Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bb1bdcf7-3977-37f0-b652-a0f554ac7fe9.roa
File: bb1bdcf7-3977-37f0-b652-a0f554ac7fe9.roa (raw, json)
Hash identifier: Oy/EC898DMzHfCzhwgMs/iuzN32y9glHMiT6FV5wsMI=
Subject key identifier: 11:EB:C5:73:1A:6E:F7:20:1B:35:C8:9A:95:0A:49:39:77:B4:A0:4C
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858490B4C0C47D80FCCD3436DB500
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bb1bdcf7-3977-37f0-b652-a0f554ac7fe9.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 13335
IP address blocks: 172.69.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:0c:47:d8:0f:cc:d3:43:6d:b5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=d346b186-6e7f-4d59-a5d1-79ab8b5703a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0c:de:c9:47:49:a1:6f:0b:05:19:fc:ab:a9:
ef:b0:61:04:98:01:d5:f1:eb:85:de:3b:d7:af:93:
c6:c9:6e:47:16:80:96:4d:d2:8e:ee:dd:65:6e:94:
c5:58:47:24:70:47:b4:74:5d:8b:02:5c:7f:ac:95:
12:65:bf:31:dc:59:cb:3f:21:f7:7f:8b:24:95:42:
44:63:a9:19:0b:64:7a:1e:47:50:5b:40:16:f1:33:
74:da:44:3e:0a:b0:be:32:36:bb:21:3c:90:43:1c:
bf:4a:05:b0:c4:b2:7c:77:85:21:27:ec:58:3a:1a:
60:7e:a5:8d:d4:44:3e:f7:5e:af:64:7b:3f:0d:f3:
a3:ea:f3:c4:0f:7e:1f:3e:f8:6f:d0:d8:64:1a:8a:
9c:41:38:07:b4:a6:ec:0f:d1:5f:96:0b:75:89:29:
90:fe:b2:1b:1b:16:97:52:06:e0:a5:86:ea:11:2d:
c3:7e:1b:a1:73:40:ae:09:b9:5b:1f:59:bf:08:f2:
8d:85:79:ab:1e:05:5a:52:33:6d:f0:2a:ff:b0:dc:
c8:b0:44:46:db:11:02:59:35:86:f1:9d:f5:ef:6a:
f6:1c:06:1d:71:56:84:ae:9f:ec:5a:ba:b1:7c:1a:
42:cb:e7:18:35:18:c8:f6:2d:7c:59:80:fd:fb:a2:
64:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:EB:C5:73:1A:6E:F7:20:1B:35:C8:9A:95:0A:49:39:77:B4:A0:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bb1bdcf7-3977-37f0-b652-a0f554ac7fe9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.69.33.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:76:c3:6f:b4:09:98:7a:b5:46:ba:c7:c5:3b:67:9b:59:a0:
e4:1e:b1:34:97:4b:21:17:33:f3:ac:09:67:96:40:67:a0:0a:
af:cf:e8:65:79:ec:ce:9a:a3:b9:48:74:4f:63:1f:5e:dc:5b:
c4:6c:97:04:cd:ed:fd:9b:ac:8d:05:90:b9:3f:87:78:6a:5d:
d2:f3:81:b6:f8:2b:33:4f:89:cf:34:f6:a4:8d:04:2f:f1:dd:
1d:8e:25:47:dd:8f:b2:e9:e2:0f:24:1a:27:6f:f5:42:0c:cc:
de:15:eb:01:8b:c3:9f:fa:e9:f0:fe:bb:a2:de:f8:b5:e8:7f:
42:60:c5:66:12:38:54:e9:f2:58:f0:52:38:f5:c6:fa:f3:07:
d0:05:b7:55:88:99:e6:35:1a:8e:2c:21:25:f0:0b:f0:aa:15:
b1:36:80:ce:8a:06:09:3b:cf:0b:09:61:44:50:6d:52:7c:a3:
4b:83:dd:87:e5:7a:48:61:d6:4d:a4:a8:ee:3f:e6:9c:26:ee:
cf:4c:fa:43:3a:db:f3:0f:47:b7:59:e0:35:99:96:85:c9:65:
c9:cf:0b:af:5b:5f:34:f7:3c:ee:95:49:3c:9d:7e:94:cf:bd:
10:7a:56:44:aa:70:9d:db:c2:d6:df:2d:fe:0e:40:e4:ef:f1:
a7:64:5b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:28:15 2025 by rpki-client