Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fb33ff8c-105d-39ed-90ee-4e7cc628ad19.roa
File: fb33ff8c-105d-39ed-90ee-4e7cc628ad19.roa (raw, json)
Hash identifier: 2aSMOzbgab1d8nbmiecqaxv9I5lcrzp9UF6sVw0o5+g=
Subject key identifier: 76:84:1F:48:87:68:96:3B:13:42:79:CC:85:87:E3:CD:9F:03:65:BF
Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial: 010D0C9F4328584965BA7A271874DC3EA6067900
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fb33ff8c-105d-39ed-90ee-4e7cc628ad19.roa
Signing time: Wed 02 Apr 2025 23:26:12 +0000
ROA not before: Wed 02 Apr 2025 23:26:12 +0000
ROA not after: Tue 01 Jul 2025 23:26:12 +0000
asID: 401152
IP address blocks: 198.20.144.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:65:ba:7a:27:18:74:dc:3e:a6:06:79:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
Validity
Not Before: Apr 2 23:26:12 2025 GMT
Not After : Jul 1 23:26:12 2025 GMT
Subject: CN=2d7cb6d6-1d99-4c53-bc3d-61e92c2c3ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b3:9b:98:28:f9:fb:7b:b2:f7:5c:18:af:cb:
95:31:ad:82:b9:34:fd:3f:85:05:89:48:dd:b7:1f:
cc:c6:71:d1:99:af:b7:18:ad:c8:58:7f:f5:81:3c:
ec:5f:45:d8:12:c2:b8:ce:f2:6a:c3:3c:c3:65:b5:
c2:81:ce:a4:7d:1e:c5:1e:6d:e7:54:c9:85:47:d3:
99:22:96:f6:eb:52:2b:d7:57:7f:a5:62:b8:a9:52:
78:2d:d3:0a:f0:fc:f4:83:89:88:70:73:e2:72:d2:
39:58:8e:34:50:8d:2c:8b:84:be:49:1c:32:19:70:
63:b8:c9:ec:ec:f1:de:53:cb:35:4c:72:93:a5:85:
9f:46:b5:6a:4c:9b:50:fd:5f:99:04:fc:c2:19:b2:
3d:66:f2:b2:91:72:d5:da:54:55:74:10:7e:92:c5:
d4:5f:90:38:12:03:bd:aa:39:95:83:c7:ad:4b:20:
56:e1:ee:3e:67:18:2c:1b:78:a9:af:8b:6a:2b:fb:
b2:34:ca:54:9d:96:7a:11:ab:9d:28:6c:0a:35:c9:
df:1a:ab:60:e0:55:ae:9c:af:3e:72:d6:76:3f:23:
56:70:c4:ee:5f:1f:54:cc:be:6e:58:10:68:05:af:
96:e3:57:08:19:d0:15:7a:0b:b5:14:91:8e:5e:a8:
8b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:84:1F:48:87:68:96:3B:13:42:79:CC:85:87:E3:CD:9F:03:65:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fb33ff8c-105d-39ed-90ee-4e7cc628ad19.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
X509v3 Authority Key Identifier:
keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
sbgp-ipAddrBlock: critical
IPv4:
198.20.144.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:f8:48:a8:36:46:9c:6b:0a:e7:fb:b7:73:4d:b3:e7:e3:da:
5f:8b:eb:e3:1d:c4:fc:85:1a:92:dd:93:4d:91:f1:59:f2:52:
b1:ae:9c:45:10:2d:3b:f3:61:2a:28:95:e7:45:86:6c:c4:17:
17:b8:25:a3:af:66:ac:f9:b6:88:65:ca:73:6a:a2:24:62:fd:
3d:68:4d:12:bd:8b:b1:10:b9:54:72:e6:14:ea:fd:1d:ac:c1:
31:11:08:3a:c6:72:6c:01:47:de:20:06:20:0c:e7:0a:2c:3c:
fd:a9:bc:9f:67:b1:fe:40:75:bd:81:fa:b4:6e:4b:a4:c4:6c:
a2:27:af:f9:aa:d0:28:5e:85:66:14:f2:58:3a:fc:d9:df:0b:
74:50:a2:03:00:c1:e5:6a:f9:fc:92:27:86:e3:d4:7f:d3:2d:
a5:61:da:4f:4b:f0:34:ec:a9:52:bb:aa:fb:cf:89:07:d1:88:
b8:4d:96:cf:ec:d6:70:97:7a:84:7a:cc:19:0d:a8:33:26:60:
04:24:8d:2c:4a:7e:3b:3d:47:f3:61:89:11:50:a3:75:3c:e3:
cd:a2:62:b2:ea:71:86:53:f1:3a:98:64:d8:64:99:28:06:0f:
79:d7:20:5d:7e:cc:70:04:69:78:75:9e:7b:b6:5f:ad:9f:0f:
ea:49:e2:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 11:15:51 2025 by rpki-client