Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5bab7542-1747-4199-9e18-f75a006e302e/d805f6ad-8e60-35ab-b3f8-63d00f83e6c8.roa
File: d805f6ad-8e60-35ab-b3f8-63d00f83e6c8.roa (raw, json)
Hash identifier: lD3UozjEU9CCEz+AzZ0vu//iOg7+q5VmcLRvsZlbQRs=
Subject key identifier: 41:E8:7D:BA:68:DE:48:58:8C:2A:25:78:C5:23:DA:D3:69:2C:7C:36
Certificate issuer: /CN=5bab7542-1747-4199-9e18-f75a006e302e
Certificate serial: 010D0C9F43285848BFEBA5F1794AE2565BEFF880
Authority key identifier: 51:79:4D:4F:C2:A9:14:50:50:03:18:22:69:6E:5B:19:AE:36:CB:1C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5bab7542-1747-4199-9e18-f75a006e302e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5bab7542-1747-4199-9e18-f75a006e302e/d805f6ad-8e60-35ab-b3f8-63d00f83e6c8.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 7018
IP address blocks: 199.83.176.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5bab7542-1747-4199-9e18-f75a006e302e/5bab7542-1747-4199-9e18-f75a006e302e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5bab7542-1747-4199-9e18-f75a006e302e/5bab7542-1747-4199-9e18-f75a006e302e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5bab7542-1747-4199-9e18-f75a006e302e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Apr 2025 04:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:a5:f1:79:4a:e2:56:5b:ef:f8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bab7542-1747-4199-9e18-f75a006e302e
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=618b5d7d-7f0f-48d0-a086-554ccae2b3c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:48:6c:aa:2a:c2:2e:f3:ae:e6:a6:32:4d:8f:
ef:09:e2:8e:61:36:71:9b:80:b2:2d:0a:0f:21:5c:
9d:5f:20:2e:20:a2:f7:a4:74:15:9f:05:df:63:94:
11:4c:37:b0:fc:c1:1e:b2:9a:48:39:0a:0b:a4:68:
56:51:8a:fa:a7:c7:1b:ba:3b:9d:b9:05:dc:dc:d9:
35:f2:7c:1e:b3:91:3a:2f:c7:8d:18:fa:e4:29:65:
13:ea:9d:d4:6f:af:e0:6b:cc:9b:b9:14:82:ba:e4:
aa:64:09:c2:00:a8:d1:a2:d0:ba:e8:1b:92:86:25:
12:3e:f6:93:b2:ac:16:11:f6:e8:2a:39:33:79:d2:
0f:e5:76:1b:84:12:c6:19:f6:92:c5:28:30:4d:a2:
cc:89:93:e3:79:11:75:96:0b:c9:ff:7c:b2:b5:e7:
7c:42:16:34:fe:c1:22:98:68:4e:d6:20:d7:3d:45:
05:f5:e5:c5:77:eb:65:7d:74:93:91:ce:d9:f1:8f:
75:32:aa:0b:6c:4c:a8:49:37:c6:6d:ee:e1:a9:2f:
51:bd:71:25:4a:59:6c:45:56:ad:5b:5e:b5:ac:f1:
ec:3f:88:e1:0a:41:03:39:8c:98:91:f0:29:c1:14:
1c:7f:5c:3b:90:70:1c:43:31:6d:15:7e:3d:eb:ed:
94:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E8:7D:BA:68:DE:48:58:8C:2A:25:78:C5:23:DA:D3:69:2C:7C:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5bab7542-1747-4199-9e18-f75a006e302e/d805f6ad-8e60-35ab-b3f8-63d00f83e6c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5bab7542-1747-4199-9e18-f75a006e302e/5bab7542-1747-4199-9e18-f75a006e302e.crl
X509v3 Authority Key Identifier:
keyid:51:79:4D:4F:C2:A9:14:50:50:03:18:22:69:6E:5B:19:AE:36:CB:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5bab7542-1747-4199-9e18-f75a006e302e.cer
sbgp-ipAddrBlock: critical
IPv4:
199.83.176.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:88:95:43:f3:be:f2:05:64:ac:69:e4:69:74:3d:49:66:39:
ad:34:8c:7d:26:23:6d:01:9d:4a:a6:82:b7:27:f8:19:df:1b:
de:b0:c2:b0:b9:12:b8:21:2d:8a:31:c9:5a:64:e6:fc:75:01:
cc:c1:26:bf:42:2f:b3:e9:1f:d9:a8:57:0e:3b:50:8c:c8:28:
ca:76:89:ea:a9:24:df:dd:4b:e2:01:71:70:ca:00:98:19:65:
fe:68:07:85:d1:67:2b:9a:fa:6a:1e:23:f7:0b:80:4f:ed:c3:
9e:7a:18:65:2a:da:63:11:33:43:eb:50:ac:65:70:89:0b:42:
cf:06:c9:ba:b0:96:7a:4d:b9:c1:06:c2:c5:77:f3:ae:51:94:
98:80:17:d2:a2:27:91:35:5b:b5:90:b8:2a:5f:1f:85:43:36:
fa:be:8f:74:62:0a:11:bc:09:a8:92:ec:1f:54:22:ab:7e:23:
ec:e5:c3:71:9a:cd:27:00:9e:e4:1b:b5:c9:e5:75:8b:f1:55:
3b:64:13:40:2f:82:bb:77:a2:6f:20:c6:2e:f9:46:23:db:31:
c8:30:ed:4e:27:0a:bd:32:c3:f3:93:63:52:27:37:08:bb:74:
7f:aa:ca:5f:8d:3f:b0:7f:f0:9b:b9:3b:e2:8e:56:ed:8a:bf:
ab:90:06:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 01:50:10 2025 by rpki-client