Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f4570cae-5032-357c-9fcd-3b53c61fd7f3.roa
File: f4570cae-5032-357c-9fcd-3b53c61fd7f3.roa (raw, json)
Hash identifier: TnSXPtuF2HgO12wzI1jM9zrkI4F6v5piey5zyL4KHeE=
Subject key identifier: 83:13:48:DE:6C:C6:56:A7:AB:51:03:C4:37:C5:D1:B5:AB:F2:28:6E
Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial: 010D0C9F43285848F0087B258F5A5483A1FE0C60
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f4570cae-5032-357c-9fcd-3b53c61fd7f3.roa
Signing time: Wed 19 Feb 2025 19:37:59 +0000
ROA not before: Wed 19 Feb 2025 19:37:59 +0000
ROA not after: Tue 20 May 2025 18:37:59 +0000
asID: 44477
IP address blocks: 136.0.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f0:08:7b:25:8f:5a:54:83:a1:fe:0c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
Validity
Not Before: Feb 19 19:37:59 2025 GMT
Not After : May 20 18:37:59 2025 GMT
Subject: CN=ceebfdeb-be26-4882-a602-bb74952b5418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e6:36:e1:76:a7:4d:d8:70:19:53:2a:d8:99:
2d:3a:b7:d6:82:e8:b8:87:54:8f:6b:7c:d3:9b:15:
75:58:96:2c:48:fd:96:c0:ff:be:25:00:6e:03:21:
00:7c:fc:41:7d:18:39:f9:13:84:95:af:94:25:d4:
e7:db:da:52:d9:79:df:f7:0e:38:fc:65:46:43:c9:
fd:23:a6:84:ab:f8:a4:7b:9f:38:9c:c1:7c:0d:c3:
89:11:5d:6f:13:5d:20:b3:a6:c8:dc:2a:9f:d9:b0:
8a:1d:53:3c:ec:5b:88:a8:8c:d4:2e:78:b3:a6:12:
29:ca:24:d6:19:bd:a0:93:dc:47:f3:57:06:84:b1:
ef:9d:00:37:bc:a6:27:1e:99:9f:45:00:3e:ce:9e:
93:18:45:1a:ff:0c:ba:e4:1b:98:b8:5b:cd:4b:62:
24:a9:af:65:e1:bc:d2:32:66:09:35:fe:a2:ec:04:
69:fe:cf:3c:18:3d:2c:e6:0d:7a:8e:94:1f:64:80:
cc:a1:bc:17:1a:eb:a4:f9:9d:d0:16:67:77:38:b3:
1b:77:a9:a4:de:ed:23:f7:be:7e:e4:1d:77:81:8e:
d5:ed:7d:3d:80:0d:8b:ed:25:2f:ed:cc:cf:fe:ba:
cc:3d:40:05:9c:46:b9:78:33:4f:86:70:0a:3c:14:
79:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:13:48:DE:6C:C6:56:A7:AB:51:03:C4:37:C5:D1:B5:AB:F2:28:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f4570cae-5032-357c-9fcd-3b53c61fd7f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
X509v3 Authority Key Identifier:
keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
sbgp-ipAddrBlock: critical
IPv4:
136.0.159.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:ee:0a:c4:c5:c6:4f:06:9c:fb:12:cb:20:5a:d6:da:54:b5:
79:08:65:bd:57:93:82:fc:39:13:d7:d0:71:7a:24:c6:e8:bf:
25:8e:0c:60:8c:fd:b5:17:53:b7:92:cf:11:f2:3d:0d:99:53:
17:b3:76:dc:69:38:be:0d:89:17:a4:15:dc:88:4b:4e:16:05:
7b:20:54:f9:f7:b8:e4:8f:d9:7d:79:30:8d:58:a8:80:5b:56:
d9:48:55:f7:5c:94:10:6b:6c:e9:91:9a:80:cd:8c:3d:18:26:
a2:72:b7:c7:f4:a9:2f:fc:fa:88:09:b4:30:49:cd:73:ad:1a:
48:af:e2:ca:55:c1:26:12:78:56:f6:97:a8:4a:2a:84:6c:fe:
c3:b8:c9:eb:ff:c0:df:27:fa:3f:86:82:bd:56:b9:40:ad:b9:
23:02:49:1b:8f:7c:1a:98:79:54:31:65:bb:5b:43:dc:c8:df:
65:ef:1f:4e:65:4c:c0:e8:dd:a8:01:70:82:40:bd:36:a0:d1:
50:e7:f3:17:eb:9a:c6:33:ce:d5:d4:e0:78:ad:03:ab:ca:be:
e1:f7:12:8d:b9:8f:7c:63:44:42:4e:08:3c:36:ea:f7:34:d5:
f4:1f:c7:42:b3:e1:54:92:c1:3d:24:94:be:89:29:7c:61:9b:
be:1f:db:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:58:11 2025 by rpki-client