Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/98f60a3d-42ea-31c4-9ee8-8b9eb0babb42.roa
File: 98f60a3d-42ea-31c4-9ee8-8b9eb0babb42.roa (raw, json)
Hash identifier: dEEmQhlNCveVFkC5SLNMU4X8FN6U5LEAj7Gk4sgA2Go=
Subject key identifier: 82:87:7A:D3:C5:73:7A:F7:B1:20:D1:F7:57:0B:13:49:4C:BB:C2:5D
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858498769C8296822B6D493DAC900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/98f60a3d-42ea-31c4-9ee8-8b9eb0babb42.roa
Signing time: Tue 15 Apr 2025 01:00:47 +0000
ROA not before: Tue 15 Apr 2025 01:00:47 +0000
ROA not after: Mon 14 Jul 2025 01:00:47 +0000
asID: 396590
IP address blocks: 192.68.126.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 22 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:87:69:c8:29:68:22:b6:d4:93:da:c9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Apr 15 01:00:47 2025 GMT
Not After : Jul 14 01:00:47 2025 GMT
Subject: CN=5b373239-3db8-4845-a244-87812c3b989c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ce:d5:8e:3d:74:e8:89:c6:53:59:9e:16:e8:
58:b3:00:62:50:19:25:1c:32:77:24:d2:8e:82:cd:
1c:00:c2:b1:7c:03:ca:35:48:c2:64:4d:44:d3:54:
de:b4:9d:32:9d:8b:91:32:15:7c:0e:69:53:c7:b2:
a9:ee:55:b5:3a:9c:4d:98:91:4c:c2:a2:36:27:1c:
3d:d0:7a:22:99:9d:a8:7c:0a:10:17:b5:2f:52:9a:
05:37:92:55:89:8d:a2:dd:e4:55:e6:c5:e8:36:b1:
42:ad:40:cf:3c:85:e3:7e:ce:3b:91:23:a1:90:c0:
a1:05:5a:4a:30:16:2b:9a:ed:86:32:a5:2f:3d:cf:
40:5f:a6:c6:6f:f1:7e:cd:3f:c3:e4:8b:eb:a4:83:
bd:a8:03:90:e0:d1:ec:d1:d6:7d:3f:03:0f:fe:7c:
dc:c6:dc:3c:c2:ef:1d:01:75:81:3d:73:1f:cb:72:
20:ee:16:39:43:8d:07:56:89:89:13:fc:cd:6c:0d:
56:c8:41:b9:13:e8:1a:41:a1:03:17:8b:79:f9:73:
65:ff:64:9a:cd:a7:87:e0:0c:ca:4e:40:21:ce:e1:
d2:e3:27:a0:74:66:4b:c6:ca:85:ba:26:99:38:81:
c2:b7:0f:13:af:fd:bc:df:09:e8:6c:bf:e0:79:f3:
38:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:87:7A:D3:C5:73:7A:F7:B1:20:D1:F7:57:0B:13:49:4C:BB:C2:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/98f60a3d-42ea-31c4-9ee8-8b9eb0babb42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.126.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:90:d3:14:a1:4e:b0:c2:77:c8:03:3b:80:e6:ff:90:98:ee:
4e:8e:a1:89:20:91:f2:8f:b2:64:ec:bb:ec:57:93:04:83:42:
a2:04:44:7b:62:2b:79:be:a0:dc:73:2f:d9:59:4c:27:69:93:
b9:81:22:fa:29:c3:07:91:d5:aa:f3:ee:f3:eb:a5:87:27:ce:
03:3c:3a:89:f5:24:dd:93:70:58:45:8a:92:18:8d:74:80:7f:
21:b0:65:c5:ba:0b:fb:b0:3f:99:33:79:ca:31:6c:c5:2b:d9:
62:59:b7:56:f1:9b:39:a6:fe:f4:34:95:ca:8c:b4:c6:1f:65:
a2:0e:39:47:89:44:21:90:fb:6d:0a:d6:e0:5e:7a:21:13:ed:
eb:99:44:03:a6:d2:26:7d:48:44:a3:87:90:8e:d5:16:a0:f6:
a9:db:c4:49:fc:2d:95:13:f2:0d:d3:41:e6:42:13:76:e1:58:
c9:9e:5e:f8:5a:e2:60:e1:71:2f:96:b0:7e:dc:bb:5b:b3:c5:
9e:de:ad:e6:c0:6a:83:f6:55:85:53:46:02:16:f9:dc:b1:28:
53:3c:a8:9c:78:4f:19:02:65:13:57:56:95:d9:78:44:8d:e1:
d7:dc:7d:cd:90:66:ba:9c:47:fd:31:da:9c:b1:b9:31:30:e9:
f0:c3:3b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 19:57:50 2025 by rpki-client