Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c8ddc0a6-5680-3f87-b1f7-d22dc06f5de6.roa
File: c8ddc0a6-5680-3f87-b1f7-d22dc06f5de6.roa (raw, json)
Hash identifier: iq/UhTnPSjh6KT6kVh7745iF53NT8bIm3JvN8wdOzgI=
Subject key identifier: 20:9C:5A:47:FF:2D:C6:D7:F8:B3:C7:16:29:D8:8E:07:36:B5:F7:A2
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584908818372141BBB447929DF00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c8ddc0a6-5680-3f87-b1f7-d22dc06f5de6.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 13335
IP address blocks: 162.158.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:83:72:14:1b:bb:44:79:29:df:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=156c6424-d9a4-49fe-a978-d871d7018a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:29:f2:9c:55:fa:8c:7c:ae:d4:b0:15:3d:96:
7a:25:eb:d1:af:46:12:92:11:f5:be:74:d4:c6:9e:
43:23:d2:47:8e:39:8c:4e:cd:d1:91:df:b4:ab:6e:
d4:3f:f2:8a:bc:8f:0b:88:49:43:83:25:3a:96:22:
e2:82:7e:56:82:da:26:21:0e:89:e6:22:89:c9:ee:
97:c9:fd:33:e4:8d:13:f0:ba:79:84:4e:1b:8c:b1:
2b:8b:ee:f2:7e:4c:24:ee:60:96:3c:b5:4f:d9:be:
cb:83:10:d2:1d:2e:ef:0d:14:6e:bb:4b:d3:97:f3:
9f:c6:32:16:07:89:1b:9a:92:59:a5:c9:21:e5:04:
72:4c:54:7c:87:83:66:dd:da:2c:a2:da:16:1a:45:
50:40:81:e6:47:e2:f6:9d:21:4e:28:bd:e8:29:b5:
05:4b:ad:21:c1:5e:58:3e:20:f3:f6:2d:85:32:7d:
07:0a:40:48:68:eb:90:1d:ed:3f:d6:29:f2:46:82:
3d:d9:f8:ed:a3:d6:c2:df:1f:8a:f7:e8:03:8f:6c:
48:5b:a7:c6:67:f7:be:04:67:c2:11:03:06:9b:86:
0a:dd:92:a3:bb:c7:3c:63:a1:14:a6:d3:4d:86:17:
91:49:f5:8e:05:f0:6f:3c:eb:68:fd:58:b5:ee:a8:
2d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:9C:5A:47:FF:2D:C6:D7:F8:B3:C7:16:29:D8:8E:07:36:B5:F7:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c8ddc0a6-5680-3f87-b1f7-d22dc06f5de6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.158.199.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:73:ce:04:32:a0:cb:c6:d7:52:2b:9b:da:52:93:77:d8:93:
17:aa:4b:db:06:0a:2c:59:1f:cb:8c:37:ef:9c:47:49:30:dd:
04:ad:4f:77:f0:1a:68:a3:0f:51:d4:4e:86:92:f1:af:9e:db:
0f:77:d2:64:54:62:05:89:4c:e3:be:9f:f7:3a:9f:70:82:3d:
7a:e3:45:f7:16:3c:ac:1b:f9:7f:0f:a6:8c:d9:7c:8a:14:02:
0a:2b:59:45:64:d4:2d:dc:24:33:e9:20:d3:b4:18:09:c6:3e:
d3:f0:48:b2:17:d9:b8:1a:f0:bb:de:40:07:a7:c3:ed:f8:f4:
3d:2b:2d:cf:8b:19:9f:e7:c8:50:91:7b:6d:33:4a:dc:a9:e0:
33:5b:e6:3f:af:31:65:db:0f:60:9a:62:b2:1e:ab:21:8a:0e:
80:50:5d:86:49:3c:f8:f4:88:05:aa:2c:a1:6d:81:45:d6:30:
da:bd:24:dd:51:db:24:89:2b:08:e5:7a:2b:6c:b8:09:bd:59:
39:3d:86:e3:07:01:47:d9:a0:19:e1:c1:6c:23:fd:86:97:b6:
53:d3:d1:3a:5d:1d:13:93:f8:67:ee:cf:db:b5:4a:32:4c:08:
e6:75:05:0b:9c:f4:ef:96:64:b3:8a:d2:bd:ca:fb:65:74:e0:
c5:e2:3c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 21:11:21 2025 by rpki-client