Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/df77201a-b7c3-33da-a03d-039105f79e13.roa
File: df77201a-b7c3-33da-a03d-039105f79e13.roa (raw, json)
Hash identifier: Z0bVE6adlpXU/T69374nH6LWvnOpcD85m29kBjMGYuc=
Subject key identifier: 99:63:6B:B8:DD:05:0F:EF:EB:FD:DC:FF:1C:5B:AD:7C:04:16:E7:A1
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584910E1775087969794479D8500
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/df77201a-b7c3-33da-a03d-039105f79e13.roa
Signing time: Mon 03 Mar 2025 14:00:53 +0000
ROA not before: Mon 03 Mar 2025 14:00:53 +0000
ROA not after: Sun 01 Jun 2025 13:00:53 +0000
asID: 13335
IP address blocks: 173.245.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:10:e1:77:50:87:96:97:94:47:9d:85:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Mar 3 14:00:53 2025 GMT
Not After : Jun 1 13:00:53 2025 GMT
Subject: CN=55e25bb8-7fda-4242-99b0-af065e650a86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:63:4c:8a:48:24:e9:f8:05:c2:2f:8c:0d:3a:
34:3e:aa:ab:27:93:bf:89:83:e8:c5:b5:b9:29:b2:
d4:8e:37:1e:b4:b6:58:82:89:78:e6:b1:de:32:d5:
48:27:a5:3f:ba:f8:ce:e6:3a:2d:4f:6d:16:22:7c:
16:71:40:43:67:12:04:73:bd:83:b0:25:dd:f1:51:
d5:7c:fd:d3:9e:11:90:a2:e4:ab:a2:51:00:6c:3a:
d9:78:ec:56:d6:87:fe:92:8d:90:74:01:21:45:03:
ed:03:c8:6e:04:88:3c:ec:bb:20:f8:c5:56:1b:95:
e0:16:12:8a:3c:bd:7f:f8:80:1e:39:8a:e6:54:4a:
7c:ed:55:99:3b:11:3f:a6:6d:62:17:65:ac:67:32:
36:0b:e1:45:e0:0a:6b:8a:70:64:15:46:cf:53:28:
2a:d5:01:20:e0:21:21:4f:88:87:41:a3:98:40:6e:
4f:8f:c2:85:be:f7:64:8b:7c:fd:b0:7c:0a:f9:90:
9a:a2:58:d9:41:16:a0:23:0a:a9:4d:09:95:e7:6b:
63:a4:a9:85:fe:e4:40:09:fa:1e:92:78:53:a2:8e:
80:b7:7b:52:31:44:15:1d:1c:78:c0:cd:9a:a3:b2:
cf:b9:7f:97:58:b1:59:0c:f5:00:f9:df:fb:8b:d4:
a1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:63:6B:B8:DD:05:0F:EF:EB:FD:DC:FF:1C:5B:AD:7C:04:16:E7:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/df77201a-b7c3-33da-a03d-039105f79e13.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
173.245.52.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c2:5e:b7:9b:dd:0b:d0:59:ba:97:1a:7b:d7:79:78:7e:5b:5b:
f9:b5:57:82:df:a2:0f:83:e3:42:48:7d:0f:16:87:6c:aa:cb:
9b:b9:41:63:cd:03:cc:3c:fe:70:b3:c6:26:81:d1:b5:e0:33:
69:d7:9e:90:e3:69:59:a9:89:a8:3e:9e:78:38:01:59:c7:8f:
bf:6e:7c:9a:ab:4f:48:03:38:60:a7:4b:63:07:a3:8f:02:cd:
3a:f4:88:8b:fc:58:fb:cd:c1:53:b0:94:9e:5d:dc:b6:ac:bf:
e1:0b:a5:20:b9:30:1c:25:30:7a:cd:09:fc:a0:6f:b5:59:93:
2a:3e:4f:3d:f8:bb:b6:65:1d:e7:8a:39:21:1f:72:76:00:5c:
36:82:87:3b:a7:eb:c8:1c:fb:64:9f:f9:92:13:b5:13:a0:30:
7c:5b:40:8c:3b:4a:e1:dc:b3:5e:19:c1:36:41:59:f8:85:4e:
68:f6:84:7a:94:d3:72:4d:77:55:49:03:1f:7d:6d:89:73:d2:
39:9e:49:6f:e1:d6:d5:4a:33:98:11:de:f5:de:07:1d:79:20:
14:af:66:97:bc:66:dc:e4:43:87:fd:86:2b:28:a3:8d:ec:0a:
88:fc:60:1e:bd:eb:8e:38:b4:e5:25:25:0e:93:1c:d9:e6:9c:
01:86:94:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 19:36:11 2025 by rpki-client