Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e3cc604a-868c-3f8a-a272-53d8e91e8981.roa
File: e3cc604a-868c-3f8a-a272-53d8e91e8981.roa (raw, json)
Hash identifier: +wRfvt6yIWfQ9lBlYlK7aGa3p584oI2mWF/kq/Kg2Zw=
Subject key identifier: 65:F3:BF:BB:29:0F:82:8C:68:2E:FA:70:7E:3A:41:53:17:91:33:0F
Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial: 010D0C9F43285848A99660EA187710D0E8F06B00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e3cc604a-868c-3f8a-a272-53d8e91e8981.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 149440
IP address blocks: 166.88.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:60:ea:18:77:10:d0:e8:f0:6b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=c490d061-1db2-4839-936e-369771abeffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4c:59:dd:6e:d3:de:28:72:6a:1e:fd:b5:c0:
61:37:d2:1a:ca:f1:90:25:33:8f:64:c3:6d:78:ad:
09:3a:81:5a:12:46:35:02:9f:5b:f1:ad:c8:7a:74:
9d:aa:46:a3:04:5d:34:37:30:0e:33:bd:a0:41:81:
af:e2:73:37:8d:e0:80:e9:a8:88:74:91:bd:df:64:
b3:30:ad:b4:71:eb:67:0f:5a:f8:44:98:a9:29:02:
ee:7c:b3:5e:34:eb:67:9f:32:3c:4c:ae:aa:38:6f:
d2:cd:d8:ab:e3:e3:c8:67:8f:84:d7:d0:40:39:8d:
2c:57:64:40:f9:a9:7d:2d:cd:e1:5b:c7:f2:86:e9:
d3:ac:3f:e9:0c:b5:50:c2:f8:a7:e6:45:2f:5c:d9:
2f:e7:23:3d:48:ca:3f:06:25:17:fa:10:03:af:68:
f8:5e:de:e7:ff:d1:c9:d7:e1:8d:05:db:7d:a2:73:
19:b4:3d:b3:3a:f2:15:db:c3:f2:63:79:4a:14:f2:
ad:a6:48:34:6f:54:bd:a5:5d:e6:c8:66:d5:a0:4d:
4c:96:6f:d2:65:94:2c:09:ea:d1:9d:5b:3c:1c:f3:
e3:1c:8b:c8:75:cf:50:e7:1f:41:83:78:67:4d:11:
a7:14:91:ef:a1:48:f7:d8:b9:e5:5b:8e:fb:22:d7:
26:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:F3:BF:BB:29:0F:82:8C:68:2E:FA:70:7E:3A:41:53:17:91:33:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e3cc604a-868c-3f8a-a272-53d8e91e8981.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
X509v3 Authority Key Identifier:
keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
sbgp-ipAddrBlock: critical
IPv4:
166.88.114.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:67:9b:46:5c:a1:fa:33:b9:bc:27:3c:97:9c:43:9c:2a:ab:
7f:ec:22:d3:8b:dd:5c:e0:81:19:3f:6b:8a:a1:f4:b8:16:4d:
4f:8b:46:31:85:c9:1a:87:c8:61:6f:4f:16:3a:84:05:92:3e:
8e:01:62:df:e4:86:99:99:ec:d4:8d:81:34:5f:86:95:0b:7c:
bd:52:dd:16:ca:1a:5c:0f:38:24:bf:6d:bc:fd:d4:21:c6:0e:
b1:7f:63:e2:d8:4f:a0:ea:be:b7:79:97:68:da:69:e5:f3:b6:
af:ce:bb:dd:b3:0d:18:43:de:0b:3f:3f:fd:d8:3e:27:07:36:
03:be:f1:58:15:cd:6d:2d:4c:82:c0:33:63:a8:02:ad:4d:65:
38:b1:ee:7e:54:00:bb:72:07:c5:38:34:8c:30:2a:66:8f:a4:
ab:ef:3e:a1:35:13:33:1a:5f:03:e4:64:f9:d5:2b:09:74:72:
d1:16:d1:3e:6b:70:24:94:6f:8c:d3:bc:0a:42:b6:2d:05:b6:
cf:09:b9:59:0c:66:74:05:33:a6:57:1d:bb:16:d5:b2:f0:58:
2c:e6:15:d6:f0:cc:7e:71:77:53:8a:ee:64:ff:b3:3e:52:95:
12:54:a8:b4:a1:80:70:a1:f3:17:8e:1a:a0:17:1c:93:9c:39:
32:da:31:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:34:10 2025 by rpki-client