Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f11e9396-48e0-3986-a047-acf3232bc831.roa
File: f11e9396-48e0-3986-a047-acf3232bc831.roa (raw, json)
Hash identifier: k6ypgyRz4x/aX1HjvRRgwVX2G8na6Ckx+Ff/75egGQk=
Subject key identifier: 3A:EB:45:49:BE:BD:A1:2C:1E:36:5B:89:44:BA:9C:5C:88:E1:AC:BD
Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial: 010D0C9F43285848F00C48FF5909FE84CD139740
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f11e9396-48e0-3986-a047-acf3232bc831.roa
Signing time: Wed 19 Feb 2025 19:45:39 +0000
ROA not before: Wed 19 Feb 2025 19:45:39 +0000
ROA not after: Tue 20 May 2025 18:45:39 +0000
asID: 204957
IP address blocks: 142.111.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f0:0c:48:ff:59:09:fe:84:cd:13:97:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
Validity
Not Before: Feb 19 19:45:39 2025 GMT
Not After : May 20 18:45:39 2025 GMT
Subject: CN=4ae9a2f3-e046-4903-9a9f-73aa5ebbfbf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c9:53:e1:5e:30:42:b3:2e:0a:44:74:b6:2e:
60:c9:cc:e8:81:5e:d8:b4:a5:eb:17:7d:f3:7b:88:
d4:0c:a2:42:97:07:ce:7f:dc:e1:95:0b:4f:44:9c:
42:42:8d:78:11:32:42:eb:82:6d:5e:26:f2:dc:a4:
42:3f:6b:a1:b3:df:f7:c6:b5:aa:8d:28:69:19:eb:
e3:3c:fd:e7:f3:c6:c3:f6:5a:63:04:61:f8:cc:3c:
6d:c7:a0:c4:70:1b:14:fb:bb:ab:f5:c7:93:e0:4a:
cf:ec:45:d6:15:e2:8f:b1:6a:8b:c7:a9:e7:c7:7e:
eb:ce:a0:af:9c:f3:4c:93:b2:e8:51:45:8f:be:d4:
5f:15:10:04:c0:1c:b1:7c:40:ba:76:6a:35:9c:3b:
95:ff:e8:98:ea:49:a2:61:22:f6:5e:7c:f8:8d:37:
d6:fc:7d:46:84:f3:66:60:f2:61:5f:6f:96:09:5c:
b7:f9:c3:15:66:ee:a4:97:43:74:a0:95:04:50:13:
03:ff:4a:70:a1:0b:5f:e2:7f:06:bd:bc:9c:4f:1a:
d7:c3:1f:2d:77:5d:e7:91:a6:19:45:ef:63:6f:46:
68:98:78:80:2d:c2:81:71:21:b4:f8:8d:53:f0:b2:
71:36:02:fb:3f:62:cb:b5:22:9f:e8:9c:e6:5c:7a:
dd:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:EB:45:49:BE:BD:A1:2C:1E:36:5B:89:44:BA:9C:5C:88:E1:AC:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f11e9396-48e0-3986-a047-acf3232bc831.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
X509v3 Authority Key Identifier:
keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.111.43.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:12:68:59:48:ca:5b:a1:4a:75:8f:33:a2:e7:4e:cd:39:06:
93:ba:f7:aa:26:7f:dc:9c:a0:2f:df:07:ef:c8:37:b1:95:ab:
50:5c:e2:a2:40:2d:20:c1:5c:48:91:95:b4:43:01:b2:62:11:
e5:e9:9c:9d:bc:c6:4f:66:d3:12:52:37:d2:f6:53:c8:f5:96:
fc:75:a0:cb:d0:8f:e0:fd:6a:a0:26:a7:70:98:1e:60:af:20:
59:7f:f2:a2:f1:ed:cc:92:72:17:c8:36:9e:42:b1:5e:1b:71:
d8:1e:22:3e:1d:26:21:31:e6:38:5a:6c:aa:07:67:8a:cd:a5:
c8:3b:8b:79:c6:06:76:7e:51:8a:25:ca:7d:9e:c7:38:6e:4d:
9f:2b:e1:ae:3c:90:d6:b4:7e:4a:6e:fe:da:b8:48:ad:b3:a5:
3e:5a:e3:a4:f7:e9:44:ee:78:90:bb:94:db:99:0b:f0:ac:36:
f9:9c:04:b5:fc:6c:20:20:12:53:43:9e:95:f3:bd:b6:5f:83:
86:7c:8a:fe:88:8a:6c:d8:05:f4:9b:53:56:f7:5e:d5:aa:6e:
c7:b8:27:08:0c:24:e6:ca:61:be:cb:c6:01:f8:af:fc:db:f2:
be:03:28:bb:62:db:d5:f6:bd:e5:a2:38:48:e2:19:70:bc:5f:
21:58:c1:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:17:09 2025 by rpki-client