Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c6c4fe4-5642-4ad0-8325-69940b2ed04d/03311caa-eedc-35f5-b4a3-a502fc212a0b.roa
File: 03311caa-eedc-35f5-b4a3-a502fc212a0b.roa (raw, json)
Hash identifier: cZHjTTofP6st1v0HzX459qauwLQir4ANCj6w4V8uP9E=
Subject key identifier: 5B:43:D4:12:8E:C9:83:CA:44:52:B3:39:44:E5:A4:29:D9:19:13:1F
Certificate issuer: /CN=7c6c4fe4-5642-4ad0-8325-69940b2ed04d
Certificate serial: 010D0C9F43285848CC7B9D746C569049C2168980
Authority key identifier: 83:EA:7B:A7:EC:EF:C3:78:8A:A5:E9:EE:2C:4B:B3:1B:73:73:BC:56
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c6c4fe4-5642-4ad0-8325-69940b2ed04d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c6c4fe4-5642-4ad0-8325-69940b2ed04d/03311caa-eedc-35f5-b4a3-a502fc212a0b.roa
Signing time: Fri 07 Feb 2025 02:00:39 +0000
ROA not before: Fri 07 Feb 2025 02:00:39 +0000
ROA not after: Thu 08 May 2025 01:00:39 +0000
asID: 8075
IP address blocks: 156.20.22.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c6c4fe4-5642-4ad0-8325-69940b2ed04d/7c6c4fe4-5642-4ad0-8325-69940b2ed04d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c6c4fe4-5642-4ad0-8325-69940b2ed04d/7c6c4fe4-5642-4ad0-8325-69940b2ed04d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c6c4fe4-5642-4ad0-8325-69940b2ed04d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cc:7b:9d:74:6c:56:90:49:c2:16:89:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c6c4fe4-5642-4ad0-8325-69940b2ed04d
Validity
Not Before: Feb 7 02:00:39 2025 GMT
Not After : May 8 01:00:39 2025 GMT
Subject: CN=f7267a8e-adb0-48b7-b142-b8e4994eb549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:8d:ab:20:5b:8e:a5:9f:46:5c:ac:9b:5e:0d:
44:68:bc:d4:8a:b2:ca:d2:f2:37:78:54:9a:e5:44:
1a:8f:7d:53:dc:f0:2a:60:9a:1b:36:8a:a0:cc:71:
91:50:fe:de:54:c2:ba:cc:74:48:a3:8d:e4:ff:8a:
00:17:7a:05:81:cb:0e:1c:c1:a7:1e:ff:df:90:36:
7a:b2:20:06:30:74:ad:ec:f2:20:f8:bf:0f:0b:95:
cb:9b:07:9f:ab:31:8f:ae:f4:24:6d:a7:e5:ed:16:
a6:6c:18:88:b8:ce:19:23:67:14:91:ac:d6:9d:c8:
e6:36:80:e0:3d:ca:68:2b:c9:dc:66:bc:e1:ce:0a:
39:2e:83:d8:f1:a9:a4:fd:50:0b:9d:76:70:3d:c0:
97:e2:39:eb:4f:9c:ad:09:ed:96:e2:2d:2b:22:47:
99:84:b6:16:29:99:6e:74:5f:89:df:0b:7f:d5:c1:
79:59:4c:de:d9:1d:14:01:b6:1a:04:52:32:12:5a:
37:fc:da:22:be:2f:de:87:6a:44:64:2c:87:48:b0:
e0:0d:39:77:22:e2:3b:e6:25:7e:4c:46:05:5f:91:
02:20:11:a3:f0:7c:d0:42:f7:74:fd:39:5c:70:03:
32:f9:23:4c:2d:b3:49:59:e5:56:06:0d:ba:0d:5a:
f7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:43:D4:12:8E:C9:83:CA:44:52:B3:39:44:E5:A4:29:D9:19:13:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c6c4fe4-5642-4ad0-8325-69940b2ed04d/03311caa-eedc-35f5-b4a3-a502fc212a0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c6c4fe4-5642-4ad0-8325-69940b2ed04d/7c6c4fe4-5642-4ad0-8325-69940b2ed04d.crl
X509v3 Authority Key Identifier:
keyid:83:EA:7B:A7:EC:EF:C3:78:8A:A5:E9:EE:2C:4B:B3:1B:73:73:BC:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c6c4fe4-5642-4ad0-8325-69940b2ed04d.cer
sbgp-ipAddrBlock: critical
IPv4:
156.20.22.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:87:40:16:2e:ea:4e:39:2d:9b:76:9f:97:f2:d3:f5:91:f8:
cf:63:49:46:e3:22:28:30:86:4f:c3:65:d8:31:5a:4f:4c:61:
23:63:19:12:ac:5e:c3:df:92:9e:ad:5d:a0:18:b4:64:72:09:
41:33:0c:52:84:b6:f4:14:e4:1c:f5:78:6f:9e:73:8a:8b:54:
b2:73:d1:f4:f6:78:64:30:a3:3a:10:64:71:51:e2:43:bc:80:
7a:fc:c4:d1:be:85:a8:2a:98:fb:38:02:cd:c3:5c:d4:bb:c2:
49:40:2e:c8:ec:19:33:96:dc:67:b4:42:6b:42:47:17:67:62:
6b:a1:38:b4:8a:c3:8f:83:49:f4:7c:8b:2e:c0:89:d8:e0:3d:
05:52:6e:8c:7f:fb:08:bb:11:f8:49:21:0a:3b:45:b8:a8:a7:
6b:e2:a8:40:5d:6a:f6:54:12:41:e3:7c:6a:c4:9d:b9:84:44:
78:38:4d:7c:ab:52:1d:55:21:94:f6:a6:97:17:70:ea:e4:71:
6a:94:29:c2:48:c8:aa:87:90:cc:12:d7:d5:b6:6e:3d:62:34:
df:7d:d3:c5:0f:4f:bf:6a:39:07:58:64:8e:6e:0e:aa:05:fe:
d8:54:c0:e2:6f:9a:31:bb:d2:1f:42:fa:5b:85:e6:a4:17:25:
25:db:ed:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:46:10 2025 by rpki-client