Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/f580b67a-767d-31bd-8089-26fba68e71a7.roa
File: f580b67a-767d-31bd-8089-26fba68e71a7.roa (raw, json)
Hash identifier: iUMo6VkncOCuZ+ZILN2ukdoA/mg+0JjmzpDdN96OX8k=
Subject key identifier: B5:57:AF:6D:D2:7E:69:58:89:E6:0E:E6:FC:DD:1C:58:B6:AC:6F:CE
Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22
Certificate serial: 010D0C9F43285849287E698325898C0A845D8C80
Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/f580b67a-767d-31bd-8089-26fba68e71a7.roa
Signing time: Wed 12 Mar 2025 01:00:39 +0000
ROA not before: Wed 12 Mar 2025 01:00:39 +0000
ROA not after: Tue 10 Jun 2025 01:00:39 +0000
asID: 396982
IP address blocks: 152.38.158.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Apr 2025 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:28:7e:69:83:25:89:8c:0a:84:5d:8c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22
Validity
Not Before: Mar 12 01:00:39 2025 GMT
Not After : Jun 10 01:00:39 2025 GMT
Subject: CN=fc40d87c-d940-484d-87ee-992b6fc820a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c2:ab:ec:e8:e6:bf:eb:49:b7:2a:06:59:d2:
b9:3c:06:98:d3:44:1a:71:a9:31:ba:0d:cb:80:b8:
e9:3c:d9:fe:21:58:67:d9:98:1b:60:39:6d:69:8b:
65:bb:46:f8:ad:85:2f:1f:d6:2e:81:18:ec:72:8c:
8b:5c:9f:1a:13:6d:2b:8d:07:69:f0:47:f4:9b:02:
93:64:c8:5a:94:c2:40:7c:6d:f6:4d:23:eb:a4:a6:
7c:ee:9f:a1:43:38:3a:06:e8:bd:1c:8d:09:7c:9e:
88:2b:d1:9a:d0:c8:ea:4a:65:4a:c1:c8:39:6d:38:
c7:c3:4f:3e:de:ab:0c:91:b2:71:09:d1:ab:0d:26:
a1:37:ed:7d:9b:c3:bf:1c:fb:a0:ae:a2:04:cc:c7:
e4:11:df:39:11:43:19:cb:04:28:70:b2:b2:fe:ac:
3c:3e:a5:ef:49:8c:5a:12:87:e1:d2:a6:56:26:db:
f4:2b:cd:37:dd:65:fd:15:54:5c:8f:a7:f7:55:4a:
cc:65:04:41:a9:85:5f:77:50:a5:6c:72:f0:59:61:
f0:68:27:b5:71:ff:de:b4:65:64:e4:f5:27:37:f9:
9f:c9:3c:92:19:f2:c2:f6:e9:f0:9f:83:28:53:8a:
76:97:db:86:f3:80:4d:b0:b9:e0:d7:b6:12:49:7f:
75:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:57:AF:6D:D2:7E:69:58:89:E6:0E:E6:FC:DD:1C:58:B6:AC:6F:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/f580b67a-767d-31bd-8089-26fba68e71a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl
X509v3 Authority Key Identifier:
keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer
sbgp-ipAddrBlock: critical
IPv4:
152.38.158.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:ad:bc:fb:de:22:52:ed:c5:cf:9f:72:43:bc:fe:b3:8d:85:
bc:e1:ca:65:42:7e:aa:63:9b:e3:b1:87:63:39:9e:9d:49:81:
37:e5:88:c3:85:fa:8c:19:cc:4d:3f:aa:bf:a9:c9:1e:11:d4:
fa:00:bd:a8:ea:d1:f6:a3:a7:17:18:fa:e4:78:fe:8f:06:26:
7b:7a:40:b4:ca:53:40:b4:1e:a5:2a:7a:56:66:1f:88:18:f2:
91:99:ad:17:53:a4:38:24:ff:cc:b8:3d:31:34:ff:49:46:36:
12:33:7b:6b:3d:24:9a:d7:3c:d9:f4:73:d8:c3:34:1d:6b:de:
16:d1:b7:c0:1e:5a:6f:d8:98:ee:6c:fa:f9:56:ad:0f:50:22:
e7:26:13:fa:10:2f:db:05:a1:bb:36:76:23:2a:a7:28:dd:f9:
3b:b1:bb:0b:40:f3:d2:b2:2f:0f:72:c4:e7:d0:53:2e:c2:cc:
88:c7:be:8f:a6:1d:87:cb:ef:56:25:f7:d1:74:83:bb:0c:4a:
95:cd:8c:99:91:58:58:31:3a:dc:37:78:43:10:ae:e2:77:17:
b2:6c:96:fc:eb:96:e7:60:fd:cb:dc:49:39:47:c8:8f:7a:ec:
7c:47:11:89:f9:52:96:11:db:7d:64:b8:7d:e3:2b:f6:4a:61:
af:6b:d9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 06:41:13 2025 by rpki-client