Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/bd9cdb5f-dea7-382d-91ce-1422e8fd3c97.roa
File: bd9cdb5f-dea7-382d-91ce-1422e8fd3c97.roa (raw, json)
Hash identifier: 9H5UrjQB4QF8lrgNhyP1MjPlg6l9ER+mw0JpQgF3Oc8=
Subject key identifier: 4E:95:F4:96:52:E9:CD:2C:06:5B:9C:C0:88:42:86:6D:69:CD:A1:E7
Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22
Certificate serial: 010D0C9F43285848DA70F8EC435BD0BCE54C7D00
Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/bd9cdb5f-dea7-382d-91ce-1422e8fd3c97.roa
Signing time: Wed 12 Feb 2025 02:00:39 +0000
ROA not before: Wed 12 Feb 2025 02:00:39 +0000
ROA not after: Tue 13 May 2025 01:00:39 +0000
asID: 23467
IP address blocks: 152.38.128.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:da:70:f8:ec:43:5b:d0:bc:e5:4c:7d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22
Validity
Not Before: Feb 12 02:00:39 2025 GMT
Not After : May 13 01:00:39 2025 GMT
Subject: CN=b9fcf1b5-971e-4d11-9fc3-4284c3df2616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5d:c0:a1:df:8c:e0:09:93:9d:fc:f3:02:02:
65:e5:a0:d3:56:fc:5c:52:f1:72:7d:f6:42:94:00:
7c:40:02:2c:53:37:70:9b:88:49:88:39:cc:0f:44:
0b:9d:d1:19:4c:90:17:1e:f4:5c:49:25:00:40:5b:
08:54:fb:7a:43:53:d5:60:f8:42:30:be:11:16:8e:
9f:a2:56:88:c2:84:66:8d:c3:95:6f:9a:64:85:f1:
d5:6b:b9:8b:dc:b8:fc:4a:f6:83:6e:bb:58:f8:e0:
6b:71:2f:00:51:3d:cd:9d:43:f6:0a:c9:fe:57:1b:
f4:50:70:f6:03:3d:81:2a:07:a3:76:15:00:4c:e0:
c0:60:05:25:f6:69:e1:07:1d:65:5b:48:99:c0:ec:
40:54:9a:63:62:e1:1a:72:00:53:25:eb:cd:01:ce:
d6:1c:e7:38:c8:5e:c4:4e:dd:df:34:d2:9b:68:62:
84:bb:19:59:33:df:60:a0:f5:6c:23:31:07:e7:a2:
43:52:0f:26:92:78:81:28:3c:b0:e2:d5:79:93:b5:
ed:38:80:fa:3a:00:e5:45:5d:7d:75:9a:1a:8c:61:
0b:2b:06:42:fd:06:27:fb:5f:c8:4f:72:c1:53:2b:
ab:62:8a:a4:50:b8:1b:98:65:17:ef:97:8b:00:a0:
27:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:95:F4:96:52:E9:CD:2C:06:5B:9C:C0:88:42:86:6D:69:CD:A1:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/bd9cdb5f-dea7-382d-91ce-1422e8fd3c97.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl
X509v3 Authority Key Identifier:
keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer
sbgp-ipAddrBlock: critical
IPv4:
152.38.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:43:11:d3:24:ed:53:62:9f:a6:13:16:db:f5:10:b6:23:d3:
4b:6b:09:31:8c:95:d1:7a:e1:72:3a:60:4c:ab:07:2e:65:aa:
99:a7:54:51:5a:ec:bf:7d:ec:8a:73:b0:cb:d4:84:b9:2f:33:
af:03:30:ee:18:48:91:38:70:1d:dd:10:f8:28:37:55:79:7d:
40:24:46:28:d5:0c:f3:e3:83:31:c7:73:c7:ed:f9:7c:24:bb:
43:ae:cb:96:7f:ff:32:52:1a:c5:d4:dc:f4:d9:fd:34:e6:c4:
9f:47:d2:cd:75:26:f2:7f:79:58:00:6f:ea:f2:b4:c0:17:8e:
b0:b5:bc:f2:5a:3a:d5:bd:ca:6f:e0:cd:6b:3d:98:d1:1e:11:
19:23:c1:ae:0c:71:3e:b4:83:93:8e:e4:7d:78:05:4f:49:7f:
f1:c4:da:ca:86:2a:f4:ae:5e:19:59:ca:d0:19:2c:63:de:62:
bc:ee:11:d0:3b:f1:71:4e:ce:c5:96:93:6c:a3:8c:73:da:53:
d9:1f:59:ae:5a:e3:1f:3e:a2:65:5a:68:7c:a7:b7:6b:a8:d5:
fa:12:7c:14:c4:09:4d:db:11:1b:9d:38:09:e7:b3:e3:04:af:
40:db:d1:a7:8a:6d:66:3f:51:59:59:43:cb:cd:19:91:e9:00:
04:80:19:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:36:06 2025 by rpki-client