Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967/d36166e4-c341-359d-b454-ef42a101c9da.roa
File: d36166e4-c341-359d-b454-ef42a101c9da.roa (raw, json)
Hash identifier: ylGQPpNllMtIL12TRKVkotoXdSIMZ7yHiLPwv3VK4v4=
Subject key identifier: 6D:8D:8D:B5:CA:C0:0B:20:A3:76:3C:9E:AF:CC:6E:2F:E5:12:55:5B
Certificate issuer: /CN=5c264ed0-521b-453b-b8f6-85ab4d47c967
Certificate serial: 010D0C9F43285848BBBB859C0E49AC8EA31AF980
Authority key identifier: 9F:28:CD:08:1C:CC:44:29:16:B0:7C:6D:18:9B:2E:B9:E6:02:4F:DF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967/d36166e4-c341-359d-b454-ef42a101c9da.roa
Signing time: Sat 01 Feb 2025 02:00:39 +0000
ROA not before: Sat 01 Feb 2025 02:00:39 +0000
ROA not after: Fri 02 May 2025 01:00:39 +0000
asID: 55230
IP address blocks: 205.174.144.0/21 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967/5c264ed0-521b-453b-b8f6-85ab4d47c967.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967/5c264ed0-521b-453b-b8f6-85ab4d47c967.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bb:bb:85:9c:0e:49:ac:8e:a3:1a:f9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c264ed0-521b-453b-b8f6-85ab4d47c967
Validity
Not Before: Feb 1 02:00:39 2025 GMT
Not After : May 2 01:00:39 2025 GMT
Subject: CN=9a8a9589-1efb-4888-8ffc-5d5aaf5b331d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:53:7b:5c:b4:66:c0:6c:03:56:cc:69:30:5e:
b6:9f:7c:64:b1:6d:73:f4:98:c2:b0:37:26:99:80:
84:2e:2d:ef:9a:b9:73:bb:ee:4f:b1:6b:1f:c4:68:
f7:48:4c:30:d6:6d:59:54:98:77:aa:b6:29:75:91:
0c:6e:19:03:79:d8:f0:d0:a4:00:90:cd:09:7c:ce:
cd:7c:6c:ef:eb:ec:aa:99:87:4a:c7:ae:d1:fb:5f:
ac:ed:75:cd:2c:16:af:50:16:62:0e:b7:de:de:a4:
83:01:62:24:40:eb:7a:a6:34:d7:91:68:b5:aa:27:
a9:d6:42:4a:e4:53:35:8a:5d:c6:c0:50:c8:1f:59:
db:01:62:10:e8:88:28:23:3a:66:4d:ec:de:4e:98:
ef:55:79:c9:de:4a:62:df:88:84:90:f9:82:53:da:
6f:18:30:22:85:48:df:e8:c2:3d:11:85:2b:0a:e6:
f5:49:ac:72:56:00:75:91:74:89:ba:59:eb:fc:d1:
c1:31:c9:f3:57:67:c6:79:c5:94:e0:5b:33:f7:24:
d2:8b:02:5b:ec:64:b5:26:92:0c:d6:8a:e7:51:a1:
40:66:d0:82:22:e8:d7:c9:87:d1:06:8c:a0:53:0b:
d1:c9:83:13:b3:fd:ed:74:1b:8c:86:5c:1a:12:f3:
0f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:8D:8D:B5:CA:C0:0B:20:A3:76:3C:9E:AF:CC:6E:2F:E5:12:55:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967/d36166e4-c341-359d-b454-ef42a101c9da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967/5c264ed0-521b-453b-b8f6-85ab4d47c967.crl
X509v3 Authority Key Identifier:
keyid:9F:28:CD:08:1C:CC:44:29:16:B0:7C:6D:18:9B:2E:B9:E6:02:4F:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967.cer
sbgp-ipAddrBlock: critical
IPv4:
205.174.144.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:ec:32:e2:fa:f3:15:56:ca:e0:df:b9:15:8b:ee:25:bd:b7:
b9:0b:fd:05:31:e2:83:12:6d:24:4c:c6:aa:e3:2c:32:1e:97:
b5:29:77:ce:64:d4:73:b9:f2:ef:92:8a:eb:34:7a:8c:2e:87:
d3:50:40:53:9d:f7:1b:ca:35:0d:e5:c3:b3:89:a1:58:34:0d:
59:0b:61:04:6f:43:00:b6:85:f9:4b:c8:24:27:70:fe:5c:4c:
ba:6d:5b:64:0e:c2:d5:c0:a5:71:03:41:e8:13:ce:2b:b7:b1:
f8:e1:0e:9c:fc:6c:62:da:8a:34:e3:a2:a9:2d:68:61:e2:f8:
9b:21:b2:df:72:bf:74:aa:2e:6c:c4:f8:22:91:e4:c0:3d:55:
dc:dc:df:dd:03:87:70:54:b8:a5:db:08:d7:96:80:fe:14:e1:
d7:6e:a4:74:bf:ce:d6:ad:3f:9c:be:c8:dd:4a:7f:e0:d1:67:
7e:2a:ef:95:16:8f:9f:70:e7:51:75:3b:88:5b:fd:6c:5e:db:
ff:8c:34:ae:bf:bf:ac:85:57:28:f1:b1:39:ba:8a:ec:44:5b:
f1:fb:e7:72:96:10:d7:20:44:5e:80:72:c8:c2:ed:e3:0f:3b:
8a:04:5b:35:31:81:dc:76:03:5e:6b:30:bb:da:b5:dc:2d:ff:
f5:1b:dc:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:40:15 2025 by rpki-client