Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ef23d558-8838-3689-ad94-4a87d86b6d18.roa
File: ef23d558-8838-3689-ad94-4a87d86b6d18.roa (raw, json)
Hash identifier: cV+fAe1XuZnwl6TkG8OmPDvZo18Bu9lDD86/IxKzK2U=
Subject key identifier: BB:A4:63:D4:79:99:86:75:DD:C8:54:38:10:38:20:83:FB:5E:F7:2A
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848B1F649BCED32FFB0ECE49C40
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ef23d558-8838-3689-ad94-4a87d86b6d18.roa
Signing time: Tue 28 Jan 2025 14:00:52 +0000
ROA not before: Tue 28 Jan 2025 14:00:52 +0000
ROA not after: Mon 28 Apr 2025 13:00:52 +0000
asID: 41264
IP address blocks: 104.132.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b1:f6:49:bc:ed:32:ff:b0:ec:e4:9c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 28 14:00:52 2025 GMT
Not After : Apr 28 13:00:52 2025 GMT
Subject: CN=1a99b769-7da9-468a-bb9a-0ce23af86eb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:68:01:ec:97:2c:ea:d7:6c:4d:65:2d:25:54:
f2:ff:5d:8f:d0:2a:f5:92:ad:a2:98:9b:fe:a3:ec:
a6:40:f5:e6:e1:b1:f9:f0:6b:45:ac:82:81:be:87:
e1:82:96:d6:05:73:43:7b:05:a5:ac:9c:fc:9b:18:
90:54:0b:96:f1:df:ca:b1:10:28:53:d0:31:5c:20:
c5:32:ab:6c:69:3b:ee:37:3d:0a:6c:fa:1a:26:8a:
95:ba:f5:d8:08:0f:01:e4:15:31:7f:83:65:56:28:
d9:e0:64:f0:40:64:d0:e4:4b:f6:cf:80:25:24:81:
96:8a:73:b8:f7:ee:56:30:19:89:1b:07:27:70:7c:
85:d8:fe:d9:29:20:de:81:6e:d5:df:f2:99:f9:f5:
61:fa:1a:12:c5:29:d4:23:08:56:cd:76:99:ff:90:
2d:14:e4:2a:7e:7e:22:3b:e0:fc:9a:fb:03:10:54:
32:48:be:b1:2a:33:88:a7:f1:cc:7d:62:6d:95:a7:
1e:88:fb:2f:28:42:42:9f:29:8f:64:3a:16:20:11:
82:7a:bd:b8:13:5d:7f:7c:68:f5:58:cb:df:bd:ef:
fc:77:cc:7c:65:4d:3f:d5:83:77:59:cf:95:17:2f:
38:d6:8c:22:3b:7b:37:43:96:ce:87:26:f0:0b:97:
ba:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A4:63:D4:79:99:86:75:DD:C8:54:38:10:38:20:83:FB:5E:F7:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ef23d558-8838-3689-ad94-4a87d86b6d18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.132.241.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:c0:66:be:b8:ef:e6:e7:db:81:b6:b3:9d:64:f9:65:83:a2:
83:8e:de:15:b4:4d:19:09:58:cf:de:4f:58:15:50:84:c3:cb:
d2:3c:fe:3f:84:b4:94:b1:29:f9:65:97:f2:c2:fd:61:db:59:
b6:d4:d8:4d:4d:0c:60:6c:b0:b8:a1:06:c5:26:84:3e:1a:d5:
b3:a1:95:7f:69:c6:e2:ce:20:0d:0d:c1:b7:aa:ac:eb:4f:49:
a4:5b:1f:98:cb:09:85:b6:64:ae:02:b6:2b:e3:28:17:d3:d8:
a9:03:92:47:51:5a:58:ac:40:dd:96:a8:a2:4f:d4:27:62:ba:
10:66:02:70:c2:50:04:4e:04:d4:94:6d:d8:d1:5d:f8:71:dc:
7e:f3:87:b8:cd:6b:36:9a:cf:f9:4f:11:70:18:90:21:21:03:
00:3c:54:0c:b7:a8:6f:e1:58:3e:13:d2:d2:3b:19:23:34:85:
64:ee:e6:d9:6f:b4:05:35:dd:1d:d5:80:7d:c3:e1:75:0e:1d:
fc:e7:54:7a:38:6e:7f:28:32:ea:d0:a2:9e:e2:15:69:7a:a0:
f0:e1:9c:a7:e9:e6:34:1c:17:f1:a8:02:50:80:00:21:2a:b2:
3f:fe:89:55:74:8e:a4:d2:e6:40:ff:e8:03:0a:40:4c:1a:27:
c7:03:a9:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 02:50:45 2025 by rpki-client