Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/92af4c41-eadd-318e-a082-32421eec84d7.roa
File: 92af4c41-eadd-318e-a082-32421eec84d7.roa (raw, json)
Hash identifier: OGaqSzJVq/XSRIaA0b0GQm8U1yyBK9gmhJBavAvoIrg=
Subject key identifier: 33:5C:A8:28:A9:69:CB:BC:5D:6E:48:79:3F:8A:28:0B:57:BB:46:01
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848B4C0F9F64B12DB24E30AE3E0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/92af4c41-eadd-318e-a082-32421eec84d7.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 41264
IP address blocks: 104.133.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:f9:f6:4b:12:db:24:e3:0a:e3:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=210d0dbb-2a2a-469e-84f1-fbcd73fe4816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:96:67:6e:b3:4f:61:fe:4d:5d:b4:f4:cd:8e:
b2:84:42:1d:ca:4f:c7:66:27:19:83:62:ab:13:41:
89:bc:13:09:1f:43:ad:39:2a:70:bf:47:6c:45:40:
70:0d:0c:bb:81:76:0a:a6:f7:49:fc:f2:1a:23:c3:
f9:ff:57:10:c1:0a:3d:0e:2a:ba:c4:7b:25:e4:fe:
ed:21:5a:10:ec:69:23:23:54:6f:44:b4:ae:26:df:
b8:58:c1:25:8b:e7:b1:4c:88:97:41:6c:a0:f5:df:
23:cf:b3:fd:c3:a2:a4:e2:fc:e2:be:a4:b5:85:d1:
33:c6:3c:75:cf:39:06:eb:2f:11:e9:1c:2b:9e:8e:
7c:33:51:3c:5a:d3:f1:be:d3:c4:34:6a:77:37:25:
28:69:9e:5d:99:4e:96:d1:19:25:3b:eb:6e:b1:0c:
94:90:ba:e8:64:7a:ab:9b:a8:7d:28:0c:81:c9:a2:
b9:78:9b:56:96:20:3f:07:ee:ec:e5:ef:bf:d9:8f:
89:48:54:a1:9c:85:e0:63:e2:cc:43:57:97:1d:dd:
53:01:d4:b7:62:fc:26:a2:82:46:fe:bd:4c:60:93:
92:45:f7:0e:59:1a:43:7b:95:1b:9e:47:e0:d6:8a:
4b:77:af:1f:8e:4d:81:8d:5f:c7:64:61:ab:43:cd:
af:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:5C:A8:28:A9:69:CB:BC:5D:6E:48:79:3F:8A:28:0B:57:BB:46:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/92af4c41-eadd-318e-a082-32421eec84d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.8.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:e2:fe:7a:88:14:48:ca:ac:2a:95:1b:d8:47:7c:fa:a3:72:
c7:d5:c9:1d:d1:e2:33:c6:4b:eb:bc:16:6d:1e:9e:66:c6:1a:
ab:14:31:8e:93:5c:df:22:7b:85:fd:7f:30:ad:87:e6:47:b7:
5b:eb:cc:51:7d:a6:bb:59:95:5c:ae:f3:b5:05:91:aa:25:03:
a8:3a:20:5f:bd:58:70:eb:07:7d:6a:76:b8:dd:e4:e6:8c:f6:
10:d1:ca:0b:63:eb:6b:7e:e9:5d:17:c4:cd:0c:3c:77:6d:9a:
84:66:36:96:71:02:a9:b2:f3:cc:58:68:1c:12:c3:63:81:ee:
0f:b2:b8:fe:64:4b:3e:3b:4d:28:ae:f8:d8:5d:e3:fc:8b:90:
a3:3f:c7:69:c2:81:2e:02:38:ae:3e:03:ca:7b:85:c0:5e:bd:
d1:0c:82:72:79:02:24:01:22:26:a6:79:38:28:c1:27:2a:33:
6b:fd:f7:55:22:f5:7e:30:52:86:43:b9:cd:49:c9:17:b4:43:
39:cd:14:e7:aa:a3:45:21:bb:99:35:ef:78:75:fd:d2:79:2e:
8b:0b:f7:3b:9a:51:27:e8:9c:54:c1:6a:59:90:6a:91:06:5b:
9c:a9:4f:da:01:26:de:50:de:04:ac:3d:e2:74:1f:90:f9:b4:
75:cd:a7:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:01:31 2025 by rpki-client