Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9493b283-8052-35cd-8925-31fafa9335cd.roa
File: 9493b283-8052-35cd-8925-31fafa9335cd.roa (raw, json)
Hash identifier: I/z941PpkFssvE/YHN8mXEPTsjWo0rCjISUd3MdDQwQ=
Subject key identifier: B4:D8:EA:E7:50:39:73:38:9B:C0:28:8C:47:E8:BD:30:0B:7C:08:AC
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584905B6C4F03D82F9E004617E80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9493b283-8052-35cd-8925-31fafa9335cd.roa
Signing time: Thu 27 Feb 2025 14:00:51 +0000
ROA not before: Thu 27 Feb 2025 14:00:51 +0000
ROA not after: Wed 28 May 2025 13:00:51 +0000
asID: 13335
IP address blocks: 104.20.192.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:05:b6:c4:f0:3d:82:f9:e0:04:61:7e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 27 14:00:51 2025 GMT
Not After : May 28 13:00:51 2025 GMT
Subject: CN=cbc75d15-195d-4d79-b6e2-9d7b333f3d01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:26:4a:d1:2c:d9:3f:90:d1:d7:0e:eb:e4:32:
4e:8f:67:31:74:78:b1:80:98:a3:8d:dd:d8:4d:25:
06:4c:1d:3f:ef:38:4e:56:0b:34:f4:98:44:b1:6d:
c7:37:a7:7c:b8:ad:7f:aa:57:73:ab:53:0f:35:3e:
bc:7c:a2:d9:be:c9:8b:0d:1a:ef:44:c8:84:e4:f3:
3f:56:0e:81:a2:9b:73:74:cf:32:2c:c1:bd:2c:6f:
b8:e5:f9:ee:1b:b1:e6:a7:23:e6:b8:4b:31:dd:c5:
2c:90:fd:ff:c9:35:3e:6e:f6:e1:db:b5:b7:a8:ac:
11:34:e8:36:16:a2:67:47:b5:fb:06:2b:c7:00:f1:
fe:7d:08:89:f0:49:a0:1f:43:f2:7c:1d:5a:49:6f:
16:9e:68:98:9e:2a:ff:07:8c:f1:46:77:b8:fd:6b:
0c:de:8f:43:5e:73:bc:c3:cd:ed:73:ae:24:92:05:
92:b3:1d:9e:cd:cc:41:2c:7c:94:a2:f3:ba:72:0c:
39:b2:0c:77:c5:32:c5:77:9f:0a:1f:74:5e:32:e7:
f3:bd:6a:66:91:0c:dd:13:24:cb:5e:1a:06:1b:3e:
b3:af:8f:83:f5:e9:31:91:e7:24:3f:d4:7d:f1:9b:
18:7b:e8:b6:33:38:b1:6e:3f:23:43:f1:f0:1e:30:
08:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D8:EA:E7:50:39:73:38:9B:C0:28:8C:47:E8:BD:30:0B:7C:08:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9493b283-8052-35cd-8925-31fafa9335cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.20.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:bf:f7:35:41:0c:da:e3:4c:da:7e:54:c1:c7:f1:ef:63:5d:
c3:82:1f:c3:9e:9f:ba:a8:f7:8b:d6:1b:1f:c6:67:d7:23:ff:
c4:c4:f6:aa:14:88:78:0c:f2:c6:0d:95:20:f2:cf:55:c8:88:
16:b0:28:c8:b3:b6:ce:32:7d:81:c2:ac:73:08:5b:8c:b5:56:
41:e3:e7:16:e5:b4:19:d5:e5:97:85:75:8d:a1:f2:07:76:07:
d8:0a:08:3f:3a:8f:cc:d0:17:06:28:1e:22:1c:60:58:2b:6b:
e9:66:db:c8:26:80:4c:d1:3b:c7:7b:e9:2e:cf:da:e0:bc:17:
6e:5a:9e:75:8b:53:7d:11:eb:67:24:c0:73:a6:da:9e:6a:67:
e9:dd:84:8d:c2:b1:89:84:f1:c1:05:96:4c:3c:76:73:d2:0d:
ce:41:31:df:9b:b8:73:8c:e6:a6:99:be:ee:d8:d2:f4:9c:e0:
e4:36:63:a6:34:b3:b3:b5:bb:b9:56:da:b3:09:28:67:99:3a:
d6:a1:ee:c8:e0:ad:91:57:d2:50:6b:6c:79:15:dc:c7:a8:91:
91:a1:76:77:6c:cd:34:25:a4:e9:82:fc:96:49:9f:ae:15:b2:
27:a4:4c:69:fd:14:f4:4c:6a:f3:11:48:18:be:34:d5:8e:1f:
2f:c9:a3:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 08:10:23 2025 by rpki-client