Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/dfb8101e-ec2a-36e5-8cbe-576bb8c12e65.roa
File: dfb8101e-ec2a-36e5-8cbe-576bb8c12e65.roa (raw, json)
Hash identifier: jyOv96KgRgcgyxD4MDthVwOTl55369wI4QGbKZ1xkZI=
Subject key identifier: E7:EA:9E:C4:FD:23:66:EE:0D:81:D5:5F:7A:5A:74:13:5D:D8:F5:63
Certificate issuer: /CN=c22717c6-604d-4453-a20f-3430af557f6e
Certificate serial: 010D0C9F4328584953C41A7688AE8B3F8F8E6080
Authority key identifier: EE:A3:2B:CF:34:53:AB:3E:F1:A0:11:46:64:77:8B:DE:44:96:56:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/dfb8101e-ec2a-36e5-8cbe-576bb8c12e65.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 11550
IP address blocks: 72.42.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/c22717c6-604d-4453-a20f-3430af557f6e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/c22717c6-604d-4453-a20f-3430af557f6e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:1a:76:88:ae:8b:3f:8f:8e:60:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c22717c6-604d-4453-a20f-3430af557f6e
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=cf1cb5c8-d41f-4b72-a038-048fe33ff5df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:34:05:ef:e2:d3:1c:14:e7:98:8c:77:22:28:
f0:ba:40:84:7b:f5:90:c0:11:2e:68:ee:83:e8:d9:
09:98:90:31:55:34:f7:79:f0:24:c4:e9:62:01:2b:
0e:af:df:11:fe:5b:be:60:0d:c4:fa:76:e3:59:2e:
03:85:6e:d4:ac:ff:56:38:1d:e3:95:40:84:13:24:
cf:56:ea:9a:1e:ee:15:9d:ab:77:cb:51:ca:78:28:
69:ae:7f:cb:ad:f5:73:2b:17:bd:cc:93:9c:10:b3:
2e:6c:a7:8d:95:4b:03:2f:00:81:62:46:d9:b4:d4:
a3:4b:23:2b:16:ba:ed:0b:44:18:79:99:46:06:ea:
da:16:9a:f4:23:7e:bb:c6:2a:0d:34:44:63:b3:6d:
12:ac:51:ad:fb:24:1f:d8:c2:1d:d5:13:50:58:5f:
24:ca:fc:16:ec:e5:97:0b:c6:e3:d9:e1:3b:a8:8d:
1d:5f:e3:d7:59:60:35:96:0c:63:73:c6:b5:0b:0c:
e4:18:4f:44:6c:67:22:cc:9e:11:7a:6d:e8:72:e4:
51:d3:eb:db:b8:fa:2e:dc:5b:52:6a:f4:5e:6b:a6:
e9:c9:b9:fc:1a:07:ab:a9:f8:d9:07:d2:5d:0c:89:
97:c6:35:50:bf:85:ab:b7:ef:65:cc:ba:ba:ee:ce:
a1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:EA:9E:C4:FD:23:66:EE:0D:81:D5:5F:7A:5A:74:13:5D:D8:F5:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/dfb8101e-ec2a-36e5-8cbe-576bb8c12e65.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/c22717c6-604d-4453-a20f-3430af557f6e.crl
X509v3 Authority Key Identifier:
keyid:EE:A3:2B:CF:34:53:AB:3E:F1:A0:11:46:64:77:8B:DE:44:96:56:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e.cer
sbgp-ipAddrBlock: critical
IPv4:
72.42.251.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:5b:1d:3a:91:13:ba:7a:b2:df:ed:4f:c2:f0:c9:cf:34:07:
5e:34:0c:d9:f7:60:15:25:7e:cf:72:f4:e7:1f:92:58:f1:8a:
67:eb:67:8a:f7:a5:77:09:07:f5:e4:45:d1:01:71:83:ea:73:
c6:b0:bb:2f:e0:90:8c:dc:f2:09:ff:76:dc:e7:bb:d0:89:21:
31:f3:7c:1a:f7:92:46:1e:4a:2c:d9:f5:88:89:29:00:7d:81:
45:c1:56:9f:4a:68:98:72:00:02:5f:69:8e:65:a7:cb:c2:37:
0a:94:05:9f:7e:53:2a:90:e2:16:d7:10:4d:5b:06:a0:bc:5b:
08:7c:03:7a:56:05:7c:2e:cf:73:72:c7:a2:03:46:76:69:38:
cd:2c:04:c9:d9:57:85:d2:a2:bc:5d:52:95:bc:ee:91:8d:76:
02:6f:ed:a8:11:26:d7:6f:27:9a:b7:b8:eb:9b:a0:f0:de:6b:
fe:c6:00:c2:84:b1:e7:25:fb:28:d7:a5:26:11:0a:e4:92:26:
fb:6e:df:f6:00:f5:18:b6:ae:8a:2b:66:6a:0b:4f:12:ad:eb:
7f:d1:cd:d5:77:d1:74:b6:14:68:56:0f:1a:7f:53:08:18:0e:
0a:5f:24:c7:67:39:85:c3:b0:d7:65:ff:1b:b3:55:05:96:6f:
84:ab:81:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:39:54 2025 by rpki-client