Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/10a08293-f811-4992-99bc-b944a4121d2e/f5a8ea48-d01d-30a8-9219-e7ab4ba15afd.roa
File: f5a8ea48-d01d-30a8-9219-e7ab4ba15afd.roa (raw, json)
Hash identifier: GCrFwLgUn/msiCQ16IwdhKjcPYLj/8usaDZpslz5waE=
Subject key identifier: C8:62:3E:4F:FA:C0:C3:66:F4:8A:B2:5A:1A:07:65:14:C4:45:9C:F7
Certificate issuer: /CN=10a08293-f811-4992-99bc-b944a4121d2e
Certificate serial: 010D0C9F43285848C41B806134355F830729D580
Authority key identifier: EB:15:01:BB:8E:FC:CA:05:D8:EF:94:7F:43:6B:29:6D:10:D7:0D:12
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/10a08293-f811-4992-99bc-b944a4121d2e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/10a08293-f811-4992-99bc-b944a4121d2e/f5a8ea48-d01d-30a8-9219-e7ab4ba15afd.roa
Signing time: Tue 04 Feb 2025 02:00:40 +0000
ROA not before: Tue 04 Feb 2025 02:00:40 +0000
ROA not after: Mon 05 May 2025 01:00:40 +0000
asID: 398015
IP address blocks: 172.86.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/10a08293-f811-4992-99bc-b944a4121d2e/10a08293-f811-4992-99bc-b944a4121d2e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/10a08293-f811-4992-99bc-b944a4121d2e/10a08293-f811-4992-99bc-b944a4121d2e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/10a08293-f811-4992-99bc-b944a4121d2e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c4:1b:80:61:34:35:5f:83:07:29:d5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10a08293-f811-4992-99bc-b944a4121d2e
Validity
Not Before: Feb 4 02:00:40 2025 GMT
Not After : May 5 01:00:40 2025 GMT
Subject: CN=99f8fd18-a342-43c5-b3db-051822ca4684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b5:2b:14:6a:82:b3:f6:4e:7d:a8:aa:1f:6a:
01:35:af:75:f6:ac:e2:7e:0c:6d:b8:82:83:83:08:
b5:a9:1f:c1:6e:18:6d:dd:22:8e:ca:a9:26:84:25:
73:c7:d2:7c:49:fb:93:19:29:63:cc:33:2e:2f:34:
06:c6:63:ff:00:03:4a:4c:c0:2b:f5:63:a2:6a:77:
d0:d4:4b:0c:42:e5:1c:9b:82:d3:d5:c6:58:95:ea:
98:77:7d:a5:29:98:82:98:c8:35:19:bf:90:cb:90:
ac:4d:5a:6c:7a:e5:db:65:5b:33:a4:78:3a:72:5b:
e4:a5:f1:4e:26:db:d8:6d:a4:52:e9:ec:8a:c3:ff:
73:86:81:b3:52:8e:f9:4f:16:06:37:11:f3:f0:3c:
dc:cb:65:0e:79:f9:32:04:86:42:ab:bb:64:ae:b2:
b8:d4:5a:b4:82:2a:f4:f5:83:13:fc:82:1a:20:12:
e4:9f:84:ff:dc:76:73:51:2e:f9:fb:6f:b3:98:61:
47:7d:45:b8:2d:46:a1:39:5e:19:4c:67:79:db:82:
0d:e4:e7:52:dc:44:46:f6:66:76:67:e8:7a:f2:10:
c8:90:76:66:2f:45:98:f3:16:95:97:4d:ca:91:9a:
17:9a:09:07:08:1f:88:31:5e:d4:3c:87:8f:64:76:
bb:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:62:3E:4F:FA:C0:C3:66:F4:8A:B2:5A:1A:07:65:14:C4:45:9C:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/10a08293-f811-4992-99bc-b944a4121d2e/f5a8ea48-d01d-30a8-9219-e7ab4ba15afd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/10a08293-f811-4992-99bc-b944a4121d2e/10a08293-f811-4992-99bc-b944a4121d2e.crl
X509v3 Authority Key Identifier:
keyid:EB:15:01:BB:8E:FC:CA:05:D8:EF:94:7F:43:6B:29:6D:10:D7:0D:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/10a08293-f811-4992-99bc-b944a4121d2e.cer
sbgp-ipAddrBlock: critical
IPv4:
172.86.239.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:e7:45:a6:1e:0f:fd:99:24:0d:b8:c6:b0:76:f8:51:41:0b:
e6:04:dd:e7:40:2b:0a:d8:d0:15:3d:35:04:6f:50:b1:2a:50:
63:45:cc:d7:ff:2d:1d:9b:33:0e:87:f2:1c:b4:f0:41:78:a8:
5b:59:a5:f4:9a:79:71:63:03:da:05:07:04:2c:b2:05:80:36:
ae:b2:57:4f:a4:40:0c:74:45:1b:64:33:ba:88:87:94:52:76:
ff:f1:66:78:38:bf:26:e9:fb:54:af:96:bc:ba:0f:e2:46:96:
bb:f5:43:bf:0a:75:cc:0d:48:b0:f8:f0:41:0b:cd:82:0a:ea:
7c:45:03:dc:c0:23:9a:b0:07:0d:97:86:2f:b4:f9:a8:45:26:
5d:e4:c0:1b:f5:7f:ce:0e:1f:a7:50:94:0e:27:96:17:6c:d7:
4f:aa:c5:e2:dc:87:15:d1:93:82:c1:e6:9c:93:01:3e:e6:57:
11:90:1b:d0:e7:59:56:35:35:07:91:7b:5b:1a:b2:b9:97:9b:
18:34:94:fa:b1:45:54:af:bf:b7:7b:86:98:3e:9e:1d:92:d8:
41:ed:6e:6f:67:df:03:70:71:34:5b:47:20:a8:21:99:8e:4b:
4b:2f:59:0b:d7:19:08:e7:c8:1f:c0:98:a9:18:27:1e:f4:bb:
ad:82:64:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:10:53 2025 by rpki-client