Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c66da466-b538-30d7-b621-37261d8c17d3.roa
File: c66da466-b538-30d7-b621-37261d8c17d3.roa (raw, json)
Hash identifier: I6zxOybjNZH9VHXIf94YYcmc08W1gzdUfdw/W6NzBSU=
Subject key identifier: 8F:7B:08:12:7A:C5:60:A6:FF:25:DC:72:93:3B:8E:44:F0:3B:3D:C4
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285848CDE108A97B4AD745F7D47900
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c66da466-b538-30d7-b621-37261d8c17d3.roa
Signing time: Fri 07 Feb 2025 14:00:53 +0000
ROA not before: Fri 07 Feb 2025 14:00:53 +0000
ROA not after: Thu 08 May 2025 13:00:53 +0000
asID: 396576
IP address blocks: 216.168.228.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 17 Apr 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cd:e1:08:a9:7b:4a:d7:45:f7:d4:79:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Feb 7 14:00:53 2025 GMT
Not After : May 8 13:00:53 2025 GMT
Subject: CN=99d39bf0-1222-48ec-8d41-29c787d30941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:29:8d:ff:2f:ca:71:f8:c5:6a:4d:fe:5f:10:
2d:e1:6a:47:1d:ad:8f:c6:7e:78:98:bc:94:55:6a:
d9:f3:2f:0d:49:d5:70:72:4c:93:7d:c2:2d:3f:b0:
5b:33:cd:a4:d1:b0:05:35:5f:27:5c:5b:b2:d0:4d:
51:69:a9:c9:9d:d4:84:50:74:0b:59:ad:91:56:cd:
25:5f:12:77:2d:8a:f9:3d:ba:b5:05:7c:56:19:51:
4d:1a:da:ef:aa:c4:db:2a:0b:1f:b3:87:ea:24:94:
7a:f1:73:38:ad:79:44:e0:e0:96:b4:1a:0b:5e:de:
c5:78:18:26:26:62:70:8b:c4:b4:bb:b6:c5:38:58:
14:d2:17:eb:67:9b:95:88:21:9a:63:00:ca:60:4b:
40:7a:6a:49:38:60:ba:b6:61:d6:d8:16:3a:b4:03:
45:a7:1f:ad:5e:68:25:66:26:29:30:36:d5:30:45:
de:68:eb:77:bc:9c:71:f1:3a:b5:42:3b:cd:17:48:
a2:ba:cd:56:2a:23:0a:87:c4:bc:af:eb:9d:89:65:
42:ee:23:6d:14:3f:02:77:50:19:b3:b6:2a:0a:5a:
67:50:d3:b4:a3:30:9b:99:db:f9:6a:41:4b:6b:54:
de:2a:0c:f7:26:98:40:50:61:84:8e:fe:4c:3c:59:
36:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:7B:08:12:7A:C5:60:A6:FF:25:DC:72:93:3B:8E:44:F0:3B:3D:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c66da466-b538-30d7-b621-37261d8c17d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
216.168.228.53/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:2c:ba:90:9f:f4:b2:40:bf:fd:4e:d1:10:45:51:51:d8:98:
1c:22:d9:ba:fe:79:22:9b:67:7c:a6:dd:1b:91:24:29:99:ca:
cb:6d:96:37:13:87:a6:41:8c:56:7c:cc:bc:c2:2b:cc:22:38:
e2:9d:08:0a:0c:c3:a1:a5:dc:cf:44:49:98:84:a3:41:c3:e7:
4c:cf:6a:49:a3:14:19:d6:57:b7:8c:24:1a:43:6d:b9:1e:8c:
4b:9d:3b:d7:91:9f:1c:62:b6:1c:85:c8:7a:e0:9f:22:66:df:
96:a1:04:02:be:23:95:65:cb:52:c7:3b:36:19:50:0f:29:62:
49:a8:37:aa:8f:72:39:06:e7:aa:9b:cd:4a:b0:27:4d:dc:7c:
9b:20:85:26:d2:31:6e:55:d6:8b:65:d9:15:87:c6:d6:d4:08:
b0:a2:62:f9:b7:c5:4a:f2:71:8e:e8:1d:5f:49:cc:42:dd:64:
56:c1:dd:a1:18:2b:6a:00:79:2d:62:1d:c8:44:bd:64:19:d5:
13:51:f7:f3:23:06:fb:90:b7:3e:fe:b1:e0:44:f3:2e:c5:9d:
2a:84:4a:4f:ad:21:a5:48:4c:3e:45:07:fd:5f:eb:3a:87:22:
75:ce:90:ed:ab:23:f0:a1:ab:95:dc:bd:87:b5:40:7f:ec:b0:
42:b5:e5:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 04:59:34 2025 by rpki-client