Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0b91cfb9-4cd7-38a0-bda2-13e2f71f65f9.roa
File: 0b91cfb9-4cd7-38a0-bda2-13e2f71f65f9.roa (raw, json)
Hash identifier: jqpGL3L2ep1iIrBPMHhhP/BYGtzhC549Sbm8//+S/DQ=
Subject key identifier: C1:C1:33:DB:52:D3:BE:E1:D6:3F:94:8A:A6:DD:1E:BA:A9:94:99:68
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D14029CBE5596F92CA1800
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0b91cfb9-4cd7-38a0-bda2-13e2f71f65f9.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 11426
IP address blocks: 192.58.144.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Apr 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:40:29:cb:e5:59:6f:92:ca:18:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=1bf1b00b-f990-44e0-8201-89e404c805fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:76:77:a3:c7:cd:dc:5b:50:66:2a:93:28:0b:
43:45:b1:3c:f3:dd:80:5e:31:fe:f5:83:c3:13:49:
65:84:aa:06:13:08:15:7d:93:a9:0a:ae:1d:a0:51:
69:ff:da:ff:4d:1f:86:7b:a6:76:39:d0:7f:e3:c8:
5c:2c:88:53:59:d2:2d:de:4a:89:0e:1d:0b:ef:55:
55:9b:8d:db:f1:ec:1f:a3:a7:a6:df:f6:cc:77:6a:
1d:69:80:c7:ad:d7:ca:49:4d:c3:6d:e5:0e:57:4d:
4b:3a:c8:6d:07:e3:b8:34:44:89:c6:c4:ea:a0:d0:
50:b2:46:9a:62:16:c3:80:19:6b:f8:09:fa:1a:77:
93:8d:b1:79:10:8d:38:e8:97:b6:94:30:01:16:1e:
ae:c4:a8:ce:06:f2:b7:ac:34:b3:6c:3c:c2:e3:e9:
79:54:a7:b2:72:14:ce:e1:ab:d1:2b:50:62:92:f1:
9b:74:ff:a8:7b:8f:72:be:f3:02:2f:4b:d3:7d:14:
5b:ee:6c:ac:e5:33:af:2b:7b:7c:22:56:7c:9c:8c:
f3:4c:b7:7e:df:db:ab:d5:2c:26:f5:63:50:00:d9:
d1:68:9a:4b:ee:76:7b:0a:f2:44:d4:81:39:1b:d0:
59:40:ea:1d:82:a7:b1:a0:d7:33:91:34:63:bb:05:
ca:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C1:33:DB:52:D3:BE:E1:D6:3F:94:8A:A6:DD:1E:BA:A9:94:99:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0b91cfb9-4cd7-38a0-bda2-13e2f71f65f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
192.58.144.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:c2:63:f3:72:e3:f9:43:56:ae:ad:0d:df:b6:db:d4:dc:a9:
f4:d1:65:51:35:f4:f6:d2:82:40:1a:1e:09:cf:6f:15:5f:de:
60:38:45:fc:0d:8c:e6:ec:ec:a7:06:71:37:a2:77:f9:e2:30:
46:c6:49:69:3d:99:83:c5:21:6a:2f:2f:af:25:cf:70:bd:59:
87:51:8f:0e:e3:7b:90:c7:23:85:9b:9f:04:64:6b:4c:90:a1:
05:60:4f:56:71:7f:6c:b6:33:f2:1a:15:45:88:2c:30:1b:95:
58:a0:b2:42:fa:08:cd:b2:dc:90:20:3b:9f:01:51:00:1d:f9:
95:ea:4a:d3:20:ee:b8:98:87:84:01:c2:09:d9:c6:87:0e:6f:
56:56:f1:8f:b2:1b:a4:6b:b0:84:3d:bd:92:89:ee:64:b7:3c:
2b:12:d2:1d:e6:b0:26:d3:e3:94:3a:85:22:d1:6e:c7:38:02:
a0:5f:5f:f8:44:b2:7b:6b:30:dc:62:5f:d7:2a:c5:ba:fc:97:
73:02:2c:89:46:70:36:d6:bc:b6:c2:41:89:3c:eb:f1:10:69:
4a:af:7d:00:bf:c5:83:97:1e:0b:6c:12:69:85:59:98:03:17:
54:dc:fa:2a:0e:fc:96:97:86:6f:92:44:66:74:e5:8e:c6:b9:
78:89:2d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 06:41:06 2025 by rpki-client