Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68a35552-4277-4e62-a51e-4b31ab8d4ca0/eaf23d5c-7bbe-3565-9f9a-56cbc342ca34.roa
File: eaf23d5c-7bbe-3565-9f9a-56cbc342ca34.roa (raw, json)
Hash identifier: 7zQEmIOIafjAD8J6V7+hN8QQ7u5NLhsp2fNgvFCd0Tk=
Subject key identifier: 55:D6:4B:98:C0:97:11:70:35:97:6D:DA:D5:DF:E0:B4:17:73:CF:0A
Certificate issuer: /CN=68a35552-4277-4e62-a51e-4b31ab8d4ca0
Certificate serial: 010D0C9F43285848D3765A8977F7FC020299C700
Authority key identifier: 16:B2:4D:AD:C8:30:67:AE:94:AB:66:CF:54:E8:C6:2A:E6:3A:52:59
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68a35552-4277-4e62-a51e-4b31ab8d4ca0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68a35552-4277-4e62-a51e-4b31ab8d4ca0/eaf23d5c-7bbe-3565-9f9a-56cbc342ca34.roa
Signing time: Sun 09 Feb 2025 14:00:51 +0000
ROA not before: Sun 09 Feb 2025 14:00:51 +0000
ROA not after: Sat 10 May 2025 13:00:51 +0000
asID: 401021
IP address blocks: 23.176.152.0/24 maxlen: 24
2620:0:8000::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68a35552-4277-4e62-a51e-4b31ab8d4ca0/68a35552-4277-4e62-a51e-4b31ab8d4ca0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68a35552-4277-4e62-a51e-4b31ab8d4ca0/68a35552-4277-4e62-a51e-4b31ab8d4ca0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68a35552-4277-4e62-a51e-4b31ab8d4ca0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 17 Apr 2025 07:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d3:76:5a:89:77:f7:fc:02:02:99:c7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68a35552-4277-4e62-a51e-4b31ab8d4ca0
Validity
Not Before: Feb 9 14:00:51 2025 GMT
Not After : May 10 13:00:51 2025 GMT
Subject: CN=9ee3c9bf-b5e5-4fe5-80a3-71f90e676a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9c:a7:7f:64:dc:2d:1e:5c:77:3b:5f:7e:aa:
60:c6:06:2c:80:d9:23:fe:ca:4f:25:62:1e:b1:f0:
75:5f:3a:08:12:2c:2e:db:d6:e6:60:19:44:b3:0b:
3d:aa:02:ff:6a:ad:4f:a1:24:8c:08:9c:e0:78:ab:
a6:76:85:3e:61:9d:fb:75:35:0b:91:28:ef:2f:34:
55:fd:55:d4:cf:8f:02:91:57:19:35:d3:64:38:4b:
9b:53:c2:31:f2:ca:84:14:ce:5d:d6:1b:20:89:40:
21:6b:c9:4e:7e:11:16:0c:b9:78:48:1a:2e:bf:46:
e6:b9:7d:27:f4:fb:d7:2e:b3:51:36:b0:d4:b6:71:
49:8f:7e:9d:b0:94:59:4a:f2:c9:56:35:d3:b6:84:
12:9c:c0:6d:71:81:e8:3f:fc:2e:19:db:6c:db:75:
85:36:a0:9b:57:b2:08:2c:31:2c:aa:12:8b:48:6e:
38:00:cf:09:2b:fe:ed:7d:54:2e:09:80:a4:cf:47:
e9:96:a4:9a:29:1e:24:33:5d:7a:2b:4f:07:35:fc:
6d:48:b8:39:5a:7c:f2:4f:4a:07:1a:30:c7:c1:be:
b1:30:6f:bf:df:2c:db:e5:86:3a:95:8b:99:01:07:
ad:dd:33:f4:68:22:f8:21:56:e4:3b:ee:72:8f:38:
d7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:D6:4B:98:C0:97:11:70:35:97:6D:DA:D5:DF:E0:B4:17:73:CF:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68a35552-4277-4e62-a51e-4b31ab8d4ca0/eaf23d5c-7bbe-3565-9f9a-56cbc342ca34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68a35552-4277-4e62-a51e-4b31ab8d4ca0/68a35552-4277-4e62-a51e-4b31ab8d4ca0.crl
X509v3 Authority Key Identifier:
keyid:16:B2:4D:AD:C8:30:67:AE:94:AB:66:CF:54:E8:C6:2A:E6:3A:52:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68a35552-4277-4e62-a51e-4b31ab8d4ca0.cer
sbgp-ipAddrBlock: critical
IPv4:
23.176.152.0/24
IPv6:
2620:0:8000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:b7:66:63:af:a4:17:90:07:56:66:a1:b1:6e:95:fb:a3:4c:
fd:00:47:31:3b:37:e1:5c:27:ff:31:b1:1d:0f:cf:0e:5f:25:
68:9a:2b:a2:ca:7c:f2:38:0c:2e:ac:0e:cb:33:6a:df:ab:7c:
a3:21:36:a5:18:9f:64:b3:3c:78:29:ef:a7:e8:8e:eb:87:fd:
45:51:e3:78:f5:2e:67:0e:05:f6:e9:9c:54:9e:40:ad:bd:a7:
e7:71:ca:5a:cd:97:df:db:d9:c4:91:57:7a:43:11:0d:b4:13:
7c:05:02:03:8d:37:66:b7:38:b8:3f:30:5c:cc:b1:37:ee:69:
52:2e:b9:b7:82:dd:2e:68:f2:77:ec:59:b0:50:9f:dd:14:26:
88:c7:a3:40:06:67:8d:26:bf:e5:73:37:9c:41:c8:24:5b:c6:
13:59:52:e2:ae:43:0f:1e:a2:6a:1d:ec:18:3d:e9:e2:5b:2e:
0d:80:6b:34:1c:b4:ce:1c:3f:0c:ee:3e:0e:0c:c4:31:9e:da:
69:2f:48:48:d5:1f:71:38:f1:3a:65:ee:e3:89:a4:83:6c:12:
b4:cc:90:bb:d9:4c:67:dc:81:8b:46:65:bc:de:03:6f:b3:cd:
5b:a6:3b:a1:b2:08:18:72:2d:c6:99:50:9d:33:48:ed:87:b4:
3e:f2:34:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 20:25:39 2025 by rpki-client