Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7411cf14-130e-3510-9ff3-ddec26e7b42f.roa
File: 7411cf14-130e-3510-9ff3-ddec26e7b42f.roa (raw, json)
Hash identifier: qXxkD193h2uinL99KOKA9M32ZhJm77ZUUeLfbpmBcwY=
Subject key identifier: 50:15:39:5D:CF:63:F1:59:83:80:F1:B3:EE:A8:91:C2:92:A0:5F:CC
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848BFEBBF483E7F57163AEF0300
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7411cf14-130e-3510-9ff3-ddec26e7b42f.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 15169
IP address blocks: 104.134.200.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 08 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:bf:48:3e:7f:57:16:3a:ef:03:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=1d51f424-414a-4d5e-aa4a-85ac05c3d18c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c2:2b:ad:0b:9a:2e:4c:9a:fb:5c:f4:5c:6f:
c5:31:9a:e1:f7:6f:a8:bb:da:0e:46:18:6c:f2:5c:
b4:eb:66:fe:3a:af:84:0b:61:73:0f:b9:e5:f4:4f:
46:0a:ea:3e:70:33:3e:3e:42:aa:8a:8f:29:62:05:
e8:ad:d6:a6:0b:d4:43:18:1d:f5:06:d3:ad:8b:2e:
c8:8e:12:8c:7c:42:7d:6d:81:c2:14:8a:ad:a9:9b:
02:d1:71:5d:f5:46:fa:e9:55:11:0f:c3:5e:fe:1e:
ee:6f:17:ab:a8:f5:67:9a:d1:2b:2e:54:17:aa:a6:
40:be:1a:61:82:1d:4b:db:93:91:0d:61:e1:9c:c4:
da:1d:c0:94:49:d3:cf:12:c7:28:a3:57:e4:5d:4a:
9d:ce:5d:1c:93:30:fc:5b:00:56:e9:2c:df:29:3a:
f4:66:3b:34:67:d7:5c:4a:f3:be:df:3d:62:77:56:
a7:de:61:fd:1e:2c:3d:f0:c6:b3:f6:bd:48:1c:6c:
9f:1d:1f:1f:d5:d6:a3:df:9d:62:75:23:91:ee:d9:
f8:40:f8:ed:f6:6a:fc:31:58:87:c1:0c:2e:e6:9c:
2b:65:d8:ed:47:9c:00:a3:39:67:38:ba:ea:e7:c9:
93:6a:12:3a:ba:1d:59:39:63:48:65:88:a2:09:39:
0f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:15:39:5D:CF:63:F1:59:83:80:F1:B3:EE:A8:91:C2:92:A0:5F:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7411cf14-130e-3510-9ff3-ddec26e7b42f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.200.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:3e:46:7a:a4:b8:ac:9b:ad:e6:37:26:12:6b:28:f2:c9:df:
3c:b8:6e:8b:06:14:fb:17:41:a1:f4:69:36:76:8d:53:cc:7e:
07:a1:25:47:91:e5:63:dd:bb:99:80:5d:55:2c:04:6f:cc:10:
a9:fc:4f:95:36:00:7a:b1:cd:c5:28:48:29:f8:31:48:26:9f:
75:83:78:6d:af:3a:5a:af:62:65:28:8e:3b:1a:47:a1:3f:63:
3d:9c:e3:e3:b0:a3:7a:1f:6a:92:5c:bc:9e:09:66:10:e6:0b:
ee:1b:08:f6:88:59:27:98:8d:13:48:f4:58:7f:34:74:1c:95:
c3:ac:c4:dc:a1:ce:d9:f7:74:a3:22:49:bd:a6:3f:cd:17:81:
83:d3:70:9d:fb:fa:3b:84:f2:05:9d:20:ff:37:df:a7:4f:43:
01:9d:d6:a6:de:9c:a1:c7:88:88:1d:3a:7c:22:6b:66:2f:61:
2f:37:d0:05:2d:a8:da:c6:5e:42:11:14:66:f3:45:be:87:90:
e1:23:71:60:4e:7f:26:c5:d1:01:bb:3b:0b:d3:f2:bb:5f:a4:
98:de:24:d8:2f:fe:bb:c6:b0:fe:b1:8c:63:28:9f:c0:88:f9:
71:9b:6c:c8:0b:e1:ed:7f:9e:54:68:2a:68:be:09:60:fc:1a:
ae:3b:bb:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:59:55 2025 by rpki-client