Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967/0f3566a8-3961-35ab-8bf3-4f7bd985ffe9.roa
File: 0f3566a8-3961-35ab-8bf3-4f7bd985ffe9.roa (raw, json)
Hash identifier: e7lMNFyccB6Tvv+2k7p6mCieEt2JD/J3AcCHmDnQZ6g=
Subject key identifier: B3:E1:1D:6B:C9:CA:8E:08:08:6A:66:66:9D:37:75:D9:57:57:4E:C0
Certificate issuer: /CN=5c264ed0-521b-453b-b8f6-85ab4d47c967
Certificate serial: 010D0C9F43285848BBBB858F057920BE09E67640
Authority key identifier: 9F:28:CD:08:1C:CC:44:29:16:B0:7C:6D:18:9B:2E:B9:E6:02:4F:DF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967/0f3566a8-3961-35ab-8bf3-4f7bd985ffe9.roa
Signing time: Sat 01 Feb 2025 02:00:39 +0000
ROA not before: Sat 01 Feb 2025 02:00:39 +0000
ROA not after: Fri 02 May 2025 01:00:39 +0000
asID: 55230
IP address blocks: 192.230.192.0/20 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967/5c264ed0-521b-453b-b8f6-85ab4d47c967.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967/5c264ed0-521b-453b-b8f6-85ab4d47c967.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bb:bb:85:8f:05:79:20:be:09:e6:76:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c264ed0-521b-453b-b8f6-85ab4d47c967
Validity
Not Before: Feb 1 02:00:39 2025 GMT
Not After : May 2 01:00:39 2025 GMT
Subject: CN=8d475d53-a7e9-4dac-9385-a02c97d65491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ae:8c:de:e7:16:3b:ea:47:d1:48:34:d6:0f:
b0:a8:93:f6:c8:65:be:ba:38:92:95:6d:40:bf:f3:
ad:f6:5a:67:57:61:f9:18:d2:e2:1f:4a:73:70:75:
a5:f8:71:f8:c0:4c:da:4f:ae:cd:3c:ce:43:48:fa:
5c:ca:cd:ad:40:db:49:25:8d:9c:91:68:a1:42:bd:
a3:2a:c6:c9:c7:27:38:65:26:3a:95:14:e1:b6:0f:
26:a5:37:61:5b:e5:cc:33:a1:60:75:bd:a2:52:e6:
9c:6d:8f:9e:3b:01:6e:47:cd:80:17:07:12:71:69:
4e:9a:5e:f6:2b:a0:93:1d:72:67:87:89:6a:14:3d:
99:dd:ad:4d:cb:d1:97:69:fa:e9:3c:63:f7:69:53:
ec:a0:3f:41:32:ed:5b:35:ab:01:55:4c:9a:0c:8a:
d7:62:20:b7:9b:91:93:b8:47:f3:2d:39:be:f6:f8:
d7:b5:df:63:26:6f:b0:d7:ae:b0:c9:d2:94:82:01:
c8:5c:9a:67:3c:36:51:39:18:4e:36:0d:6a:d5:ac:
54:e8:cc:e4:c4:f0:33:44:b8:ba:77:6e:72:29:ca:
f7:87:12:d8:3f:b2:21:02:d9:87:9c:6e:9c:93:df:
79:16:4a:b4:7c:30:14:60:1d:e4:66:8d:9d:bb:24:
a5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E1:1D:6B:C9:CA:8E:08:08:6A:66:66:9D:37:75:D9:57:57:4E:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967/0f3566a8-3961-35ab-8bf3-4f7bd985ffe9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967/5c264ed0-521b-453b-b8f6-85ab4d47c967.crl
X509v3 Authority Key Identifier:
keyid:9F:28:CD:08:1C:CC:44:29:16:B0:7C:6D:18:9B:2E:B9:E6:02:4F:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967.cer
sbgp-ipAddrBlock: critical
IPv4:
192.230.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:48:ce:b3:f2:d4:a1:31:27:dd:d7:05:db:66:bc:d4:32:33:
c0:98:cc:d0:78:5c:df:ce:bb:ab:9d:34:ee:f0:a3:17:ba:18:
4b:7c:83:8d:f5:77:3a:da:88:97:8c:6a:4d:a9:53:9b:07:88:
7e:92:99:bf:64:46:a1:c4:70:2b:5b:35:2b:51:ba:42:74:c7:
72:27:13:e8:59:9a:96:2a:5f:41:5b:a7:07:51:2d:2f:48:63:
dd:7b:b5:c3:57:c8:42:8b:ae:c0:45:02:38:71:bf:e6:49:ca:
5a:af:76:e9:6a:e8:fa:93:a8:ec:1f:f5:06:71:4f:ec:7d:d2:
6f:75:62:f5:e7:33:3d:c6:f3:53:2e:af:c2:ab:e1:3f:23:c1:
f1:cc:03:27:32:d3:82:2a:61:1c:cd:f5:17:23:ae:69:86:31:
03:3e:ce:5c:6d:a9:1c:5e:1d:bb:df:f8:86:17:a8:0e:57:60:
7d:bd:4c:da:a2:bd:97:2e:83:0f:35:ac:3e:b6:8f:04:41:48:
a9:84:0d:6d:d5:25:cd:fc:d9:ef:73:21:97:e9:02:67:c5:ba:
79:48:4c:6b:bf:50:04:5e:2e:f8:d8:be:63:9b:08:ad:f6:9b:
8f:d3:a3:7a:b0:1f:4a:68:6b:d4:23:41:27:53:27:ff:1d:e6:
f4:7b:9d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:58:28 2025 by rpki-client