Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9ac489b-8c67-3c4f-bb5d-b2913681cbed.roa
File: a9ac489b-8c67-3c4f-bb5d-b2913681cbed.roa (raw, json)
Hash identifier: rj9GXYaaOn+UIu7FdMzGvp39tkAanfO0wnZk0ump2Do=
Subject key identifier: A1:80:F1:A3:33:36:DC:B9:B6:3D:57:98:EB:14:C0:89:E9:A7:AD:7F
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492CB23C36713EA615521CFE80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9ac489b-8c67-3c4f-bb5d-b2913681cbed.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 397202
IP address blocks: 192.30.45.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 18 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b2:3c:36:71:3e:a6:15:52:1c:fe:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=24c9bf73-3a5d-4678-bda4-f73f43439654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:63:36:0e:8a:d4:56:a3:1b:11:e2:37:0d:d0:
34:cd:c4:25:d5:30:55:7b:40:09:f2:50:41:65:b5:
3a:ea:65:3e:d5:59:d2:5e:8f:23:24:4a:18:a1:f9:
28:b6:9b:ab:a6:4e:ab:08:04:97:f8:67:fb:a6:b6:
d6:d1:cb:1d:a8:d7:85:dc:17:18:c5:1b:e3:99:c7:
de:d9:c4:fd:6a:f2:16:db:aa:50:1f:09:50:d0:7a:
fa:8d:c7:25:7d:6b:1e:a8:fc:37:67:b4:95:2e:cf:
1c:52:f1:80:18:a3:70:b8:75:0d:28:98:d8:f9:9a:
a1:8f:c6:1a:58:ad:35:68:78:0b:7c:47:00:bf:18:
50:4e:44:b2:26:d8:8d:e0:c8:7a:4f:d2:cc:b0:56:
f5:a3:21:4b:3b:2e:39:26:55:9f:c2:76:96:8d:c1:
a2:7b:cf:13:56:98:f3:87:75:57:bb:eb:5f:64:f8:
86:20:42:4a:06:c3:2a:d1:7b:b4:1e:ad:07:ee:e0:
5a:e0:da:db:12:81:56:c6:d3:44:c7:5e:90:e6:fe:
4a:0e:ab:a1:db:f1:bc:e7:5a:b9:49:fd:a9:f4:79:
ab:b2:8f:07:1a:e3:d2:18:aa:d9:39:e9:89:b2:3e:
96:16:29:2f:c1:3e:35:1d:6e:a1:ee:ac:f4:62:3e:
1e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:80:F1:A3:33:36:DC:B9:B6:3D:57:98:EB:14:C0:89:E9:A7:AD:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9ac489b-8c67-3c4f-bb5d-b2913681cbed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.30.45.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ba:b0:f2:80:34:28:b3:5d:9a:86:ff:60:b1:75:41:34:4e:73:
fa:f2:a5:8a:4c:d5:bc:8d:db:a2:d3:88:cb:8b:c1:3e:22:43:
bb:0e:2c:28:de:2d:fc:79:ac:a2:8c:f3:63:dd:d2:51:f6:02:
23:d7:d7:70:20:9f:8a:74:20:4d:92:f4:0a:cd:6f:df:fe:2f:
04:75:93:3d:de:74:72:61:12:a5:ed:59:9f:30:3e:36:5c:77:
82:dc:65:32:36:75:de:e5:50:0c:0b:b8:31:94:31:ed:85:5d:
79:18:30:48:70:43:79:ee:3a:05:54:80:b8:be:07:47:5d:e8:
c7:d3:09:4a:73:29:12:56:4c:80:0b:65:42:e7:df:ca:30:81:
e5:df:11:ad:1a:28:b2:45:1c:fb:5a:23:30:50:b7:60:2f:d3:
15:59:97:8d:f1:4b:2e:bd:f7:48:44:8e:90:4c:3b:f2:35:17:
0f:d0:9b:a4:42:74:ed:29:52:41:26:a1:92:8d:ed:d3:fc:f8:
8a:e1:27:8d:2d:96:84:16:c9:eb:72:b1:6a:ed:5e:c6:13:48:
57:e1:ba:cd:df:29:aa:27:3c:a1:08:81:a0:78:b3:a5:53:6d:
2c:05:4b:72:a7:3e:8c:e3:d6:18:35:87:f4:16:d2:9e:56:48:
b2:ca:66:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:38:19 2025 by rpki-client