Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/f9e76ac1-bfbc-3f9d-a68e-e3a00d5c0216.roa
File: f9e76ac1-bfbc-3f9d-a68e-e3a00d5c0216.roa (raw, json)
Hash identifier: IHTgkWnebQhi007xcp9phSFRRLQYr3879JuBl4tA1BA=
Subject key identifier: 9F:E3:8E:6A:84:1E:85:FB:F6:D2:BA:76:AA:47:9A:5C:C9:1C:B5:86
Certificate issuer: /CN=8ac31463-974b-4676-9328-200202ae4d6e
Certificate serial: 010D0C9F43285848E16BE9A2555E0D0B15522B80
Authority key identifier: 66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/f9e76ac1-bfbc-3f9d-a68e-e3a00d5c0216.roa
Signing time: Fri 14 Feb 2025 14:00:52 +0000
ROA not before: Fri 14 Feb 2025 14:00:52 +0000
ROA not after: Thu 15 May 2025 13:00:52 +0000
asID: 33211
IP address blocks: 206.41.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e1:6b:e9:a2:55:5e:0d:0b:15:52:2b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ac31463-974b-4676-9328-200202ae4d6e
Validity
Not Before: Feb 14 14:00:52 2025 GMT
Not After : May 15 13:00:52 2025 GMT
Subject: CN=633cbc4a-755c-45b2-8b28-26faf0a2679f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:14:02:75:45:6a:60:b2:7f:a8:fc:6a:b8:e1:
56:d2:8e:db:6d:8a:c5:04:6c:b5:a5:8d:cb:54:91:
4a:71:4b:2d:73:1c:3f:ee:34:cb:38:03:5f:77:6d:
e2:5f:9a:85:35:8c:c7:37:28:5c:e8:fe:cb:9b:d2:
04:d5:a3:cb:c1:4d:84:99:b7:91:6e:db:4d:6f:1c:
3d:aa:55:ff:84:5c:8b:06:39:1e:0d:da:cd:2d:76:
77:c2:90:f9:41:aa:8c:11:c9:27:82:61:32:b0:41:
59:d4:98:19:cc:48:c5:fb:36:32:99:12:90:a6:b3:
72:ce:d5:da:2a:9a:b4:8b:f9:81:91:da:cb:80:b1:
c4:ae:24:b6:d1:bc:15:9a:38:b8:e7:46:f9:91:24:
8d:4f:d9:df:6d:6a:1d:45:06:63:10:9c:22:4b:3f:
ec:02:ac:ef:09:2a:f4:40:f1:80:55:4f:87:d7:16:
48:a6:c5:c0:1e:12:f4:40:33:63:ec:bb:b4:e1:58:
96:fd:97:ec:1a:17:ea:c8:2a:ce:54:9f:43:e0:de:
c4:00:5e:8f:77:4f:cc:68:88:24:5b:4a:9f:eb:11:
ba:87:00:c8:3e:04:7a:27:84:42:c9:0a:e3:7a:bd:
70:7c:77:25:e5:d4:1f:77:81:2e:1a:09:a3:cb:f0:
f1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E3:8E:6A:84:1E:85:FB:F6:D2:BA:76:AA:47:9A:5C:C9:1C:B5:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/f9e76ac1-bfbc-3f9d-a68e-e3a00d5c0216.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl
X509v3 Authority Key Identifier:
keyid:66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer
sbgp-ipAddrBlock: critical
IPv4:
206.41.118.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:cd:e2:b5:56:96:e4:4d:ff:ed:25:2e:96:a5:32:d9:96:c4:
a3:a0:93:cd:02:5d:2d:16:26:27:a0:95:99:0c:84:48:42:00:
5c:3c:71:f5:c3:b1:52:54:31:d6:75:59:ed:7c:55:4c:74:ec:
73:a3:1d:93:1b:94:6c:e7:f4:3e:e7:6e:00:d5:63:70:f3:76:
16:e1:f5:2e:c4:cd:52:97:19:20:40:f8:23:8d:6b:ac:83:4d:
13:d4:31:8c:66:fe:6f:40:7a:c5:d4:bc:59:2b:26:2e:51:21:
ab:b9:b4:a3:f7:a0:a2:a5:62:9c:9d:43:61:b3:de:59:de:78:
0c:89:41:7f:e4:9a:17:84:c9:67:cc:2e:25:69:e9:ab:fb:5e:
70:b7:a6:a4:6f:48:0a:a2:07:35:1c:43:53:20:62:43:97:97:
f2:64:e1:f6:ad:aa:45:37:0e:f4:e4:b1:96:09:c0:09:c6:d3:
25:e5:31:54:3c:3c:46:0a:ce:ba:69:83:17:30:38:cb:86:42:
24:8d:f8:26:cb:95:f3:99:a6:af:77:ae:40:8e:66:0a:3a:62:
b2:eb:c6:7f:07:30:a9:be:3f:df:4a:68:41:a9:22:4a:0f:10:
1a:65:11:a7:f3:b4:c3:4f:f1:f6:45:32:cb:14:7a:61:f4:e2:
f7:15:d3:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:58:17 2025 by rpki-client