Apr 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c6:e6:30:4e:21:03:c3:05:5f:cb:a9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adbe894e-fc78-4889-85f3-6253e78715e5
Validity
Not Before: Feb 5 02:00:39 2025 GMT
Not After : May 6 01:00:39 2025 GMT
Subject: CN=d8f4c5a7-8d49-475e-b07f-213cfc0ed7b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:80:3d:91:28:28:29:36:89:27:03:c9:fd:96:
c8:40:9a:4e:b3:59:3b:1e:27:6e:28:2d:6c:a5:36:
42:2c:82:d2:db:da:e4:c1:56:a8:7a:ea:01:9d:47:
da:eb:50:38:cc:12:b5:55:88:c7:25:f7:d5:59:0c:
78:8a:c5:85:41:d4:e4:49:7f:e1:55:99:3c:40:e7:
49:11:58:59:20:71:25:f4:f8:eb:3e:b2:3f:18:ed:
55:65:5f:ad:d3:76:a5:ce:73:96:da:85:18:bc:e1:
d9:66:7b:87:e2:0a:b4:13:27:3c:3d:d1:ac:cb:11:
6b:cd:09:92:01:cb:be:3c:ef:e3:ee:0b:f4:45:87:
90:98:8c:a1:59:09:2d:e0:50:af:5e:32:34:1d:69:
b1:fd:17:7c:34:d3:0d:29:8b:1a:f2:32:8e:b0:93:
1b:99:f5:a0:c7:8c:87:89:5e:69:4f:66:47:cc:af:
e9:9c:a4:c6:fb:d0:13:59:95:16:a5:99:30:72:fe:
79:09:91:2b:f4:79:2f:61:78:53:bb:64:ee:6c:e3:
6e:55:36:0b:f7:d9:50:d3:b1:11:68:35:77:ec:3c:
32:06:67:41:64:e6:29:f0:cb:88:3f:07:3b:b7:9e:
ad:61:41:3c:e6:c6:d1:7b:f6:b6:66:4e:b3:b9:59:
e8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:73:1F:04:6A:26:D6:87:69:1D:D0:5F:9E:4B:53:15:6A:A2:D8:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/adbe894e-fc78-4889-85f3-6253e78715e5/d6136437-2c3d-3410-ac87-344049aebb3b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/adbe894e-fc78-4889-85f3-6253e78715e5/adbe894e-fc78-4889-85f3-6253e78715e5.crl
X509v3 Authority Key Identifier:
keyid:B6:53:E7:CF:69:62:9C:B3:BC:CB:35:08:2D:33:06:39:E7:0A:AD:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/adbe894e-fc78-4889-85f3-6253e78715e5.cer
sbgp-ipAddrBlock: critical
IPv4:
204.8.98.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:a9:05:d2:06:16:19:c4:32:98:60:46:e8:80:2f:1a:4c:6f:
37:da:e3:85:e0:be:51:31:26:72:b4:e9:a5:99:70:50:5e:e2:
98:38:d8:66:74:7b:57:74:5f:5e:d8:02:29:13:19:0a:c0:26:
ad:dc:24:56:05:84:df:24:7b:71:2a:a4:57:ec:c4:1a:17:20:
05:b9:bc:c1:a1:31:0c:5f:58:ef:70:22:fa:8d:8c:30:c6:c4:
88:24:c4:ca:2f:f6:34:a0:38:5d:fd:01:d8:33:3e:58:bb:50:
6e:6a:20:53:a4:c9:06:93:1b:15:8a:95:f7:56:42:2b:91:99:
ad:df:dd:ed:73:88:c3:aa:7c:c7:39:6c:54:b1:5d:d7:cc:e4:
54:83:54:d8:17:d5:cf:b3:de:1b:02:02:8b:9d:d6:e9:60:7f:
7e:b2:be:96:b6:0c:21:21:1d:9a:21:19:54:a7:98:67:cb:28:
81:1a:41:68:05:34:a3:ad:8b:53:4e:aa:21:80:10:db:92:df:
3a:ea:82:84:4b:0d:56:87:fd:5e:67:67:96:54:16:d6:8f:03:
b6:e5:65:4d:94:a0:c6:73:22:0d:8c:90:1b:ac:95:35:4d:fe:
0f:1f:53:6a:33:79:77:21:14:21:0f:b9:d1:88:50:ae:69:18:
87:eb:c0:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 07:01:04 2025 by rpki-client