Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/726d2601-d90e-3525-b3c0-20a59786df1f.roa
File: 726d2601-d90e-3525-b3c0-20a59786df1f.roa (raw, json)
Hash identifier: BXhrK9r9z7PoJnF8BWyV9zTIR7efIBRFY7xC5MzWRAg=
Subject key identifier: DD:E7:54:13:7B:92:37:02:D6:A8:43:16:19:74:0F:0E:D5:D2:31:04
Certificate issuer: /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
Certificate serial: 010D0C9F432858491AA6C6D431937027E7159B80
Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/726d2601-d90e-3525-b3c0-20a59786df1f.roa
Signing time: Fri 07 Mar 2025 02:00:39 +0000
ROA not before: Fri 07 Mar 2025 02:00:39 +0000
ROA not after: Thu 05 Jun 2025 01:00:39 +0000
asID: 394708
IP address blocks: 216.255.0.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1a:a6:c6:d4:31:93:70:27:e7:15:9b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
Validity
Not Before: Mar 7 02:00:39 2025 GMT
Not After : Jun 5 01:00:39 2025 GMT
Subject: CN=35d05077-9dba-4ab1-b90a-25c294b57017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f7:37:3e:a6:7a:14:44:ab:c2:df:d8:bc:05:
26:63:b2:25:52:25:37:25:4d:a2:f9:95:23:83:ac:
12:ab:96:2d:b8:e4:21:c9:d0:ad:b1:f5:d0:b7:fe:
b6:91:3f:88:3a:5f:f6:75:34:2e:42:d7:b6:6c:db:
c9:57:7d:1b:80:75:b7:04:18:b4:56:4b:64:41:39:
41:de:9f:68:2d:83:e0:d7:4b:18:4d:74:cc:93:0f:
fa:c9:32:e5:cd:30:1f:5c:08:86:51:cb:1f:4a:42:
5d:24:aa:a9:fb:29:66:41:13:4b:b5:b9:03:cb:c6:
5c:94:47:e5:3d:d6:20:8f:2c:93:59:bd:c6:77:99:
78:28:a7:8b:9f:51:76:aa:50:33:06:ee:ee:85:df:
5c:a2:d4:87:8a:46:56:a2:5d:18:3e:bf:53:da:0a:
6d:08:3f:23:23:09:43:8c:69:21:e1:9d:18:11:54:
a5:ff:d0:ac:3c:2b:84:3e:2a:c9:bf:3d:cf:52:f2:
a4:23:a1:da:07:20:e9:4b:b0:a4:50:b6:80:12:e3:
3d:39:40:92:f5:d6:1c:d2:d9:03:54:b6:07:b9:09:
3a:8c:5b:60:9b:5e:a4:8c:a3:78:f8:2a:fb:53:25:
2e:2b:3f:3e:fd:d5:5d:71:71:20:91:96:23:4d:f6:
1e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E7:54:13:7B:92:37:02:D6:A8:43:16:19:74:0F:0E:D5:D2:31:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/726d2601-d90e-3525-b3c0-20a59786df1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl
X509v3 Authority Key Identifier:
keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
sbgp-ipAddrBlock: critical
IPv4:
216.255.0.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:50:50:a0:dc:c5:36:d9:16:12:8a:89:95:0e:47:1b:b4:ed:
42:4a:52:f4:5d:26:e7:97:88:d7:ba:e1:c2:80:b4:91:e5:18:
e5:35:8f:94:93:16:17:a1:72:2c:20:c1:59:91:69:fa:4e:07:
6c:3d:64:14:0c:28:e9:35:43:f1:15:8a:52:01:17:2c:91:05:
e4:18:47:c8:6e:37:4f:3d:12:58:23:80:3e:da:36:bc:87:8b:
c7:ee:2c:ef:f3:da:10:02:d9:e7:df:c6:5d:6d:08:71:28:81:
e7:b2:c1:1b:4e:ba:e0:bd:aa:50:0d:5a:79:09:8e:ab:8d:19:
93:17:f7:96:78:a2:23:eb:89:4f:20:9d:73:dc:e8:71:31:6c:
8f:57:c3:95:2f:56:a9:40:d9:fe:3e:e7:a2:46:1a:7a:c9:d7:
e4:f9:b3:20:a2:8a:18:8a:88:dd:3a:4f:57:c3:3d:84:e4:75:
bf:b4:e4:11:39:99:84:86:8f:38:11:c2:b5:7f:88:be:db:82:
13:ce:8c:70:6e:06:a8:e0:b9:17:70:dd:8c:4b:d5:fc:94:46:
61:77:1e:4a:b3:54:79:86:20:61:9d:10:d3:43:d7:b9:2c:ad:
99:c0:76:17:b3:82:38:b5:0b:e1:1f:d7:eb:d1:61:74:9e:13:
08:aa:f7:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 22:37:56 2025 by rpki-client