Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f90cbfca-0e49-3026-a8ed-b8723bf4ae81.roa
File: f90cbfca-0e49-3026-a8ed-b8723bf4ae81.roa (raw, json)
Hash identifier: rXTtlwprQjalsKmVmSIHqcYCglhQTPrw7upOJ1/KpHg=
Subject key identifier: 55:25:3D:0C:C4:91:85:50:E8:AB:1E:9B:40:54:EB:64:17:52:7A:9C
Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial: 010D0C9F43285848AF2BA56B444A16131AF50C00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f90cbfca-0e49-3026-a8ed-b8723bf4ae81.roa
Signing time: Mon 27 Jan 2025 14:00:52 +0000
ROA not before: Mon 27 Jan 2025 14:00:52 +0000
ROA not after: Sun 27 Apr 2025 13:00:52 +0000
asID: 18779
IP address blocks: 23.27.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:2b:a5:6b:44:4a:16:13:1a:f5:0c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
Validity
Not Before: Jan 27 14:00:52 2025 GMT
Not After : Apr 27 13:00:52 2025 GMT
Subject: CN=8400edac-7ac3-4f2d-9041-f2034eda901a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1b:c7:e2:9b:63:f2:d0:de:c3:f9:39:4a:43:
36:50:4a:6b:d2:15:0c:92:f5:76:1e:99:dc:ec:56:
28:4b:40:37:df:c7:c5:f7:b8:3a:57:82:f3:fa:f9:
d3:c2:da:2a:f2:0c:8c:8c:5b:79:a7:66:c7:70:f1:
94:4b:03:e4:c7:30:a0:61:a8:f8:33:54:1d:3e:f5:
6c:4e:d1:c5:6c:3b:06:00:36:91:dd:08:f7:b3:10:
a7:36:84:85:19:ef:8b:36:c2:9e:1a:11:4f:ed:12:
c3:8c:44:06:20:7e:1d:30:82:3d:5a:cf:b9:b1:1f:
07:b0:a5:dc:e8:3e:9f:7b:fd:72:5c:5b:32:7b:f5:
f8:c1:9f:10:90:08:d8:14:d2:15:1f:ba:6e:90:7d:
7e:60:26:7e:e6:b3:bf:c6:c2:2b:bc:bf:7c:49:b6:
a2:f5:3f:08:35:10:aa:12:fe:fc:da:58:bf:f2:a8:
e1:63:96:3c:b6:fc:28:1a:ed:c8:e3:0d:30:06:6e:
24:c8:64:b6:3f:5e:1e:ac:ab:ad:30:ce:ac:71:b8:
d0:ce:99:42:8d:4a:4b:6c:d4:2a:6b:9e:ef:27:40:
e5:12:6c:04:1a:92:0e:28:f3:ac:d1:55:66:2c:dc:
df:28:a2:b7:6a:d5:35:e7:ae:1a:f2:dc:5e:59:44:
4d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:25:3D:0C:C4:91:85:50:E8:AB:1E:9B:40:54:EB:64:17:52:7A:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f90cbfca-0e49-3026-a8ed-b8723bf4ae81.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
X509v3 Authority Key Identifier:
keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
sbgp-ipAddrBlock: critical
IPv4:
23.27.198.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:57:ae:6b:80:dc:12:a5:c1:05:8c:16:a8:1f:21:48:27:ee:
94:62:14:e3:21:12:a8:9a:58:05:dd:7e:8a:0b:13:3d:2d:a5:
db:26:72:e7:93:4b:94:2c:52:74:ed:12:54:6c:47:00:94:67:
9d:5a:f6:4a:48:1c:35:73:d4:d3:ef:9e:62:19:39:d4:9f:27:
74:be:0e:d7:c8:38:6c:24:bd:df:b7:1a:08:ac:8e:c4:03:a6:
ca:38:2b:af:99:87:86:1e:a4:8d:e0:c2:af:d7:0e:54:46:1d:
42:c6:b7:b5:f6:bd:45:4d:34:39:af:7d:cd:21:c0:e9:b2:4e:
b8:13:e9:f7:b6:97:4e:e6:c3:c9:bf:78:c9:4b:db:0c:1f:1e:
aa:4b:65:57:54:ac:33:67:4a:f7:76:d4:16:b9:95:aa:fa:10:
a8:19:ce:52:a2:a0:f5:93:a2:a3:e9:cc:37:cc:b0:bd:14:10:
ef:88:ef:76:5f:22:ef:da:5e:8f:5a:62:2d:54:81:a3:0f:1d:
e0:06:bc:bc:ef:70:01:c0:75:c8:87:0a:e9:14:cf:28:40:77:
6a:6f:bb:e2:a5:30:3c:23:1c:b2:c5:05:71:f4:4f:63:6d:a0:
e3:53:55:98:a3:a8:bd:bf:22:46:40:7f:b2:5d:ec:0f:06:c0:
9c:73:52:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:47:57 2025 by rpki-client