Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a354a4e1-dea6-3346-841b-a8de392b1eb5.roa
File: a354a4e1-dea6-3346-841b-a8de392b1eb5.roa (raw, json)
Hash identifier: D17kqHpeaSAs7xyDCph5tnjbvu7awjxZP3YThinfq58=
Subject key identifier: DC:C5:39:D1:E3:78:5F:71:9D:BA:82:79:26:6B:17:8F:EE:3D:39:CE
Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial: 010D0C9F432858489FD0A071B5C8D7BDBFB9AE00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a354a4e1-dea6-3346-841b-a8de392b1eb5.roa
Signing time: Wed 22 Jan 2025 02:00:39 +0000
ROA not before: Wed 22 Jan 2025 02:00:39 +0000
ROA not after: Tue 22 Apr 2025 01:00:39 +0000
asID: 7018
IP address blocks: 142.111.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9f:d0:a0:71:b5:c8:d7:bd:bf:b9:ae:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
Validity
Not Before: Jan 22 02:00:39 2025 GMT
Not After : Apr 22 01:00:39 2025 GMT
Subject: CN=b7b8e373-6574-4d98-b9f0-858ad28f5f77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:06:1f:03:3e:7b:f1:c6:57:2c:7a:09:be:f2:
84:a8:6f:62:b2:8c:ab:29:76:9f:a0:4e:37:c0:1d:
f6:c1:ec:cf:d0:fc:cc:27:e2:ea:33:0a:bd:c0:0c:
94:ff:f4:78:7f:db:74:cf:2c:ea:68:68:76:08:b6:
91:62:39:f4:6e:c4:9f:55:e9:eb:15:02:20:00:8d:
60:8d:96:3e:08:be:5c:bf:d4:64:f2:3d:ad:b0:b0:
ef:4a:4b:5b:77:8e:91:6d:36:ac:46:bd:d7:b2:8f:
9b:cb:59:c0:da:cc:91:ca:8b:fb:a6:a6:12:b0:5b:
1a:03:41:35:cd:5b:63:51:7e:90:64:b2:70:30:52:
dd:1a:55:43:24:07:1f:ee:50:0f:b4:99:4e:d3:68:
68:58:79:81:4f:35:29:7f:b9:c9:43:92:c1:b1:bf:
35:8e:b7:47:b7:92:20:6a:ce:f5:15:0f:0b:f2:13:
59:40:93:92:9f:cb:bb:5b:45:7a:45:fb:27:0f:90:
77:cd:df:6b:1f:b6:69:9c:cf:5a:95:57:97:61:9f:
4f:6b:c9:13:b5:dc:40:74:9a:4e:19:21:c8:85:48:
67:66:bc:ca:d9:d7:0b:c1:41:33:44:cf:cc:c5:c7:
28:9d:8c:6b:bb:36:dd:04:03:55:b9:86:09:80:98:
29:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C5:39:D1:E3:78:5F:71:9D:BA:82:79:26:6B:17:8F:EE:3D:39:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a354a4e1-dea6-3346-841b-a8de392b1eb5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
X509v3 Authority Key Identifier:
keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.111.119.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:ab:c2:ba:4d:3e:dc:0e:59:6e:0e:8d:c0:2b:b2:e6:f0:b9:
ec:3b:61:5d:f8:b7:91:7b:d6:15:f8:5a:f0:ee:f6:13:9e:ca:
a7:8a:11:82:8a:33:15:45:e8:4a:1a:da:ff:d7:d9:73:6e:18:
1d:e4:93:43:61:ff:76:f9:07:cc:7b:c4:24:8b:c0:00:16:29:
f8:b3:ec:63:98:6f:4a:da:cc:14:13:5c:2f:a3:ec:dd:3e:46:
de:3b:94:01:c9:34:f2:12:a9:3f:a2:96:8d:d5:f2:fb:92:3c:
51:f0:63:19:66:5e:39:5c:18:f2:82:c3:b5:5c:ef:83:8e:5c:
62:36:b4:8e:f7:ce:d2:e0:0f:d5:71:27:0e:8d:f5:5d:cb:d3:
bf:73:d0:89:16:86:9a:91:46:e5:e7:92:ab:93:2d:6f:8b:02:
8e:f9:18:4d:63:e5:82:dd:15:d0:5a:d0:88:50:e1:b3:09:a6:
42:e2:cb:03:7c:94:51:21:c4:15:4e:32:f5:15:a3:2a:bb:27:
1f:8a:62:c5:62:56:e5:3b:66:55:15:e9:24:23:fa:73:68:b8:
c1:47:cc:0e:97:0b:2d:69:00:02:15:00:5f:a6:b1:35:c9:d7:
06:68:0a:58:01:fd:a5:52:3b:72:b5:27:14:37:04:80:f5:82:
fd:9c:a2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:40:18 2025 by rpki-client