Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/182e278c-4096-36f2-9644-a37d9b077a82.roa
File: 182e278c-4096-36f2-9644-a37d9b077a82.roa (raw, json)
Hash identifier: NTbPYhxChkSSEhBX+k7JBUpXIksQ42Nkp1SN3PqKd9A=
Subject key identifier: 84:D0:3B:A1:26:0A:68:90:93:CF:0E:1A:02:8C:8F:8C:35:D4:E8:4C
Certificate issuer: /CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7
Certificate serial: 010D0C9F4328584913AC1D17BB65BFD9A006B600
Authority key identifier: C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/182e278c-4096-36f2-9644-a37d9b077a82.roa
Signing time: Tue 04 Mar 2025 14:00:52 +0000
ROA not before: Tue 04 Mar 2025 14:00:52 +0000
ROA not after: Mon 02 Jun 2025 13:00:52 +0000
asID: 394111
IP address blocks: 192.225.240.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 18 Apr 2025 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:13:ac:1d:17:bb:65:bf:d9:a0:06:b6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7
Validity
Not Before: Mar 4 14:00:52 2025 GMT
Not After : Jun 2 13:00:52 2025 GMT
Subject: CN=2e62c94a-2efa-4af6-af35-881952140feb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:1c:d5:99:a8:78:7e:e6:cc:4c:4a:22:c7:3c:
55:93:44:25:24:51:a5:f3:11:54:13:54:e5:a5:50:
09:e8:7b:6e:6f:95:07:8e:90:9d:87:54:dc:22:2b:
16:e5:20:11:38:27:4e:24:ed:ef:89:14:ee:74:1a:
41:2f:e1:69:c5:7b:8b:19:06:a6:2e:76:a8:99:4b:
15:89:ee:64:59:d7:e7:4f:52:91:f8:39:3c:12:90:
b9:9d:e6:82:e6:6f:c6:59:64:79:e8:e3:70:d4:3f:
bb:51:f4:06:37:56:3e:a5:4f:5d:6a:d2:d5:9e:6f:
35:d3:cd:de:fd:09:76:78:c6:23:7e:10:1f:ae:69:
24:97:0a:d9:91:22:4c:84:29:f3:11:8e:29:e3:c8:
6d:ae:38:7b:b2:d1:61:cb:15:1d:47:d6:4d:77:75:
dc:79:e6:f0:ba:78:b7:b8:3e:05:40:fa:b1:b8:c7:
98:c2:83:53:c0:47:88:3d:4f:3a:36:b2:11:9f:89:
ad:b7:7a:a9:4f:42:6a:20:8e:89:4c:cc:93:97:1d:
50:b1:87:1f:84:49:9d:d6:3b:b7:1e:c8:44:fb:25:
3c:b4:08:3e:9f:1b:2f:69:d2:fb:bd:3d:8a:1d:34:
f9:5d:fe:4e:c6:63:05:ce:12:63:9b:e9:82:6f:1c:
9e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D0:3B:A1:26:0A:68:90:93:CF:0E:1A:02:8C:8F:8C:35:D4:E8:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/182e278c-4096-36f2-9644-a37d9b077a82.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl
X509v3 Authority Key Identifier:
keyid:C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer
sbgp-ipAddrBlock: critical
IPv4:
192.225.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:a8:5b:43:5b:0e:c1:49:42:a4:97:27:71:7b:1c:6c:55:31:
15:38:5c:36:f1:f5:19:6e:ef:82:98:c2:fb:e1:b4:d2:70:34:
03:b5:c8:0a:55:b1:1d:8c:41:13:4a:d9:15:9d:4f:af:0c:1a:
ef:90:00:55:8c:e9:e3:f6:61:ab:6d:10:04:09:96:72:aa:ec:
3c:17:60:c2:43:c9:d3:a2:e7:46:a5:3f:96:b3:02:5f:f0:df:
f0:c5:fb:83:6d:8d:9f:2e:fe:b8:33:b7:7a:bc:91:b6:9b:d5:
e1:0c:57:ee:56:ae:f7:af:54:a3:50:df:e9:97:1b:6e:2e:2a:
f8:29:e4:ef:07:cc:4e:44:de:68:7d:33:12:8b:ef:51:cd:e9:
6a:98:67:d3:ae:33:d3:ba:c9:76:8e:fe:cb:98:42:9b:33:37:
b5:ab:90:32:52:29:f0:91:a2:37:b5:b3:bb:5b:8c:1c:90:e0:
b3:6a:c4:13:ed:33:86:e2:92:50:d4:be:c5:4d:29:8c:fd:da:
a3:b1:d7:e0:5f:7b:96:63:61:db:2f:bd:6f:bd:24:a9:a7:f5:
4f:6c:88:01:02:f6:a4:78:09:6e:cc:f7:74:95:d1:53:a1:69:
73:0a:7f:5b:f8:e7:f9:27:54:2d:8c:7a:60:c5:b0:4f:eb:2d:
0c:62:f1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:30:25 2025 by rpki-client