Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/33ae1b05-55f0-302f-9c5c-b370f361cfee.roa
File: 33ae1b05-55f0-302f-9c5c-b370f361cfee.roa (raw, json)
Hash identifier: oNo9uL+DpwnCcq9RMXAHcPBBJtbDciQGayYqpAaEPPM=
Subject key identifier: 49:B6:CE:76:BD:07:D9:1E:01:1A:C3:60:37:F0:97:6A:10:B4:95:43
Certificate issuer: /CN=a2159823-806a-4879-9de9-7be634e8cd31
Certificate serial: 010D0C9F43285849203C175E150DFC09881682F0
Authority key identifier: A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/33ae1b05-55f0-302f-9c5c-b370f361cfee.roa
Signing time: Sun 09 Mar 2025 02:00:39 +0000
ROA not before: Sun 09 Mar 2025 02:00:39 +0000
ROA not after: Sat 07 Jun 2025 01:00:39 +0000
asID: 13945
IP address blocks: 151.193.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 13 Apr 2025 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:20:3c:17:5e:15:0d:fc:09:88:16:82:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2159823-806a-4879-9de9-7be634e8cd31
Validity
Not Before: Mar 9 02:00:39 2025 GMT
Not After : Jun 7 01:00:39 2025 GMT
Subject: CN=36d3dd01-079a-4601-81b4-56fefa098ae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:2f:f6:80:1e:c6:3b:23:4a:8e:fc:bd:7b:36:
f7:0b:ea:a5:cd:59:d3:e0:ff:46:c1:6b:cd:82:ca:
bb:5b:5b:e4:77:8d:0a:df:60:c6:23:c5:4e:94:d1:
5e:ee:41:e2:a9:dd:8d:3d:1e:a9:e0:b2:97:c4:c5:
5f:db:07:90:8f:89:0c:8a:77:ad:ef:72:69:58:50:
bf:18:8f:92:b2:6c:8c:d1:ca:75:b9:24:6a:1d:26:
41:bb:d7:19:61:3b:09:af:01:db:e0:a5:3c:72:b5:
75:9b:ed:99:69:7c:e3:3e:91:3d:53:79:39:ac:f5:
f2:6d:f4:cf:e5:70:6d:21:5e:a1:ea:7d:3b:b5:a9:
1e:81:b1:be:8b:d4:c1:0f:6e:a8:eb:8b:c8:35:6a:
71:c6:0d:47:67:2c:9a:63:85:49:b1:cc:2a:3c:45:
ac:bc:7e:70:07:00:5c:a0:47:e6:17:02:5a:e0:63:
3e:2a:ad:0c:94:d2:6d:50:93:2d:0d:bc:b6:8b:a9:
e1:4a:d6:fd:f3:d9:0a:ec:ee:95:6d:72:c5:eb:69:
01:5a:f6:04:95:53:99:f9:ff:9c:ed:2b:1c:6b:03:
db:d3:33:b9:b2:af:e3:7f:f2:c5:39:38:c7:98:14:
30:c7:44:13:6b:49:85:3f:d5:01:a6:58:54:29:d3:
0f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B6:CE:76:BD:07:D9:1E:01:1A:C3:60:37:F0:97:6A:10:B4:95:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/33ae1b05-55f0-302f-9c5c-b370f361cfee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.crl
X509v3 Authority Key Identifier:
keyid:A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer
sbgp-ipAddrBlock: critical
IPv4:
151.193.101.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:4b:5d:fa:2b:7e:d9:52:7c:4b:61:26:a1:da:bf:73:5b:66:
d3:30:af:7a:d4:de:b3:af:65:0d:bc:c4:bd:fa:b3:79:4d:34:
ed:9b:01:2c:9a:99:ed:b5:db:8b:84:74:a7:23:26:8a:7c:90:
6b:31:5d:b7:f4:87:d8:75:a6:9d:77:86:6e:67:cf:48:ff:a3:
c6:f1:e9:27:4b:6f:b1:2e:1a:a8:51:7f:38:7a:ee:f7:60:04:
ff:6d:66:8c:f5:ab:5f:80:20:ff:81:55:13:57:48:f5:e3:6f:
49:12:1d:68:ca:bc:9a:ad:9a:6d:8e:11:e4:c0:2b:e1:73:a7:
a5:f0:54:f4:52:ab:cb:6b:a8:b5:a8:9f:ff:d0:43:4c:80:ac:
40:3a:8c:90:87:40:49:4d:af:af:e3:f8:20:41:15:07:b8:5b:
47:62:6e:b5:a4:5b:01:7f:08:30:f3:64:37:8b:09:1f:bf:cb:
42:a7:f1:47:d3:91:ae:f2:24:bc:c9:97:c0:8a:3d:0a:fc:5e:
6d:7e:0c:3c:d9:cc:26:7b:35:75:8c:66:73:54:9b:83:52:3c:
88:6d:98:ac:3a:5b:b2:fb:a8:85:e7:02:96:b6:a5:c9:06:e7:
83:f3:15:f0:9a:82:00:6c:bb:12:04:80:38:a6:31:e4:a3:81:
79:15:3b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:17:27 2025 by rpki-client