Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057/ba10d448-b912-33bc-a392-2588e49baea1.roa
File: ba10d448-b912-33bc-a392-2588e49baea1.roa (raw, json)
Hash identifier: TwqzSu0MCzbc191sxxnWbgMrKTRO1YaZeliFvz/NWkE=
Subject key identifier: 07:C4:D5:F4:3F:94:84:B0:A1:C1:66:D6:16:FA:24:D8:73:06:9D:ED
Certificate issuer: /CN=6eb23b03-9d1d-412d-a56a-493aeaa5d057
Certificate serial: 010D0C9F43285848DEA11E28A0D369A59F5F4E40
Authority key identifier: 36:34:B6:69:CC:BF:86:C1:CA:BE:06:6D:34:F3:24:A6:86:D3:31:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057/ba10d448-b912-33bc-a392-2588e49baea1.roa
Signing time: Thu 13 Feb 2025 14:00:50 +0000
ROA not before: Thu 13 Feb 2025 14:00:50 +0000
ROA not after: Wed 14 May 2025 13:00:50 +0000
asID: 14977
IP address blocks: 198.99.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057/6eb23b03-9d1d-412d-a56a-493aeaa5d057.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057/6eb23b03-9d1d-412d-a56a-493aeaa5d057.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:de:a1:1e:28:a0:d3:69:a5:9f:5f:4e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb23b03-9d1d-412d-a56a-493aeaa5d057
Validity
Not Before: Feb 13 14:00:50 2025 GMT
Not After : May 14 13:00:50 2025 GMT
Subject: CN=e07df7f7-242b-4ca5-8125-a2520a3a879a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:98:a1:ea:5e:73:6e:39:86:2f:4a:9c:12:06:
4a:51:b3:11:4f:c4:22:1e:ac:ed:ac:74:2b:81:cd:
59:94:72:f6:bc:ac:57:8d:21:36:2c:3b:41:55:b4:
9a:a3:f0:e6:29:c8:ea:c3:d7:eb:fc:b1:52:97:42:
a4:45:4c:76:a8:31:d6:0d:18:c6:c0:50:1b:6f:9e:
29:4c:32:10:74:a2:cb:b5:ba:03:4b:3d:65:b9:17:
76:57:81:fb:8d:b1:04:40:f7:ab:3b:2d:85:a7:fd:
cc:54:f5:5d:ea:68:71:9d:2f:ce:0d:7d:17:7d:bd:
34:40:36:cf:18:52:ad:06:05:31:15:8f:78:09:1c:
63:f2:48:3a:40:d7:37:ae:65:bd:c0:c1:cf:bd:7c:
65:a8:6e:14:3a:a1:7c:6c:a4:bd:ee:7e:d2:6f:03:
e3:87:b2:af:c5:82:8a:eb:a0:25:7c:20:25:99:ed:
bf:6c:25:d0:44:17:67:00:45:9a:38:a0:56:d1:5a:
6e:60:df:d5:26:0a:6c:ca:b3:b7:ab:44:ce:e5:bc:
e1:c8:6d:d9:7d:c0:66:04:e8:5d:71:73:5a:08:bb:
9a:df:42:d5:32:34:a3:30:dc:dc:50:d9:6d:78:03:
f3:94:dd:a2:42:18:df:29:2e:41:a9:cf:4a:b4:ae:
31:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:C4:D5:F4:3F:94:84:B0:A1:C1:66:D6:16:FA:24:D8:73:06:9D:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057/ba10d448-b912-33bc-a392-2588e49baea1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057/6eb23b03-9d1d-412d-a56a-493aeaa5d057.crl
X509v3 Authority Key Identifier:
keyid:36:34:B6:69:CC:BF:86:C1:CA:BE:06:6D:34:F3:24:A6:86:D3:31:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057.cer
sbgp-ipAddrBlock: critical
IPv4:
198.99.171.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:78:f5:36:8e:ba:e2:8d:2f:36:e2:b6:2c:fc:c4:ce:e4:b5:
0b:f2:62:ad:ad:75:3d:da:24:98:9b:8e:48:2a:34:79:8d:a2:
64:ba:33:b1:93:8e:50:52:a6:8c:be:e4:c5:d9:48:f4:42:d4:
7e:75:44:17:b8:67:7a:96:80:c0:18:9f:1d:55:49:aa:71:2a:
e4:00:e3:6a:87:81:2a:ae:23:cc:d8:2d:be:29:93:df:7b:1c:
32:00:5b:27:36:f5:f9:07:57:ce:fc:f4:40:79:04:79:69:19:
15:20:6e:cb:74:e9:6b:49:ba:bb:4c:ec:5a:cd:ce:59:26:26:
99:b2:6a:e3:53:20:bb:b6:54:c2:d0:1f:e5:7e:9c:12:a2:bb:
b4:2a:33:12:74:bb:33:81:88:d8:9d:34:b4:92:a4:d5:28:a4:
06:b2:a9:d4:5b:7d:2f:45:01:b9:86:75:d0:72:8f:dc:18:cc:
1c:65:1b:25:ad:24:c1:af:23:1d:87:f4:68:74:57:2c:82:ed:
58:6b:86:02:53:7b:8a:e1:95:ba:b7:34:59:90:bc:8c:9b:bd:
46:47:46:5d:0f:88:9c:f4:77:dc:55:d3:39:04:5e:25:9c:c1:
0b:2a:aa:7b:5a:09:42:aa:0a:0f:aa:25:5a:20:b7:a2:c7:09:
4b:3c:f0:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 18:06:29 2025 by rpki-client