Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/e6b59060-fbeb-314c-92e1-fdb885fbedc1.roa
File: e6b59060-fbeb-314c-92e1-fdb885fbedc1.roa (raw, json)
Hash identifier: Zd7kqT5XtV6F8HlyK5O16flCD1GaQ6uLWAE6jRyTxsw=
Subject key identifier: 87:AF:6F:75:7D:A8:2D:A6:E7:1B:ED:00:2C:FB:42:16:C7:FE:48:9E
Certificate issuer: /CN=c9d5fed8-9c87-4745-b68b-390b14873b57
Certificate serial: 010D0C9F43285848E59BCA2BD85D443510E9BE80
Authority key identifier: 0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/e6b59060-fbeb-314c-92e1-fdb885fbedc1.roa
Signing time: Sun 16 Feb 2025 02:00:40 +0000
ROA not before: Sun 16 Feb 2025 02:00:40 +0000
ROA not after: Sat 17 May 2025 01:00:40 +0000
asID: 174
IP address blocks: 139.60.152.0/22 maxlen: 24
162.247.216.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e5:9b:ca:2b:d8:5d:44:35:10:e9:be:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d5fed8-9c87-4745-b68b-390b14873b57
Validity
Not Before: Feb 16 02:00:40 2025 GMT
Not After : May 17 01:00:40 2025 GMT
Subject: CN=02d396b5-a725-46b8-9541-e83b10cb7fd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f9:b5:fb:93:b1:81:ac:10:28:d9:c3:93:fb:
6c:38:1e:1e:34:ff:29:5c:db:c2:61:89:a0:34:2e:
db:56:dc:d3:db:a5:f7:6a:f6:ef:b4:cf:b4:5b:08:
6d:6c:57:a1:e6:5b:76:47:cb:56:76:4f:9c:0f:3b:
3f:88:57:4a:53:51:3f:5c:78:2f:7e:19:2d:72:9e:
da:03:d5:df:c1:38:c6:bc:e0:1d:01:7a:19:99:16:
57:4a:62:2d:31:5c:b5:3e:cc:db:4f:e2:86:9e:a4:
a6:d4:27:69:19:c3:1c:27:c4:bc:fe:8a:9b:a0:83:
50:4d:fe:70:2a:56:b8:35:89:9c:34:9b:1e:2e:a5:
25:e4:09:e3:e2:bd:e1:58:a1:c1:dd:11:76:05:c7:
7a:43:7b:2c:33:cc:d0:d6:00:1c:19:91:b7:3b:c8:
5c:1d:83:7e:b6:b2:5f:0c:42:f9:36:5e:3d:05:ba:
de:c9:d7:04:c8:84:36:4a:58:e6:95:a2:c2:ed:24:
99:a7:a2:fe:49:5b:0d:66:53:99:41:31:90:a1:0c:
f5:ce:c2:8c:b2:ad:dc:51:76:16:68:4d:12:fd:e5:
59:3b:dc:78:43:17:dc:c2:cd:c9:f1:3e:e8:50:16:
83:8d:12:bf:e4:d4:c1:8d:5d:da:ad:41:55:2f:90:
91:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:AF:6F:75:7D:A8:2D:A6:E7:1B:ED:00:2C:FB:42:16:C7:FE:48:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/e6b59060-fbeb-314c-92e1-fdb885fbedc1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl
X509v3 Authority Key Identifier:
keyid:0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
sbgp-ipAddrBlock: critical
IPv4:
139.60.152.0/22
162.247.216.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:1f:15:61:43:98:45:b0:f8:4b:f5:ff:ec:d7:92:78:ae:60:
18:b0:e4:33:fb:ea:09:13:33:f0:1b:69:f1:d6:a3:ab:92:63:
33:e7:1e:ea:74:f9:2a:57:18:dc:54:6f:65:0b:87:d1:63:d0:
04:12:68:36:ee:ba:ca:4f:d6:f6:ec:4e:71:92:9e:52:26:68:
bb:0c:c5:98:5f:42:02:7e:2f:d1:14:19:0d:38:42:eb:bc:fa:
bc:9c:f4:36:2e:58:a6:1e:bb:91:c3:74:22:5c:a0:9f:cf:30:
3d:f6:12:75:c7:bb:4a:21:e5:1a:21:9e:79:69:7d:2c:8e:6f:
f8:e4:5a:1a:00:59:96:a9:4b:87:a8:f5:4a:86:17:65:54:0a:
1d:ad:5a:83:56:bb:ce:cd:80:00:be:37:45:aa:4a:ae:45:59:
b5:02:b6:96:8a:82:e8:94:28:15:1f:48:22:b8:f4:e2:c3:ac:
ec:d1:fe:4d:44:65:d1:db:0f:4b:20:3b:14:38:31:75:4b:20:
ed:17:ca:7e:33:9f:c4:fe:1b:51:64:3a:4c:12:45:a1:29:ac:
8e:32:d2:20:f8:b8:72:33:a3:db:c6:a7:3d:6a:c5:06:8f:71:
33:bb:14:25:d8:43:5f:77:67:d4:c2:49:f5:f3:ec:11:82:8f:
2a:c0:6a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:59:36 2025 by rpki-client