Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/ea93ae24-34e7-3c83-9477-44557229880c.roa
File: ea93ae24-34e7-3c83-9477-44557229880c.roa (raw, json)
Hash identifier: cfh3g5H1B/ZHMxSX9Fn1qyFxbgPH4vEfCL1JcQY8Ahw=
Subject key identifier: A3:19:0F:CB:27:B6:D7:E3:94:62:DE:50:60:64:C9:1C:BD:DE:CE:12
Certificate issuer: /CN=d3bf28f7-eba5-4254-a572-761a872427b5
Certificate serial: 010D0C9F4328584937D93B5B2114CDA2A89567C0
Authority key identifier: 05:83:BF:45:04:55:C8:8C:9C:6C:F8:A0:5B:76:31:FE:F7:6A:8C:19
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/ea93ae24-34e7-3c83-9477-44557229880c.roa
Signing time: Mon 17 Mar 2025 13:00:52 +0000
ROA not before: Mon 17 Mar 2025 13:00:52 +0000
ROA not after: Sun 15 Jun 2025 13:00:52 +0000
asID: 20237
IP address blocks: 192.103.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/d3bf28f7-eba5-4254-a572-761a872427b5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/d3bf28f7-eba5-4254-a572-761a872427b5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 16 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:37:d9:3b:5b:21:14:cd:a2:a8:95:67:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3bf28f7-eba5-4254-a572-761a872427b5
Validity
Not Before: Mar 17 13:00:52 2025 GMT
Not After : Jun 15 13:00:52 2025 GMT
Subject: CN=4f2e1221-0846-4e0e-a554-28af0fb58e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3b:3b:83:f6:bb:81:ed:6c:6b:4e:a2:a9:8c:
e7:bd:dd:3f:8c:e5:ff:80:66:64:ca:3d:1b:8f:df:
96:15:42:e4:02:5c:b1:12:c9:d4:b3:cf:f0:73:76:
a2:dd:a3:89:82:7c:7a:2f:02:44:cd:a7:f9:7f:71:
ed:d5:95:5c:65:9f:10:94:d0:fe:6c:94:f4:36:6e:
df:4a:cb:e5:74:93:b6:6a:66:30:3c:6a:66:05:f1:
a2:81:3c:8d:16:21:96:e2:99:9b:07:db:2b:3d:61:
1b:2c:03:1e:07:82:e4:90:1d:9d:5c:f9:a9:ab:9a:
15:6b:a4:b0:bc:0b:ed:34:90:c9:51:06:a6:8a:83:
a1:7e:38:91:8b:ea:6e:1d:d2:d6:be:3a:3c:e4:6f:
3a:14:fc:1b:3d:45:2b:72:6a:1c:50:6e:94:08:6d:
a0:a5:04:c9:fb:ad:d7:db:86:79:e1:b5:75:d0:71:
df:7b:1b:b4:ff:95:75:f5:6c:17:55:ca:d6:75:41:
da:72:cf:a2:71:c6:fd:1d:a4:e7:db:1e:1e:8e:81:
1b:d1:b9:4b:50:45:1e:d9:07:6e:d3:45:4c:83:08:
73:5d:68:ec:30:39:23:75:fd:17:be:fa:6e:f7:11:
93:c1:fb:de:c9:6d:e2:9d:f2:34:64:88:5f:13:ea:
4b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:19:0F:CB:27:B6:D7:E3:94:62:DE:50:60:64:C9:1C:BD:DE:CE:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/ea93ae24-34e7-3c83-9477-44557229880c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/d3bf28f7-eba5-4254-a572-761a872427b5.crl
X509v3 Authority Key Identifier:
keyid:05:83:BF:45:04:55:C8:8C:9C:6C:F8:A0:5B:76:31:FE:F7:6A:8C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5.cer
sbgp-ipAddrBlock: critical
IPv4:
192.103.255.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:c6:f0:52:7e:0e:b5:68:a3:2a:63:54:b0:39:1c:eb:b5:59:
3e:ff:6a:22:f5:a4:de:96:c2:07:bd:0f:9d:73:0b:8a:94:47:
31:43:72:fa:13:2e:da:54:82:f2:3e:a3:56:06:6f:61:83:e8:
44:73:63:85:6b:74:bd:65:4e:24:fb:d7:4c:bd:26:8a:bf:47:
0b:a9:b9:9e:b5:91:76:3c:d4:55:c4:8c:e0:d0:39:38:a3:e7:
6a:13:de:f4:2f:71:45:7f:e8:16:68:23:63:95:58:cb:33:4e:
26:29:dc:cd:ed:57:63:b4:d1:47:66:ad:0b:cd:cc:87:11:f2:
c2:a4:7c:27:4d:d7:53:11:a5:0d:ff:1c:57:4f:f9:db:d6:cd:
c4:b8:66:c6:7a:05:2a:bb:0c:5e:c1:b7:7b:e5:88:ba:d2:cd:
08:99:20:3a:ba:c5:78:e3:2d:33:61:52:e7:b5:59:92:19:f6:
12:04:d3:fc:9e:70:7b:6e:4d:81:78:17:03:54:5d:1e:33:45:
cc:eb:31:9e:98:cb:1c:15:ec:91:c9:41:b5:1d:fd:de:f4:2f:
e5:1d:89:60:df:27:30:39:07:73:4b:d3:79:7c:fa:35:da:b6:
a5:2c:5d:e2:5b:ae:e6:9a:f7:d7:b3:44:e5:d4:31:de:d4:4e:
7a:51:18:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 12:28:29 2025 by rpki-client