Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/2a9ebc3f-0d63-3bbd-9abf-1df4b0be82f8.roa
File: 2a9ebc3f-0d63-3bbd-9abf-1df4b0be82f8.roa (raw, json)
Hash identifier: YTZ/ca4wuLdBFGLEOi+Ljl2s8UP3K6lexwZQdMNgKiY=
Subject key identifier: 57:EA:BF:BB:58:18:EB:2A:E4:BB:DA:61:35:1C:8B:52:77:D3:F0:77
Certificate issuer: /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial: 010D0C9F432858494B641729CACD5B771D8E6A00
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/2a9ebc3f-0d63-3bbd-9abf-1df4b0be82f8.roa
Signing time: Mon 24 Mar 2025 13:00:53 +0000
ROA not before: Mon 24 Mar 2025 13:00:53 +0000
ROA not after: Sun 22 Jun 2025 13:00:53 +0000
asID: 394285
IP address blocks: 23.88.180.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 09 Apr 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:64:17:29:ca:cd:5b:77:1d:8e:6a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Validity
Not Before: Mar 24 13:00:53 2025 GMT
Not After : Jun 22 13:00:53 2025 GMT
Subject: CN=ba06f38c-2413-4576-ba32-97c0348a50e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:76:02:49:c1:aa:97:55:6e:f8:d8:d7:38:25:
58:f7:c9:07:87:1a:73:20:30:73:be:91:37:3f:32:
e3:4e:b7:93:92:fd:a6:59:bf:f9:a7:b9:51:91:3d:
e9:06:ba:36:73:61:74:7c:98:a4:ff:d7:a6:12:4a:
61:50:e4:ee:46:06:22:29:67:f5:68:fa:0b:b0:9d:
2f:0a:02:59:66:f3:b5:98:a6:c7:06:35:9b:e4:2d:
1e:2a:23:6d:8e:f1:1f:3d:54:56:f2:c7:e3:ad:33:
2e:97:cf:3a:6b:62:a4:86:56:6f:4a:4e:33:d6:40:
f1:b0:33:04:16:3d:0c:9c:9b:74:44:ae:34:20:ad:
e2:ae:1d:66:4a:b4:44:2b:c3:7b:86:72:b4:0a:13:
4c:56:af:c9:90:ba:cc:b3:11:50:b4:7e:f1:4b:e3:
06:13:b5:c8:54:07:58:c8:53:53:03:cd:cc:23:26:
31:82:c4:59:cb:bd:f7:bf:b6:3d:08:76:80:fd:f1:
f7:3e:e3:76:0f:d5:c6:9a:60:80:4c:70:c8:ac:4c:
0f:a6:fa:ff:96:bf:f4:86:79:01:56:fa:2e:ee:f7:
67:d4:a2:99:82:27:98:a6:73:ac:f3:02:7e:89:8d:
50:b2:7e:55:4c:e5:63:9d:f1:9f:3e:5e:9d:5f:91:
87:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:EA:BF:BB:58:18:EB:2A:E4:BB:DA:61:35:1C:8B:52:77:D3:F0:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/2a9ebc3f-0d63-3bbd-9abf-1df4b0be82f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
X509v3 Authority Key Identifier:
keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
sbgp-ipAddrBlock: critical
IPv4:
23.88.180.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:0e:47:9f:06:37:f6:25:35:17:55:5e:17:b8:f9:ae:22:93:
e0:cd:38:2c:f0:5a:1f:a0:bc:ea:ce:00:9d:ec:96:9f:68:97:
31:ab:aa:98:d5:dc:92:98:29:52:0b:60:d9:17:23:51:ec:4d:
e3:b3:f4:b2:b3:e1:11:b8:09:c6:b4:03:0b:16:23:35:8a:f4:
31:f4:b4:de:9a:b3:9b:7c:47:f9:3d:0c:61:82:27:42:a9:74:
be:bf:c8:97:23:e1:e0:7d:3c:93:cb:41:19:7a:51:d6:57:0e:
7a:05:f8:4f:4a:e8:7a:1f:e4:21:75:af:cd:de:34:f7:17:18:
0d:66:2e:54:2e:cf:07:64:a0:c6:85:0f:55:e3:b5:e4:4f:dc:
ee:ba:2a:fb:82:c3:60:db:7a:40:ec:ae:69:91:59:80:11:a9:
38:a4:c8:08:a6:6c:83:6c:77:08:58:8d:0c:97:03:10:22:a0:
65:32:91:61:98:03:c4:f0:f2:77:77:30:5a:9d:00:ab:93:40:
4f:f0:91:44:34:b3:99:56:60:78:76:30:bf:10:e1:f3:db:19:
7f:4e:2d:ef:82:ff:cf:5e:73:bf:0c:5f:2f:a1:ba:1c:22:c8:
1e:f1:1f:04:b4:74:a8:c0:ee:35:af:74:1a:c7:2b:4a:42:26:
d5:2d:d9:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:21:33 2025 by rpki-client