Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/5bb0756c-2988-3c65-8d58-8b05f578dc77.roa
File: 5bb0756c-2988-3c65-8d58-8b05f578dc77.roa (raw, json)
Hash identifier: 1hBRJgaIJXassb36GUGFSVDRazJdCdwEU/i7kOOHv5k=
Subject key identifier: 62:9E:E3:D0:96:E3:46:FD:CC:96:F6:04:67:BE:08:D5:AA:30:74:DD
Certificate issuer: /CN=ca3c740c-67d3-47ed-b43d-9bd91b31cdb1
Certificate serial: 010D0C9F43285848BD20E59F02D38A498A79C538
Authority key identifier: 57:A2:47:DA:F5:84:83:97:0C:4D:55:A0:05:82:4E:3E:8C:AD:3C:28
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/5bb0756c-2988-3c65-8d58-8b05f578dc77.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 18013
IP address blocks: 23.247.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:20:e5:9f:02:d3:8a:49:8a:79:c5:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca3c740c-67d3-47ed-b43d-9bd91b31cdb1
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=fe8e0fba-fcfc-457a-b2d9-32d40fe94c54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e4:d6:38:86:df:a3:41:fd:e1:e8:ab:89:4b:
e4:f1:20:48:3e:55:3b:bc:a3:0a:3d:7c:5b:ea:72:
a7:1d:32:a2:0c:fe:f3:0d:9c:5e:5e:f4:07:ed:0e:
d6:dc:d0:96:c0:63:48:40:4e:f0:36:d1:25:eb:9d:
2c:6d:f5:e8:62:ee:9a:c8:83:ed:ab:8c:d9:fd:a1:
0c:77:77:76:80:38:12:93:0c:c8:8a:ee:99:7b:c0:
eb:84:b0:8a:1b:ef:fd:fc:c9:f5:0f:92:2f:96:0e:
ca:8c:37:58:e8:bb:24:11:ef:e6:5b:b4:80:35:b5:
06:06:da:0c:39:0d:d7:96:07:0f:39:53:c8:39:90:
b3:a9:68:e1:4a:2a:50:c6:65:b0:6e:7c:16:f8:04:
91:5d:4a:a8:4d:90:c4:52:33:9d:fd:f6:fd:e8:d1:
86:2b:4b:d7:25:ea:70:a0:b0:3f:2e:7b:b7:6c:0b:
79:27:de:47:cd:b8:2e:9f:2c:7e:92:a5:4c:be:60:
d1:f7:26:cf:dc:fa:64:01:3f:55:a0:a2:9a:8b:13:
c5:1e:74:02:5e:7b:60:78:22:2f:16:2a:03:f0:91:
74:fc:8a:de:34:d8:5e:a9:7d:12:6e:6f:2d:c5:bc:
44:3d:0d:e1:ac:0c:d2:ed:9c:4a:d2:8f:6f:60:c1:
7d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:9E:E3:D0:96:E3:46:FD:CC:96:F6:04:67:BE:08:D5:AA:30:74:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/5bb0756c-2988-3c65-8d58-8b05f578dc77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.crl
X509v3 Authority Key Identifier:
keyid:57:A2:47:DA:F5:84:83:97:0C:4D:55:A0:05:82:4E:3E:8C:AD:3C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.cer
sbgp-ipAddrBlock: critical
IPv4:
23.247.129.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:9e:28:21:84:ad:90:2d:37:cf:a5:7f:81:72:b1:d1:08:c6:
f2:92:3e:db:9f:e4:c1:80:60:c6:6c:45:cb:3c:2e:e9:f2:f7:
7f:a9:1d:47:88:a9:bd:72:ef:f2:df:c6:5d:94:6c:7c:6a:40:
16:f6:f4:9f:0c:c1:a8:dc:34:1e:b6:d7:62:1f:6a:ea:25:e2:
59:ae:3e:3e:69:bc:fb:a9:d3:22:a3:a9:28:66:57:a6:e2:24:
b2:65:70:0e:bc:11:25:34:3c:8d:0a:1c:f5:5f:a3:77:4f:80:
88:5e:bd:ab:dd:d4:a9:f0:0f:97:8e:01:36:8f:cf:03:2e:5a:
5e:2b:3f:f4:78:18:7d:90:d2:fe:01:7c:f5:3e:86:0b:8e:5e:
6c:6c:5e:a9:ee:24:cd:41:1f:b4:63:a3:65:ce:d1:60:18:4f:
2d:25:bc:fc:2e:d1:c4:ca:26:72:8d:1d:90:aa:ab:1b:0a:95:
df:73:f1:4d:4c:db:9c:f9:1b:c6:05:46:3b:24:7e:40:77:ac:
de:db:5c:3f:34:88:da:11:1b:54:ff:5f:60:f7:c3:3e:f9:9d:
b6:c2:f6:74:b6:1f:e6:da:f5:88:1c:3e:e8:52:8a:e7:1f:da:
c1:f4:c7:57:45:f1:da:39:2b:c4:35:09:8d:9e:7d:fa:00:f9:
33:75:5a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:08:40 2025 by rpki-client