Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9251b7c9-cc55-4637-b464-be2f1813b4c2/48f0f130-5910-3ec3-a83a-f1ec9c57b048.roa
File: 48f0f130-5910-3ec3-a83a-f1ec9c57b048.roa (raw, json)
Hash identifier: tAkOVAuLouLhUdYlbnnVJTcPZARJpIpVQzr4a1G4vqc=
Subject key identifier: AA:CA:2C:84:9A:55:66:F6:67:2D:00:9A:FF:22:15:D4:73:68:16:8C
Certificate issuer: /CN=9251b7c9-cc55-4637-b464-be2f1813b4c2
Certificate serial: 010D0C9F432858491ED6E82C299F0FDC68E25D80
Authority key identifier: 00:23:37:C2:FF:50:26:00:2F:FD:74:58:64:0B:CF:4F:90:F8:32:40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9251b7c9-cc55-4637-b464-be2f1813b4c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9251b7c9-cc55-4637-b464-be2f1813b4c2/48f0f130-5910-3ec3-a83a-f1ec9c57b048.roa
Signing time: Sat 08 Mar 2025 14:00:52 +0000
ROA not before: Sat 08 Mar 2025 14:00:52 +0000
ROA not after: Fri 06 Jun 2025 13:00:52 +0000
asID: 8075
IP address blocks: 195.85.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9251b7c9-cc55-4637-b464-be2f1813b4c2/9251b7c9-cc55-4637-b464-be2f1813b4c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9251b7c9-cc55-4637-b464-be2f1813b4c2/9251b7c9-cc55-4637-b464-be2f1813b4c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9251b7c9-cc55-4637-b464-be2f1813b4c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1e:d6:e8:2c:29:9f:0f:dc:68:e2:5d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9251b7c9-cc55-4637-b464-be2f1813b4c2
Validity
Not Before: Mar 8 14:00:52 2025 GMT
Not After : Jun 6 13:00:52 2025 GMT
Subject: CN=30e1e51a-d79d-4f6b-a6b7-29f4ac295260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c3:2e:e3:93:a2:51:ef:da:33:6c:24:ca:45:
88:ab:6a:6e:22:6f:ef:cf:a8:5a:8c:4a:4b:21:c9:
e6:b8:a2:e4:18:c0:4a:36:06:cc:25:a5:b4:17:7b:
34:2f:fb:77:14:31:79:3e:82:51:a7:cb:f7:7f:42:
b5:24:0a:39:59:55:f5:0a:6f:8d:87:67:33:2b:46:
9c:76:19:f4:bf:fa:06:31:a8:65:42:f7:5b:eb:ae:
42:9d:c0:cf:0a:cc:ae:78:f9:38:72:ee:2f:9e:c9:
2a:0f:71:ec:81:56:d9:8b:d6:e6:44:59:31:32:49:
04:96:d0:96:4c:37:4a:31:e8:6d:3f:c1:aa:f4:da:
96:5b:63:c1:e2:bb:01:a3:96:40:e9:20:27:70:81:
3b:58:84:22:1c:d1:3c:c3:42:4f:92:12:c0:cd:08:
ea:ab:4c:1b:88:2b:17:12:92:69:fa:a5:cf:bf:46:
59:f7:be:85:a4:61:78:fd:9d:27:f6:00:7e:17:e8:
d7:cf:cb:10:56:d0:c7:23:e0:9b:ce:e3:c8:14:4c:
14:dc:eb:44:86:7c:bb:53:93:29:68:32:89:da:d0:
0a:03:e9:7e:13:4a:2d:26:58:bc:0e:2d:5a:37:c0:
00:1e:21:2e:17:c1:2a:fb:4b:e4:f2:63:f9:2c:d5:
26:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:CA:2C:84:9A:55:66:F6:67:2D:00:9A:FF:22:15:D4:73:68:16:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9251b7c9-cc55-4637-b464-be2f1813b4c2/48f0f130-5910-3ec3-a83a-f1ec9c57b048.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9251b7c9-cc55-4637-b464-be2f1813b4c2/9251b7c9-cc55-4637-b464-be2f1813b4c2.crl
X509v3 Authority Key Identifier:
keyid:00:23:37:C2:FF:50:26:00:2F:FD:74:58:64:0B:CF:4F:90:F8:32:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9251b7c9-cc55-4637-b464-be2f1813b4c2.cer
sbgp-ipAddrBlock: critical
IPv4:
195.85.113.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:80:65:8b:52:f5:fc:3e:85:0e:ba:7f:9c:f5:9c:30:08:92:
f0:76:b5:c0:21:ea:37:e0:79:6a:58:33:d3:44:8f:21:2a:90:
83:81:7a:c3:9f:25:c5:a5:e4:5b:72:b9:2d:e4:3d:2f:94:96:
9b:54:28:f0:0c:29:0e:50:ed:05:cb:e5:47:7f:50:e7:8e:4a:
ac:29:f3:37:15:9f:06:c5:68:3d:89:03:16:eb:30:8c:76:64:
73:e0:17:70:9d:17:a6:f3:1d:ec:44:5d:30:50:48:15:dc:5d:
79:56:b8:e5:4a:96:0d:60:3b:71:3f:44:76:99:54:b3:08:3b:
81:fa:1e:17:14:06:76:c0:b9:e3:b5:b0:bd:d3:66:fe:b9:f6:
aa:39:58:02:b0:9a:c1:2a:ae:44:07:c7:ca:a0:11:d2:d6:f1:
42:3b:25:5b:f7:ac:c8:32:52:dd:2c:46:00:8f:2f:81:61:a3:
10:95:ec:a1:9c:4e:0d:dc:83:83:0d:a9:c6:4e:a0:d2:10:a1:
f8:77:3c:73:0a:30:9f:78:77:7a:ca:62:63:57:9e:dc:7c:d8:
93:ef:84:51:ce:a7:68:66:ca:1d:59:7d:0d:da:23:98:f0:44:
0b:01:70:e8:c9:b9:6a:e9:d1:b6:27:14:54:c9:d4:94:2c:82:
78:b6:bc:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 11:15:47 2025 by rpki-client