Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/18ad5fd7-ae1c-39d3-9a55-0b3ebfcd0be9.roa
File: 18ad5fd7-ae1c-39d3-9a55-0b3ebfcd0be9.roa (raw, json)
Hash identifier: D/iAnA5gZqwQPk4K4ToMZSGGEy+O17w6uiuNt2L/Jp8=
Subject key identifier: 3C:3F:81:14:B1:71:72:3B:6A:72:23:11:BB:79:42:A7:67:5B:51:2F
Certificate issuer: /CN=0cb53f01-b9a4-4a01-b384-1d40f55687b4
Certificate serial: 010D0C9F43285848F22BE07A96FCA0F6FFA49480
Authority key identifier: 78:EA:5F:6A:38:38:95:7B:48:29:A0:B1:4B:35:98:07:F9:10:6C:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/18ad5fd7-ae1c-39d3-9a55-0b3ebfcd0be9.roa
Signing time: Thu 20 Feb 2025 14:00:52 +0000
ROA not before: Thu 20 Feb 2025 14:00:52 +0000
ROA not after: Wed 21 May 2025 13:00:52 +0000
asID: 26535
IP address blocks: 207.251.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/0cb53f01-b9a4-4a01-b384-1d40f55687b4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/0cb53f01-b9a4-4a01-b384-1d40f55687b4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 16 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:2b:e0:7a:96:fc:a0:f6:ff:a4:94:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cb53f01-b9a4-4a01-b384-1d40f55687b4
Validity
Not Before: Feb 20 14:00:52 2025 GMT
Not After : May 21 13:00:52 2025 GMT
Subject: CN=51349b37-f1dc-412a-bdb6-c676edc30a48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:20:ca:89:d6:34:8b:fa:e4:5d:d8:74:77:04:
ca:5a:36:e1:20:0d:9f:9f:d5:f0:d8:33:3a:33:25:
b7:f5:d5:77:c4:ba:3e:65:fc:d5:51:e9:e0:2f:91:
d1:73:36:0a:7e:00:2e:4b:13:3f:4c:6c:bb:a1:54:
f9:3d:c0:8c:07:34:af:2c:80:cc:17:9d:6f:14:96:
97:ec:82:c6:c8:1b:85:cb:9b:fc:6b:94:67:64:d4:
c6:d2:b0:75:d3:a1:0d:99:89:9a:48:e6:64:cf:f0:
bb:67:f3:b0:83:1f:2f:e0:33:33:8c:ee:72:90:76:
7d:52:a8:2d:2f:56:56:bd:04:f1:3e:f4:fc:a7:be:
22:79:d5:90:5f:21:80:6d:ab:57:90:74:df:09:8c:
92:14:4e:75:d9:f9:6d:12:58:80:f2:ce:c3:42:c5:
4c:ee:61:2e:d9:7e:59:14:b0:af:c1:62:dc:1c:0e:
47:8c:52:39:80:28:71:58:67:b6:a5:a6:a8:67:c8:
fe:8a:73:95:10:93:9b:44:96:5d:47:44:01:62:aa:
81:62:55:a5:82:6b:3e:93:94:bc:a4:7e:6c:ca:c3:
4b:5f:b7:3f:f8:13:32:05:b2:6f:f6:e9:7c:37:d4:
64:4c:4f:89:4e:34:24:26:fa:56:ad:be:87:0f:54:
de:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:3F:81:14:B1:71:72:3B:6A:72:23:11:BB:79:42:A7:67:5B:51:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/18ad5fd7-ae1c-39d3-9a55-0b3ebfcd0be9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/0cb53f01-b9a4-4a01-b384-1d40f55687b4.crl
X509v3 Authority Key Identifier:
keyid:78:EA:5F:6A:38:38:95:7B:48:29:A0:B1:4B:35:98:07:F9:10:6C:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4.cer
sbgp-ipAddrBlock: critical
IPv4:
207.251.106.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:13:89:63:70:9a:19:f1:bf:7a:5a:91:d2:f6:65:1b:57:62:
3e:76:4b:f3:a3:40:97:13:09:11:ed:71:92:39:7f:24:b3:b8:
b8:c3:9f:c3:c4:29:ba:44:10:8f:25:5c:31:6d:4f:05:ae:b9:
56:e5:9b:23:47:a5:36:55:c4:3b:fe:6a:2d:e5:3e:45:84:d6:
7e:db:f5:fe:5d:ff:10:26:e0:fc:2d:c2:f8:6e:bd:e4:ca:a4:
e3:b4:5c:28:d1:04:64:9e:25:3e:3a:65:0d:da:2f:c5:c2:cb:
ec:f4:f1:3b:f2:b3:28:a6:cb:d9:a5:2b:e9:1e:7e:5c:85:4b:
ea:7b:82:fe:86:5c:9a:03:04:1f:3f:43:d3:5e:c6:e8:ba:0a:
d3:67:3d:98:1f:91:0b:fe:2f:d7:ea:19:e3:b5:34:f4:be:e9:
b5:da:49:81:91:ff:cb:86:10:e5:8d:6c:a3:02:18:c2:2f:2b:
ea:bd:ec:9e:3d:c9:2f:d8:bf:36:44:3f:45:4a:cb:c2:53:d5:
14:54:d2:f8:21:78:90:f2:7d:0b:09:76:9a:a0:ca:9c:50:c6:
25:58:03:47:10:8b:9f:11:1c:00:de:e3:ca:0f:65:77:3d:da:
5d:97:d5:e6:a6:20:cf:73:0c:8f:33:5c:c8:e8:3b:ca:4c:ab:
83:3e:c0:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 06:10:08 2025 by rpki-client