Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/5a161dc9-525f-32f0-a457-b911eff67571.roa
File: 5a161dc9-525f-32f0-a457-b911eff67571.roa (raw, json)
Hash identifier: wR2Nx0zrzS5JkevHQ/IBEpbHtzIZJCQLaMD3eJvBWnI=
Subject key identifier: CF:8F:C3:C4:69:3C:32:90:A3:BB:DC:97:9E:A6:BF:2F:76:8D:E4:96
Certificate issuer: /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial: 010D0C9F43285849446947B8B6E303D5CC03A100
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/5a161dc9-525f-32f0-a457-b911eff67571.roa
Signing time: Sat 22 Mar 2025 01:00:40 +0000
ROA not before: Sat 22 Mar 2025 01:00:40 +0000
ROA not after: Fri 20 Jun 2025 01:00:40 +0000
asID: 4922
IP address blocks: 24.53.64.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 17 Apr 2025 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:44:69:47:b8:b6:e3:03:d5:cc:03:a1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Validity
Not Before: Mar 22 01:00:40 2025 GMT
Not After : Jun 20 01:00:40 2025 GMT
Subject: CN=3ddae374-5850-4bf2-beec-386582b48f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8f:59:aa:3d:25:ee:03:22:42:a3:1b:58:61:
67:b9:39:e8:a8:aa:3c:03:9b:ee:c9:81:4a:8f:73:
70:19:8e:38:2a:62:fa:1e:77:01:7c:3e:f8:7a:17:
be:90:56:00:4c:97:e4:94:1d:00:23:d9:8f:dd:33:
12:27:e1:96:34:6f:d0:4d:8d:70:57:bc:27:f9:c7:
c7:59:af:c4:c9:cd:82:c6:80:84:a1:08:3b:0e:b3:
02:29:cb:77:aa:8f:10:2e:9f:6a:2b:c8:f6:c0:68:
3b:c8:31:2b:1c:2f:af:01:25:ff:ff:8e:c9:86:61:
e4:5d:ce:d8:28:db:8b:d1:e4:dd:f0:e3:aa:9e:66:
c5:80:38:31:48:67:7a:2e:e5:3c:a5:23:1c:12:9c:
8c:a3:53:16:b4:11:bb:46:5e:26:b0:7d:39:4c:07:
af:92:1b:03:ed:03:25:e8:a8:33:12:75:bf:ab:e5:
55:1c:cd:1a:2a:f7:a3:e4:a9:a2:fb:57:7a:b4:38:
d7:ba:47:aa:27:06:26:73:12:04:01:49:aa:2a:5c:
09:21:34:67:d2:11:c7:62:e7:f1:97:d4:fc:7b:ca:
ec:9b:64:5d:06:32:42:dc:c5:64:50:d7:3a:e8:07:
fd:43:dd:da:45:13:a9:7e:e3:ce:66:14:73:16:29:
04:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:8F:C3:C4:69:3C:32:90:A3:BB:DC:97:9E:A6:BF:2F:76:8D:E4:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/5a161dc9-525f-32f0-a457-b911eff67571.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
X509v3 Authority Key Identifier:
keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
sbgp-ipAddrBlock: critical
IPv4:
24.53.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:b5:d8:1d:b9:15:ac:82:e1:ac:d0:8d:c0:f9:ff:df:b3:80:
3c:7b:ff:02:93:06:a4:a2:ea:8d:1f:bd:0e:4d:11:9b:c2:25:
57:a7:af:41:f1:85:d9:73:fe:d8:d2:09:71:2e:b5:36:de:a6:
86:0e:f1:a6:d2:27:ec:ef:da:3c:0e:db:ac:60:95:68:73:06:
3f:03:32:d8:e1:7c:e5:57:2c:89:92:02:5a:93:1d:25:c1:60:
96:eb:67:64:6b:46:02:15:07:d6:9a:bb:97:91:c7:1f:2a:16:
87:15:b1:1c:ec:0e:b4:38:e7:f5:6e:2e:c6:a7:c3:6e:97:5b:
4f:e6:84:fb:5f:55:49:d2:cd:96:10:7a:18:76:c2:08:d9:4e:
60:60:fb:3b:95:95:20:0c:d0:27:94:85:41:e9:6e:2a:ae:1d:
d8:e8:1e:dd:74:2e:fb:6d:65:35:e4:10:04:82:1d:39:8a:b3:
90:60:41:ba:71:14:6c:59:30:b0:1e:c8:e4:fe:c6:c1:b2:49:
86:79:f8:b3:7f:6d:7d:70:53:10:ac:ca:6f:d7:8f:2a:c4:8a:
6a:1f:5c:9f:df:94:64:96:02:67:d0:1f:01:86:b2:7b:65:29:
d2:1b:40:98:bb:e8:8a:1c:56:27:05:c7:47:56:d8:99:90:30:
fd:95:34:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 18:25:37 2025 by rpki-client