Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/43d529a5-06fc-3596-b306-3805ee39efec.roa
File: 43d529a5-06fc-3596-b306-3805ee39efec.roa (raw, json)
Hash identifier: tKZUvrjcVfiTBRA2kpDKoNi7v1RF25mzyLfXVEFuhoA=
Subject key identifier: FE:25:8E:BA:8A:2F:4F:58:5E:A5:6B:EE:5A:B7:66:3F:D3:10:9A:58
Certificate issuer: /CN=85be797f-f426-4ba8-98b0-1c2b5f752753
Certificate serial: 010D0C9F432858496A1999E8D951AB48AB0A4680
Authority key identifier: 49:B1:C9:49:07:A5:46:4D:23:DA:5C:68:99:40:F9:73:99:9E:30:53
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/43d529a5-06fc-3596-b306-3805ee39efec.roa
Signing time: Fri 04 Apr 2025 13:00:59 +0000
ROA not before: Fri 04 Apr 2025 13:00:59 +0000
ROA not after: Thu 03 Jul 2025 13:00:59 +0000
asID: 7029
IP address blocks: 134.195.156.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Apr 2025 03:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6a:19:99:e8:d9:51:ab:48:ab:0a:46:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85be797f-f426-4ba8-98b0-1c2b5f752753
Validity
Not Before: Apr 4 13:00:59 2025 GMT
Not After : Jul 3 13:00:59 2025 GMT
Subject: CN=8b37f256-63ff-4f96-8cff-45b3e4e872e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b1:f3:8b:fd:fc:82:00:e0:32:44:f8:ff:fb:
e5:0c:ea:be:07:99:e8:7b:9f:e4:f3:09:5b:75:c7:
64:fe:89:d7:05:0d:72:5d:46:4c:e7:10:9a:df:48:
71:15:1b:0f:5b:c6:47:12:ee:f8:18:8d:aa:44:7f:
74:9e:61:a9:3d:fc:ff:7c:a3:60:c5:73:f6:4d:1b:
fd:a7:30:22:49:07:df:b9:d6:e4:3a:24:14:61:5c:
b5:7e:20:4a:83:ed:02:c4:bb:71:f3:09:62:f9:a8:
fa:ff:65:71:29:f6:43:50:1c:84:61:af:a2:5c:9f:
f3:c4:d9:4e:40:1c:38:2b:8e:4c:56:69:41:78:89:
c8:d8:5a:8f:0b:1d:b2:d3:3b:8f:3f:34:74:a2:cf:
b5:21:5c:e3:2a:e3:4a:50:d3:0f:cf:b1:86:37:2a:
57:ec:d9:c1:65:06:95:75:39:0e:dc:66:a5:ed:4e:
93:6c:d1:19:cb:dd:fb:3a:ee:43:b2:7c:62:78:d1:
a9:e4:18:82:f0:a8:94:7a:49:07:89:9f:24:9f:19:
b7:49:45:a3:5f:ef:b9:4d:12:6b:a0:13:b3:e1:32:
d3:80:b5:05:4e:f4:89:43:ab:9d:8d:dc:53:08:9c:
df:7d:17:a9:82:b0:60:8b:d9:06:0e:97:76:9f:47:
9a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:25:8E:BA:8A:2F:4F:58:5E:A5:6B:EE:5A:B7:66:3F:D3:10:9A:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/43d529a5-06fc-3596-b306-3805ee39efec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.crl
X509v3 Authority Key Identifier:
keyid:49:B1:C9:49:07:A5:46:4D:23:DA:5C:68:99:40:F9:73:99:9E:30:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer
sbgp-ipAddrBlock: critical
IPv4:
134.195.156.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:47:4c:be:89:29:da:78:34:8d:d1:72:1c:e2:ed:18:83:96:
d5:de:9a:56:c7:68:92:2a:09:89:6b:65:ff:c8:68:5a:8d:36:
67:b5:cb:c8:28:6d:f6:bf:57:1a:a2:8f:5f:2d:b8:d4:66:7e:
12:46:3c:26:d7:c5:98:7b:31:75:41:17:84:1f:41:a0:82:20:
bb:6c:df:f9:c5:f2:3c:7c:5e:0a:64:a8:cf:13:02:04:ae:d7:
db:6b:3a:bc:2a:9f:e4:c1:99:95:c5:4c:5f:0e:1b:b4:35:f6:
84:61:1f:27:21:87:e5:56:77:2e:85:4f:34:59:d6:ee:c5:63:
4b:ba:40:5f:41:25:76:d9:44:7d:b3:74:9d:e3:39:d7:ce:e2:
13:30:4d:11:97:55:78:6d:0c:db:bc:32:8d:2e:6c:df:73:0a:
8a:48:0e:aa:ff:f3:c2:03:4f:a2:c8:46:27:97:0e:8e:52:ff:
ae:97:d4:06:04:48:f3:06:55:e5:aa:a9:8e:a8:f1:b4:6f:fa:
b0:3a:55:5a:33:39:0f:25:6f:18:67:64:8a:a2:42:d3:0a:1e:
de:14:b4:4d:a6:12:78:e8:cc:46:93:cb:c7:f6:b0:85:57:38:
01:09:10:0b:1f:dd:c6:84:74:88:d2:61:bd:0a:a6:13:30:dc:
28:8b:4f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 13:57:00 2025 by rpki-client