Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931/8b53ab0a-c85c-3b93-8b70-07a56b5b3dad.roa
File: 8b53ab0a-c85c-3b93-8b70-07a56b5b3dad.roa (raw, json)
Hash identifier: I5FXUYCsOSvbTYSiQLTasiZvQNe5HZx3ATqcpWKDPqw=
Subject key identifier: B7:99:A8:7A:E4:72:05:74:EC:7D:FB:B6:E7:7C:D5:D7:D3:B7:62:E5
Certificate issuer: /CN=df298930-fdd9-473b-93ed-6736f8296931
Certificate serial: 010D0C9F432858495D896DA969BCA67CEF13A2C0
Authority key identifier: E8:19:25:7A:88:CF:CD:31:EC:25:C8:20:0F:7A:92:FE:1A:E0:AF:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931/8b53ab0a-c85c-3b93-8b70-07a56b5b3dad.roa
Signing time: Mon 31 Mar 2025 01:00:47 +0000
ROA not before: Mon 31 Mar 2025 01:00:47 +0000
ROA not after: Sun 29 Jun 2025 01:00:47 +0000
asID: 2055
IP address blocks: 130.39.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931/df298930-fdd9-473b-93ed-6736f8296931.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931/df298930-fdd9-473b-93ed-6736f8296931.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 16 Apr 2025 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5d:89:6d:a9:69:bc:a6:7c:ef:13:a2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df298930-fdd9-473b-93ed-6736f8296931
Validity
Not Before: Mar 31 01:00:47 2025 GMT
Not After : Jun 29 01:00:47 2025 GMT
Subject: CN=b6b9f6cd-c801-42b5-8fc9-8be935ac57f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d0:b7:87:c6:93:e2:77:2e:d0:bc:2f:d1:7a:
ca:df:90:bf:3b:f9:46:d6:2c:1a:15:57:d7:c2:e5:
51:e5:75:b1:e7:69:a5:32:d0:e3:10:e8:81:81:94:
15:88:c4:3d:7f:8b:88:a7:89:c6:04:1d:a1:00:cc:
8e:7e:22:00:4a:06:fd:db:de:0a:70:71:23:17:07:
b9:68:11:3d:a4:46:70:25:30:45:cc:5d:3f:5a:c6:
b4:f8:3f:18:2d:cd:8d:c1:fd:c2:1c:8c:02:2c:62:
e0:72:7a:f2:3f:51:fb:c9:0c:04:89:f9:14:40:0e:
17:b1:3e:47:cf:a6:6e:25:1f:e5:03:cb:66:d4:62:
32:00:6b:e0:0e:92:75:5d:39:19:31:30:6e:18:74:
86:69:81:7d:f3:b3:96:0e:e9:39:55:e7:39:fb:aa:
bd:69:92:b7:af:0f:7b:6d:b1:c2:2a:68:96:42:9a:
cb:45:90:4c:39:0e:8b:19:2e:79:89:e9:55:46:ea:
b7:b9:54:97:a4:6c:6a:45:34:bb:46:9a:69:2c:7d:
a2:83:f3:75:82:88:a8:33:19:7c:78:6a:a7:b2:3d:
b1:0a:a7:eb:61:39:48:91:04:c6:f8:ac:d1:06:19:
93:d6:6f:bf:22:ea:ce:52:ed:c0:95:8c:80:81:97:
38:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:99:A8:7A:E4:72:05:74:EC:7D:FB:B6:E7:7C:D5:D7:D3:B7:62:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931/8b53ab0a-c85c-3b93-8b70-07a56b5b3dad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931/df298930-fdd9-473b-93ed-6736f8296931.crl
X509v3 Authority Key Identifier:
keyid:E8:19:25:7A:88:CF:CD:31:EC:25:C8:20:0F:7A:92:FE:1A:E0:AF:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931.cer
sbgp-ipAddrBlock: critical
IPv4:
130.39.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:48:94:3b:b4:34:ca:9d:38:87:c0:c1:7f:f5:23:49:9f:ad:
a8:0a:96:6f:4d:42:33:3d:e3:2d:77:4b:2c:ee:5c:1e:b1:0a:
7d:23:be:6f:81:dd:c1:37:a0:76:d7:df:d7:f1:6b:8a:c8:e8:
f8:76:45:93:1d:fe:bf:34:16:07:76:32:7f:7f:de:a9:23:16:
b4:28:82:15:6b:05:22:26:ee:3c:cb:c0:47:36:f4:bf:73:8a:
f4:47:da:2e:76:25:c7:da:57:e6:57:a5:72:15:58:53:9a:c7:
43:04:d1:bf:7f:03:70:f6:57:e2:58:e5:43:a9:4a:ae:20:bf:
3a:e7:70:db:2a:9c:d1:12:79:7b:6a:8d:d9:ae:19:13:0a:7a:
da:c2:19:78:b9:19:05:58:3c:49:64:99:58:e0:b2:8a:f3:26:
de:e8:36:1a:83:1f:7e:ec:f6:23:09:86:9e:b2:13:e3:9d:45:
d2:78:41:7f:1c:41:23:a5:98:73:d5:14:9e:f1:81:da:04:df:
df:5f:7b:b9:45:c6:79:6d:00:1a:e7:33:22:43:b6:4d:e9:51:
87:c4:8d:6a:50:07:2b:38:a4:93:a7:bd:b0:e7:c3:24:8f:10:
a1:30:16:a1:c2:32:96:3a:54:a1:4b:39:0b:9f:ba:7d:a4:1d:
fe:41:f6:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 20:55:29 2025 by rpki-client