Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/0156459b-1048-3ac6-b762-361ee7d49132.roa
File: 0156459b-1048-3ac6-b762-361ee7d49132.roa (raw, json)
Hash identifier: Vg3PTRs/6OwI+LoNNt9+s5ZqdxvbzBKQ0LeKZtYYlwo=
Subject key identifier: E4:EA:EF:03:A8:6A:32:62:35:67:9C:E7:BE:44:59:09:F8:B0:51:73
Certificate issuer: /CN=8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4
Certificate serial: 010D0C9F43285848FD56D00AD8F971DBCCF3A900
Authority key identifier: 4F:4B:38:8D:5F:5D:84:E7:D1:91:04:8E:D4:47:EB:05:74:B3:3E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/0156459b-1048-3ac6-b762-361ee7d49132.roa
Signing time: Mon 24 Feb 2025 14:00:52 +0000
ROA not before: Mon 24 Feb 2025 14:00:52 +0000
ROA not after: Sun 25 May 2025 13:00:52 +0000
asID: 14618
IP address blocks: 204.79.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:56:d0:0a:d8:f9:71:db:cc:f3:a9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4
Validity
Not Before: Feb 24 14:00:52 2025 GMT
Not After : May 25 13:00:52 2025 GMT
Subject: CN=fbfd1372-9703-47d2-9d64-fde0efca1583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9c:8d:c0:4e:54:c6:cd:fa:ca:b5:6b:b6:bb:
8f:a0:3b:f5:ac:da:23:09:c8:38:ac:24:36:8f:c0:
0c:df:7f:b3:8a:cb:71:ed:21:76:7d:e8:95:f5:7b:
53:34:98:47:de:62:30:10:a4:ac:81:44:49:a5:20:
94:4b:26:91:2b:e8:7d:d1:ec:9f:aa:c2:6c:4b:8d:
53:57:9e:1f:b9:b5:82:75:17:d8:9d:9e:9b:20:30:
c3:6c:91:2d:ba:2f:30:80:ff:ab:9b:b3:98:33:5c:
76:67:ab:ab:82:b5:d5:cd:4c:1e:cb:95:4e:d4:60:
a8:98:c7:8b:28:e2:cb:07:6c:f3:71:15:93:f5:4b:
ae:2a:c6:9e:dc:a6:3e:7a:02:9c:f0:f1:d4:43:9e:
e6:f6:ec:eb:12:07:6e:78:be:15:ca:fc:6c:7b:6e:
25:ff:7a:5a:25:5d:ec:6b:13:44:ef:db:d3:17:07:
e3:8f:83:6e:f6:41:c6:64:9a:0d:69:b5:fe:d6:75:
32:42:e0:96:12:54:83:f2:ad:27:ed:36:d9:6c:98:
a5:9e:06:c4:d3:8c:af:9b:22:26:aa:0c:8b:2f:7e:
71:9c:d6:32:80:dd:0c:67:12:1f:49:55:bc:13:1c:
33:83:68:5a:43:69:bb:55:b1:63:f5:af:da:60:8a:
aa:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:EA:EF:03:A8:6A:32:62:35:67:9C:E7:BE:44:59:09:F8:B0:51:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/0156459b-1048-3ac6-b762-361ee7d49132.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.crl
X509v3 Authority Key Identifier:
keyid:4F:4B:38:8D:5F:5D:84:E7:D1:91:04:8E:D4:47:EB:05:74:B3:3E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.cer
sbgp-ipAddrBlock: critical
IPv4:
204.79.137.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:a5:5f:42:6a:fd:d9:61:94:39:85:ee:f4:63:3f:d9:5b:c1:
91:5b:22:77:17:c0:38:de:b0:5d:c1:8a:31:ca:24:3d:ca:db:
f9:0c:e3:98:4a:8c:89:ea:6f:4c:c9:79:bd:93:1e:ee:d5:89:
7b:f1:01:76:cd:a5:eb:7c:da:83:fd:7e:b3:b7:67:36:7c:dc:
b9:64:c1:66:36:98:8b:58:c0:cb:25:a9:62:2b:a8:50:4c:77:
9f:9f:68:d3:d7:ef:d3:1f:8d:71:c5:c8:33:3b:60:ac:74:50:
13:5d:1d:fd:a6:3d:f1:52:c2:e9:4d:9f:a8:20:db:d2:7c:1a:
a5:27:f5:9e:dc:20:06:b7:1f:20:61:04:26:39:63:3f:e4:26:
a9:c4:55:71:be:58:2a:0e:88:69:20:12:94:8b:6a:e0:39:75:
eb:e8:de:e0:8e:0e:65:22:3b:13:77:7f:67:01:fc:6c:70:db:
46:1c:05:f4:7c:18:17:31:56:d3:1b:d0:b8:53:20:2c:4f:cc:
81:0b:cb:ac:fb:12:55:60:27:8b:0d:8f:12:0f:6d:c2:8d:aa:
fa:fd:8e:5f:7b:de:06:4b:ee:0b:2d:a8:d3:ba:bb:33:9c:9c:
94:3c:99:60:2b:c9:0e:8c:95:e6:c1:4b:ef:3d:06:d0:0c:fe:
df:9a:f7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 18:06:20 2025 by rpki-client