Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/82081b1c-a2de-357f-81fd-69a40673670c.roa
File: 82081b1c-a2de-357f-81fd-69a40673670c.roa (raw, json)
Hash identifier: J+Srb9QNunFlkNeXNpP4Rf1Y706bAhOGb3y9CYuAfig=
Subject key identifier: 35:24:41:30:7D:6B:0D:03:6C:CE:5D:70:0C:D4:50:97:2F:FA:BB:A3
Certificate issuer: /CN=d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1
Certificate serial: 010D0C9F432858490B4C18DE9A147CB559CDA370
Authority key identifier: 5A:15:4B:45:E3:B1:02:C5:CE:B2:56:2D:B9:0F:CE:3B:E5:C5:75:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/82081b1c-a2de-357f-81fd-69a40673670c.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 160
IP address blocks: 192.5.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 16 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:18:de:9a:14:7c:b5:59:cd:a3:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=fd665d9b-2849-460b-ac2d-31fde7ccb707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:17:22:47:d2:1d:a0:bf:75:02:1d:8e:b4:d1:
ea:13:0c:0f:94:a8:8c:07:14:f4:e5:2c:1f:f0:2e:
eb:0d:f9:50:2f:dd:2b:68:8e:b4:6f:3d:be:3d:00:
cb:25:54:38:07:82:f2:39:6c:75:b3:cd:0f:01:1b:
13:75:b6:dd:96:7e:5c:eb:43:19:c0:05:ee:e1:f6:
ad:0b:ff:fb:d9:b4:80:ed:d6:37:ca:9b:c2:f7:11:
81:26:15:06:18:9e:b3:33:83:ad:9f:f8:9e:69:6e:
b3:74:a8:60:0d:bb:77:ca:02:e8:8b:4b:2e:32:33:
bf:b0:e2:4f:49:39:15:b4:3d:38:c1:65:05:cd:73:
36:5b:e3:ba:20:b5:3c:ac:1b:fb:1f:44:8f:9d:e3:
ee:08:0c:6f:6d:ba:42:79:4f:51:f4:c7:19:26:ef:
86:5c:c6:5d:38:26:1b:64:00:13:35:c7:79:56:81:
f3:e7:9d:f7:d7:0f:7c:cd:f8:14:c3:22:a3:fa:32:
e9:32:e2:3a:6f:e9:9a:ed:00:d2:0e:f1:4a:73:2d:
79:45:4c:a8:bd:8b:f4:0d:a4:1a:e5:7b:3b:76:c1:
93:0d:67:32:cc:c1:03:34:f2:a1:c3:64:8a:50:ca:
46:5e:36:cf:ed:7b:20:92:a2:e4:71:33:39:ae:a9:
6e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:24:41:30:7D:6B:0D:03:6C:CE:5D:70:0C:D4:50:97:2F:FA:BB:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/82081b1c-a2de-357f-81fd-69a40673670c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.crl
X509v3 Authority Key Identifier:
keyid:5A:15:4B:45:E3:B1:02:C5:CE:B2:56:2D:B9:0F:CE:3B:E5:C5:75:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.cer
sbgp-ipAddrBlock: critical
IPv4:
192.5.85.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:43:a7:d2:e3:24:70:77:8a:0b:38:94:23:1e:73:29:09:54:
9e:e1:1c:b8:15:f9:f8:91:74:a1:18:7e:b9:e1:4f:90:3c:52:
04:e2:e2:1a:ac:ee:0f:8e:71:e0:f4:5a:a5:64:df:c3:ec:fb:
05:50:2c:8e:a6:d8:c6:ae:52:9d:f4:71:6e:14:bc:84:64:eb:
f4:85:23:c8:75:0e:de:17:a2:05:c1:34:74:1c:4d:75:54:f3:
8c:93:60:e3:d6:b0:e3:00:50:27:92:99:71:d5:16:2c:a8:5a:
2e:34:7b:16:06:87:5e:1c:7b:c3:2f:f9:a5:de:6f:5e:65:89:
ab:fd:33:90:cd:de:84:16:1e:ac:67:06:a4:52:05:43:09:c0:
9d:a0:8d:17:a0:4e:fc:6f:ba:25:62:03:1f:0f:92:d9:83:6f:
2a:6d:75:79:01:d6:b7:2b:19:82:c6:0c:68:fc:f0:83:0a:1e:
db:12:1e:01:52:de:08:6a:98:c5:cc:dd:4a:f9:5f:39:39:c7:
2b:94:60:3c:5e:c8:8e:7c:f9:72:e9:13:9a:f9:79:00:7f:30:
c4:d8:49:ac:8f:83:ed:2f:88:90:aa:1e:93:05:a0:8b:7d:b3:
1c:2b:9f:af:5e:57:4c:3f:94:37:29:53:54:d7:e5:64:b3:21:
90:6e:76:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 06:09:47 2025 by rpki-client