Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/16e3b577-4ea0-31b5-980a-e9475640c31a.roa
File: 16e3b577-4ea0-31b5-980a-e9475640c31a.roa (raw, json)
Hash identifier: 2A6LonbnjurEK3H3TUIS+MlW7YEukSC/qgHQpEAIZQQ=
Subject key identifier: CF:75:1E:48:A2:A8:3E:E5:B1:40:77:93:9B:BB:52:2D:DC:BB:C7:25
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584908818199E6DF348608399E60
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/16e3b577-4ea0-31b5-980a-e9475640c31a.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 13335
IP address blocks: 172.68.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:81:99:e6:df:34:86:08:39:9e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=26cceb48-3d63-457a-bb8b-142f63df50ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f3:ce:66:18:a4:34:95:6d:5d:84:b2:3b:ff:
1d:8a:03:02:b4:5f:02:47:a9:8a:c0:7b:b7:71:6f:
8f:60:22:3b:fb:99:ca:43:92:5a:31:58:1a:4c:9b:
13:ab:e0:25:6c:42:c6:94:80:b3:4f:1a:5f:d9:5c:
eb:c0:7b:6e:07:80:78:eb:a8:59:91:5f:f6:31:20:
40:53:46:e9:3d:c2:76:57:fb:0f:2b:88:1b:d3:0c:
38:21:71:b4:c6:c8:f6:ff:8c:cd:4c:22:74:99:62:
55:01:90:cb:8e:97:4b:c6:a8:63:e3:52:0e:9c:c6:
8f:ec:df:da:5e:cd:28:87:f1:45:41:a5:96:bb:52:
93:ee:b0:28:83:06:f5:69:68:9e:3c:d4:bb:e3:8f:
f4:e3:80:68:6e:d1:88:03:90:bf:5b:6f:b1:69:e6:
6d:8a:b6:9e:85:02:63:54:53:5d:91:ab:73:05:aa:
23:e8:38:b7:c9:d8:68:e0:2a:18:e3:fe:87:48:d3:
1c:be:bc:38:75:56:c3:18:cc:b2:dd:09:0d:04:9d:
9e:27:be:85:85:76:ab:b8:69:bd:43:65:07:de:8b:
34:2b:2c:b9:57:25:02:80:52:c8:1c:f6:de:05:3f:
d0:d4:8c:aa:1f:e9:1d:48:1e:bc:7a:57:87:3c:ed:
f1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:75:1E:48:A2:A8:3E:E5:B1:40:77:93:9B:BB:52:2D:DC:BB:C7:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/16e3b577-4ea0-31b5-980a-e9475640c31a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.138.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:27:e5:03:19:80:44:e3:69:15:52:cd:28:4d:f8:f8:f1:b7:
be:e1:50:82:83:48:07:83:5b:3b:5b:13:0d:e3:4d:45:c5:06:
74:96:de:cb:12:bf:06:92:a3:af:e9:d3:51:f1:58:8e:44:ec:
9c:33:9c:d1:50:c8:f5:e7:84:c9:e5:15:42:94:86:30:26:56:
c7:f9:a3:fd:76:f2:02:08:96:61:fd:90:42:de:31:f5:75:d2:
f9:ff:c2:3d:65:3f:c7:ae:30:d0:fc:4f:24:9e:74:ad:3e:a2:
cb:d3:41:95:22:57:b6:74:5a:02:73:1e:a7:74:5d:1a:44:56:
89:76:cc:b0:fe:f5:db:92:f5:92:cd:79:4b:11:ff:9f:37:fa:
a3:2d:b1:7d:ea:bb:51:9d:01:cb:23:d5:56:5b:1e:28:b0:b7:
cc:ef:94:71:1e:68:1e:1e:76:85:0e:2f:d5:33:54:60:86:4f:
7d:e4:89:4f:b2:5a:00:06:1f:3f:9c:1e:46:b9:5d:e7:e0:4f:
4c:be:36:59:eb:ff:70:fe:98:77:c3:49:35:a5:06:2d:75:58:
ac:ca:8f:06:8f:bd:57:f2:32:46:48:8b:9e:56:19:de:a6:ae:
15:cd:81:97:86:91:1e:c9:a6:b0:a9:e5:2c:71:f6:59:49:70:
ee:b0:1e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 04:46:38 2025 by rpki-client