Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/55e7c28a-74d5-3f36-8da9-a97ed7201f0a.roa
File: 55e7c28a-74d5-3f36-8da9-a97ed7201f0a.roa (raw, json)
Hash identifier: LNRxF1miTCJQHQiTq4OiBpNsitsHTpyp4Dijr/vLJW0=
Subject key identifier: B9:A8:83:49:30:6A:FB:47:89:F2:FA:A1:3C:BF:F5:1F:D9:AC:27:9B
Certificate issuer: /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial: 010D0C9F4328584929BBC3F03BF866E215DD2500
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/55e7c28a-74d5-3f36-8da9-a97ed7201f0a.roa
Signing time: Wed 12 Mar 2025 11:40:17 +0000
ROA not before: Wed 12 Mar 2025 11:40:17 +0000
ROA not after: Tue 10 Jun 2025 11:40:17 +0000
asID: 63360
IP address blocks: 168.225.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 16 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:29:bb:c3:f0:3b:f8:66:e2:15:dd:25:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Validity
Not Before: Mar 12 11:40:17 2025 GMT
Not After : Jun 10 11:40:17 2025 GMT
Subject: CN=526809c1-dee7-4541-860f-b9bcfef67622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c1:51:09:8e:a9:bc:47:d4:05:a5:95:b0:ca:
b5:72:22:81:fb:e9:f7:26:a8:87:40:ab:45:bf:24:
49:cd:6d:3d:d1:5f:c5:c7:db:20:50:5a:ea:b2:36:
e8:3f:1e:45:76:af:59:54:7a:a3:7d:6d:20:13:47:
72:f4:4a:6d:fa:c8:37:01:7a:fa:2a:fc:f0:38:0a:
c9:54:01:f1:12:ca:6b:c9:22:71:ad:57:5b:eb:19:
18:58:24:08:5e:ab:a0:10:96:99:54:3c:c0:59:cd:
b5:b7:94:62:b9:3b:91:6b:7f:e5:35:a5:25:db:cd:
10:07:f8:3f:0a:6a:25:4c:a0:d5:1d:88:28:55:84:
16:d7:28:f8:1f:c5:56:57:74:59:41:2c:15:08:dc:
05:7a:01:d2:f8:ff:5c:24:e7:5e:e3:b6:7c:26:06:
d2:ff:5b:eb:fb:ce:cc:c9:47:84:42:2a:83:e8:cf:
02:d8:46:5f:39:8a:6c:73:ff:25:7f:6a:bb:57:c8:
d0:3a:f6:fd:5e:17:97:f0:38:4d:bf:cd:02:1c:da:
54:48:5f:69:97:1e:e3:3c:92:c8:1b:4b:93:83:aa:
a8:a0:8d:41:7b:69:c2:db:fc:70:89:c2:d1:90:07:
59:e2:6b:b1:23:62:1d:11:d0:a1:9d:32:b8:cb:35:
0c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A8:83:49:30:6A:FB:47:89:F2:FA:A1:3C:BF:F5:1F:D9:AC:27:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/55e7c28a-74d5-3f36-8da9-a97ed7201f0a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl
X509v3 Authority Key Identifier:
keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
sbgp-ipAddrBlock: critical
IPv4:
168.225.4.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:dc:02:a3:ed:23:3f:e5:71:bf:14:a0:37:cd:20:18:66:34:
ce:e1:4b:64:54:06:09:01:1f:40:39:84:bf:90:26:bf:7f:4d:
d9:b4:28:76:89:38:fb:f1:ab:0a:d1:8a:09:4c:33:14:cb:68:
7a:c7:a0:4b:eb:46:d0:43:35:1b:83:3d:91:1a:e3:8b:c3:86:
f0:b2:bc:c0:8c:9e:e7:53:56:78:a3:bd:1d:4a:8a:dd:9f:4f:
73:d8:f4:6e:e9:5e:fd:e4:5b:a4:b2:1e:af:06:cf:16:9a:82:
ac:3c:1c:71:e2:25:f3:74:22:6e:12:dc:88:15:41:54:2c:f4:
29:cd:76:42:6e:99:58:d0:84:c3:4e:34:f2:9b:a6:ed:f3:58:
09:43:a7:fb:08:1c:73:c0:ca:8d:01:40:66:e4:1d:5e:2a:4f:
f5:07:c1:68:cf:e8:15:c2:c1:dc:29:73:73:f1:d1:1a:1e:d0:
d3:e1:87:22:fe:c8:1e:35:fa:61:67:da:f2:c7:b3:c3:23:0e:
a9:8e:e4:34:84:4e:c9:5b:1c:ec:d5:71:d9:81:a9:29:83:f7:
69:5c:ab:1b:0e:81:b4:ba:de:a8:03:43:d7:4c:86:68:9c:d1:
c2:eb:6c:76:24:36:fd:35:d9:10:fb:70:f0:91:69:f0:2f:14:
b3:fc:79:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 07:15:20 2025 by rpki-client