Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d85e0b0a-8bee-3516-a93d-52ff69c21efa.roa
File: d85e0b0a-8bee-3516-a93d-52ff69c21efa.roa (raw, json)
Hash identifier: EF+BbpX3gfB6zyoZLjOnp+GKkQ1UFF57EbgYtTytnSg=
Subject key identifier: EB:2A:BE:6B:09:4F:5E:BE:A1:BA:DE:05:BE:B9:7A:CB:AD:B7:0B:55
Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial: 010D0C9F43285848AF2BA3F41ADC33CD9A93D050
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d85e0b0a-8bee-3516-a93d-52ff69c21efa.roa
Signing time: Mon 27 Jan 2025 14:00:52 +0000
ROA not before: Mon 27 Jan 2025 14:00:52 +0000
ROA not after: Sun 27 Apr 2025 13:00:52 +0000
asID: 18779
IP address blocks: 23.27.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:2b:a3:f4:1a:dc:33:cd:9a:93:d0:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
Validity
Not Before: Jan 27 14:00:52 2025 GMT
Not After : Apr 27 13:00:52 2025 GMT
Subject: CN=272161d7-4ae6-44e8-980f-fc6ae41ecc4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c4:e9:70:24:e2:da:f2:06:7e:05:14:83:3d:
29:1f:e0:9c:d3:3b:b0:95:e3:e6:cc:9c:05:76:61:
1d:7f:f4:a3:67:ad:15:4b:63:5d:7e:56:ca:d7:15:
a1:1f:49:91:d2:b2:79:64:c8:09:cd:5d:49:aa:ab:
80:cc:e0:d1:56:c8:cd:b5:d4:2a:79:4e:04:db:74:
80:b4:c5:c3:45:2e:dd:47:63:d6:99:84:31:b6:7e:
9f:69:79:b2:3e:fc:f2:96:6c:95:7e:c5:66:8f:48:
dc:b7:cb:9f:c7:30:52:56:e6:cf:35:88:7d:e6:6d:
57:9a:81:0a:f5:85:0f:d2:35:b6:0f:ac:56:0a:44:
f6:e4:32:d2:aa:6c:c7:42:22:de:d9:ac:77:e4:b6:
d4:fc:63:21:e4:fb:8f:97:cd:a4:bb:ac:a0:7e:5a:
e6:a5:eb:1a:f4:fe:17:be:62:5d:34:f0:b8:46:e0:
8a:c6:09:1e:13:b4:44:ac:f5:61:d9:e6:3a:09:12:
93:89:e2:e6:51:55:43:c1:40:4b:b5:5c:6d:f4:c6:
96:99:f5:b2:f7:08:28:ee:77:40:2a:ff:8c:b9:4d:
68:35:1f:6a:2f:bb:0d:e1:0e:d2:85:ce:66:ae:e8:
58:08:20:51:cd:e4:50:4c:b9:f4:07:23:c6:c9:c1:
48:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:2A:BE:6B:09:4F:5E:BE:A1:BA:DE:05:BE:B9:7A:CB:AD:B7:0B:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d85e0b0a-8bee-3516-a93d-52ff69c21efa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
X509v3 Authority Key Identifier:
keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
sbgp-ipAddrBlock: critical
IPv4:
23.27.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:49:5d:4b:85:92:ab:25:e5:0a:4e:c8:b6:80:09:ae:4f:e4:
13:b6:5c:b1:0f:8f:75:3d:dd:68:5c:07:99:b1:e7:01:26:6b:
b7:14:ff:de:8a:68:04:93:c5:30:72:2b:31:4f:e0:91:66:47:
f9:95:20:66:f9:24:9a:6a:9c:cf:95:63:37:9b:a6:1e:be:81:
61:aa:ab:95:0d:8b:b7:f4:73:bc:ff:19:16:02:c9:a3:45:e2:
af:63:16:0c:c2:72:02:5e:04:6c:09:56:ae:2f:1b:01:92:cf:
15:d1:23:ed:51:ec:82:c2:61:c7:5f:20:35:d9:b3:29:fe:84:
2e:62:be:8b:6d:0f:e4:f2:15:53:8a:cc:8d:66:78:a6:d3:c5:
75:a9:b4:9c:b3:10:82:88:b8:1a:c6:73:8e:17:30:c4:af:c7:
92:7f:81:2a:26:35:55:34:f2:bb:e8:c3:b7:ba:3f:df:fe:12:
78:09:64:7d:93:80:f7:77:8e:82:e5:2b:fe:21:29:3d:38:82:
09:37:15:73:94:3a:b4:fb:1c:69:38:51:f2:c5:58:57:3e:da:
90:0c:26:14:1c:a9:10:e6:c2:c9:45:41:36:54:54:e9:f4:c9:
f6:70:7d:14:d7:18:25:77:58:08:72:3b:0a:01:7f:db:d3:2a:
3f:47:14:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 11:33:22 2025 by rpki-client