Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3/f6cecee3-04a3-3f44-9077-09ff10710455.roa
File: f6cecee3-04a3-3f44-9077-09ff10710455.roa (raw, json)
Hash identifier: wLfeM8QKScVWut9MAU6bJCJ8NZXnyME6ItKOnQUCqFo=
Subject key identifier: 63:57:86:18:63:AB:8A:D5:F3:99:2D:C1:FE:A5:19:49:64:45:4C:80
Certificate issuer: /CN=56183502-983d-4114-a074-bf0eaa901de3
Certificate serial: 010D0C9F432858490F7C00C1432882DB5BE18100
Authority key identifier: A7:70:17:EE:B3:BC:91:78:E4:7F:7D:63:93:F5:25:DA:8E:9E:6C:27
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3/f6cecee3-04a3-3f44-9077-09ff10710455.roa
Signing time: Mon 03 Mar 2025 02:00:39 +0000
ROA not before: Mon 03 Mar 2025 02:00:39 +0000
ROA not after: Sun 01 Jun 2025 01:00:39 +0000
asID: 54363
IP address blocks: 199.193.20.0/24 maxlen: 24
199.193.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3/56183502-983d-4114-a074-bf0eaa901de3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3/56183502-983d-4114-a074-bf0eaa901de3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0f:7c:00:c1:43:28:82:db:5b:e1:81:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56183502-983d-4114-a074-bf0eaa901de3
Validity
Not Before: Mar 3 02:00:39 2025 GMT
Not After : Jun 1 01:00:39 2025 GMT
Subject: CN=ce2c0be8-39a5-490b-936d-99090867fa1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:91:8b:ca:a3:21:78:36:63:b9:80:9e:6c:d3:
51:88:13:b8:a8:b0:ad:3d:81:b1:73:81:a6:af:6b:
f1:ec:34:9d:33:24:a2:ac:97:a3:f0:0e:6e:00:d6:
23:47:03:3d:da:d9:f9:dd:ba:4a:95:9b:16:76:b4:
9d:24:b0:70:02:c5:67:0f:84:d4:09:a3:ef:2c:11:
d6:01:4d:81:ce:65:98:f4:21:06:f3:1e:12:f8:e7:
34:4f:b5:e3:53:1d:c1:e7:b8:ed:bb:31:fb:23:00:
6f:80:29:31:d0:53:35:0e:66:9f:a2:0b:77:27:de:
42:ed:8f:27:ef:7a:4f:3a:07:77:f0:dc:b3:cf:b9:
50:78:2b:25:28:25:ec:8c:f3:93:75:88:ad:52:9e:
69:fa:93:fb:25:0b:62:f0:8b:b4:67:3d:52:dc:04:
b4:d4:38:1a:93:fe:2f:29:d1:1d:f5:09:9a:b9:9a:
fe:b1:87:2b:3a:d0:72:ea:a2:78:f0:35:ab:b5:ee:
b9:db:d4:46:0f:e8:94:8d:85:73:d4:64:3f:42:5c:
43:39:a4:75:ca:d8:c8:30:84:5f:7a:1b:60:e8:47:
72:01:52:77:2f:84:3e:2b:1b:bf:c4:9d:3d:50:75:
3e:b6:69:0e:3e:71:41:11:63:04:01:65:d1:68:28:
66:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:57:86:18:63:AB:8A:D5:F3:99:2D:C1:FE:A5:19:49:64:45:4C:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3/f6cecee3-04a3-3f44-9077-09ff10710455.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3/56183502-983d-4114-a074-bf0eaa901de3.crl
X509v3 Authority Key Identifier:
keyid:A7:70:17:EE:B3:BC:91:78:E4:7F:7D:63:93:F5:25:DA:8E:9E:6C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3.cer
sbgp-ipAddrBlock: critical
IPv4:
199.193.20.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:4b:2f:5b:77:5c:57:f5:b3:c2:bc:77:13:a2:50:d1:69:d0:
05:19:ae:a1:20:76:94:9c:49:c2:7c:4e:e2:2e:6a:64:b5:71:
c8:a3:27:c8:ef:0f:45:f9:1f:5b:fd:dc:0f:bf:09:cb:17:88:
98:a8:54:7f:4e:d9:5c:6a:0d:08:5f:3d:87:b0:f4:ba:50:fb:
a1:7d:56:07:7e:ba:f6:79:8e:eb:e8:8f:0a:33:bb:36:6e:da:
6d:d4:04:8e:27:e5:a6:f5:17:02:a1:10:7a:8f:4d:fd:a4:1c:
b3:83:81:e8:87:51:7e:e0:32:9d:93:b4:a5:44:38:cb:5a:a0:
d2:06:d8:48:44:6d:00:70:5f:96:7b:a9:fc:b3:58:d6:8b:13:
d6:1c:19:a5:a2:73:35:9f:10:c3:d1:b3:b9:6a:ae:8c:a8:8a:
27:37:0a:70:00:e8:23:ce:30:61:7d:9d:77:57:23:7f:c2:03:
e0:1c:d4:b3:d0:a8:18:98:76:83:7e:7e:7c:4c:2d:88:01:4e:
3d:bc:47:66:1d:78:79:30:33:25:67:3a:8e:36:b9:3a:bc:14:
d1:60:41:f3:1a:5f:6c:69:65:3f:5b:f5:3b:fd:5e:14:28:d9:
bf:c2:7a:0e:86:77:49:b1:93:ba:2f:10:4b:cd:ac:5e:af:fa:
86:39:ac:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:59:52 2025 by rpki-client