Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d2d3eb7e-6abc-36a1-aca0-d876649bbbee.roa
File: d2d3eb7e-6abc-36a1-aca0-d876649bbbee.roa (raw, json)
Hash identifier: xNjpwaI6PLYp9ohMLJqdxcNMsrugMa+jhO2SUmFaYEs=
Subject key identifier: 89:F0:65:9C:BD:3E:CD:61:FE:E4:94:75:C6:AA:FE:D6:73:B2:59:FB
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F43285848CB1661AB1DB8CE6A037B0F20
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d2d3eb7e-6abc-36a1-aca0-d876649bbbee.roa
Signing time: Thu 06 Feb 2025 14:00:52 +0000
ROA not before: Thu 06 Feb 2025 14:00:52 +0000
ROA not after: Wed 07 May 2025 13:00:52 +0000
asID: 13335
IP address blocks: 150.48.188.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cb:16:61:ab:1d:b8:ce:6a:03:7b:0f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Feb 6 14:00:52 2025 GMT
Not After : May 7 13:00:52 2025 GMT
Subject: CN=d347be24-9470-4e5c-bf78-0c4c74e734fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:4d:e5:93:b5:82:62:d3:25:aa:ae:77:fb:00:
8e:ad:5a:2c:3d:f1:ca:ee:a5:92:44:dc:f3:56:50:
b8:2f:1f:da:2d:a6:d5:36:fd:15:71:4a:79:3a:c5:
b4:90:04:eb:3b:ab:b1:e1:bc:15:6a:7e:1d:6e:48:
0a:da:c7:2e:f1:f3:92:61:61:14:d3:0c:74:8b:56:
86:0d:3b:dc:44:6d:97:d5:dc:59:de:0a:00:27:c5:
77:ed:a4:b4:d9:cd:2f:46:86:12:c3:7e:73:7a:b5:
b5:b3:1e:97:8a:55:df:b6:8b:1b:4f:e7:45:8b:9e:
2b:ec:0d:fb:15:83:b6:7c:50:80:18:21:02:fa:32:
35:57:32:10:f8:1a:c4:e2:ea:d4:50:6c:ff:8a:02:
7f:a2:06:c9:55:41:c2:85:06:06:3b:97:ed:e4:2c:
2d:7f:4a:a5:fa:d6:9d:6b:8a:53:60:1a:6e:ca:9a:
fe:a3:62:38:4a:e1:b3:25:d3:0c:d4:0a:81:29:75:
ef:83:17:2a:62:fd:2a:83:59:1d:4a:7b:c3:3a:ee:
e0:13:f6:47:25:74:d0:69:4d:90:34:0b:bc:00:ed:
91:1a:3b:45:94:55:d7:09:1d:2b:f1:e7:17:7b:43:
21:a6:05:28:66:0e:5f:eb:fc:22:34:a0:5e:94:10:
a2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F0:65:9C:BD:3E:CD:61:FE:E4:94:75:C6:AA:FE:D6:73:B2:59:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d2d3eb7e-6abc-36a1-aca0-d876649bbbee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv4:
150.48.188.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:21:fe:7f:42:4e:66:dc:54:11:51:80:4c:15:ac:cd:bb:ff:
7e:ca:04:8e:b6:1f:c4:a8:b3:a1:bf:04:49:f7:db:2a:6f:44:
98:5f:6d:bd:93:9f:6a:e4:46:72:e4:6d:96:2d:65:cc:8e:3e:
a7:bf:b6:5f:71:38:68:ef:3e:1d:ef:15:44:4d:a5:65:bf:e5:
ae:63:c3:9a:b7:14:0c:df:c2:30:0b:1a:e8:d5:eb:ee:68:89:
81:b0:c7:97:6e:3b:e6:e9:fe:06:7d:39:f7:33:86:22:93:72:
e0:8e:b8:87:4b:35:c0:f6:2e:d8:41:87:82:4e:6f:3c:1e:e5:
c5:e5:b1:1f:56:b1:04:50:44:32:78:25:53:ca:71:ff:3d:63:
bd:4b:f4:f8:ab:40:86:f8:93:40:f8:51:a4:fa:f7:d1:87:01:
57:55:df:71:cd:a6:f5:2b:30:bd:5d:af:37:05:f9:0b:65:24:
2d:bb:74:92:e3:5c:09:fe:93:85:03:af:5f:3c:95:44:30:82:
13:5c:71:9e:db:18:d1:a9:85:3e:78:b0:a1:b7:c6:5b:2a:d7:
a2:40:92:db:bb:82:1c:27:a1:99:c8:12:dc:13:a3:df:16:bf:
b9:f6:dd:19:de:24:12:98:fa:1c:55:f8:c8:f1:87:7b:2b:1d:
cc:99:31:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:51:50 2025 by rpki-client