Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/7bb970e3-1f2c-3c28-87bb-b019061a026e.roa
File: 7bb970e3-1f2c-3c28-87bb-b019061a026e.roa (raw, json)
Hash identifier: xagSQ+00T5kQRYCwYzO9qbP8oB3g/VDXAgxSYsRSCLg=
Subject key identifier: C9:E9:2F:FC:37:57:96:B3:A9:63:A5:DE:44:FA:1A:C2:EE:70:A4:27
Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be
Certificate serial: 010D0C9F432858495ABECDD1C3D27FD70C1BE600
Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/7bb970e3-1f2c-3c28-87bb-b019061a026e.roa
Signing time: Sun 30 Mar 2025 01:00:47 +0000
ROA not before: Sun 30 Mar 2025 01:00:47 +0000
ROA not after: Sat 28 Jun 2025 01:00:47 +0000
asID: 9084
IP address blocks: 154.1.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 13 Apr 2025 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5a:be:cd:d1:c3:d2:7f:d7:0c:1b:e6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be
Validity
Not Before: Mar 30 01:00:47 2025 GMT
Not After : Jun 28 01:00:47 2025 GMT
Subject: CN=de38ef85-14bf-496d-9a11-a036a212574f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8d:9b:22:01:9f:91:e6:78:a3:f4:8e:4f:91:
bb:45:ee:d4:88:3c:81:a7:44:d4:5a:a6:83:79:25:
6c:a9:19:35:01:69:39:d3:e6:6d:28:d8:e4:59:db:
e9:78:3b:96:04:e2:81:28:ca:3a:72:f7:6a:75:9c:
b4:7d:2b:98:c5:d3:68:2b:b9:9a:04:4b:67:56:14:
51:ef:d7:0c:53:54:e4:23:cc:66:a8:cb:85:55:c8:
87:8a:3c:cb:91:af:44:a6:fa:1b:85:16:7e:f3:f8:
da:5a:16:81:ea:27:25:fc:45:af:81:04:17:2d:64:
c7:8a:2e:7c:bd:e0:a5:82:3e:9b:f0:17:04:62:d5:
3b:1d:38:a4:d9:9a:3b:a5:6c:9a:e9:7e:59:51:3d:
a7:bf:d5:3e:ff:5d:8b:70:2e:7d:3a:2d:f2:bf:ea:
1e:7f:32:61:4a:29:98:7d:9b:e7:af:75:dd:02:c9:
fb:64:30:43:d8:12:a3:8f:87:cf:6a:43:2f:89:24:
fd:77:12:b6:00:01:b3:70:96:56:58:94:7e:f6:6e:
71:10:0b:4f:4b:15:e1:18:d5:41:7f:bb:4b:20:07:
c1:c7:3e:35:56:61:9b:f4:cd:d2:7a:fb:ba:47:48:
e8:25:d1:c6:15:f2:28:dd:6a:5b:87:1e:e7:dd:24:
ce:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E9:2F:FC:37:57:96:B3:A9:63:A5:DE:44:FA:1A:C2:EE:70:A4:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/7bb970e3-1f2c-3c28-87bb-b019061a026e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl
X509v3 Authority Key Identifier:
keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
sbgp-ipAddrBlock: critical
IPv4:
154.1.173.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:c0:a4:06:83:82:61:99:2d:ca:3a:01:9f:4a:29:17:f9:0a:
e2:a4:62:ae:2e:49:cb:7a:f1:b6:65:1d:df:5c:ec:3c:8e:54:
08:9d:2d:11:b7:c6:9a:b3:60:d7:a4:59:7e:04:52:a6:ea:de:
ff:80:4e:19:2d:73:f6:6f:87:ce:e4:23:ca:ab:4b:d2:a6:c1:
26:98:74:d0:62:fa:c6:74:df:d9:c9:02:ad:c5:c8:9c:f3:83:
04:6b:40:2e:fb:2c:75:18:5a:12:5c:35:7f:e6:09:d7:ca:6f:
95:11:03:40:38:05:9f:88:9b:6c:54:3a:95:c7:e6:ac:7e:23:
df:00:22:9b:59:4b:4f:93:37:88:c9:53:79:6d:d7:3f:16:82:
eb:c0:c7:6c:36:b7:76:d8:4a:99:ba:2d:0b:6a:e1:8f:23:5f:
eb:03:7a:af:64:a1:55:17:85:aa:b5:0e:fb:31:2e:27:9f:74:
95:15:91:47:34:f4:b7:da:98:49:14:54:1a:1a:db:65:ba:90:
f0:00:af:1b:25:a9:af:9e:94:28:88:86:47:8d:6c:48:73:2a:
25:cc:61:77:6d:fe:c5:e3:c7:d4:7c:03:56:4a:ed:bc:67:87:
60:f8:bf:4f:e7:b3:37:a3:aa:4f:7f:90:28:f8:55:3e:31:e5:
6c:40:39:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:53:57 2025 by rpki-client