Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/95c38fc2-cc4e-3d33-bd4c-9cc2b224452b.roa
File: 95c38fc2-cc4e-3d33-bd4c-9cc2b224452b.roa (raw, json)
Hash identifier: yUhoaBikvRKuliuT506wyy4Rr/HIiexakOlHPh84gZ4=
Subject key identifier: EE:E9:A3:04:AB:06:9F:C5:3C:2B:D4:11:18:9C:DD:EF:81:4E:47:C4
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848CDE11249DDF0D8F634875E40
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/95c38fc2-cc4e-3d33-bd4c-9cc2b224452b.roa
Signing time: Fri 07 Feb 2025 14:00:53 +0000
ROA not before: Fri 07 Feb 2025 14:00:53 +0000
ROA not after: Thu 08 May 2025 13:00:53 +0000
asID: 12271
IP address blocks: 24.90.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Apr 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cd:e1:12:49:dd:f0:d8:f6:34:87:5e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 7 14:00:53 2025 GMT
Not After : May 8 13:00:53 2025 GMT
Subject: CN=2e09c54b-e5a2-40da-8079-8de38d94b7fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:57:42:0e:64:a6:20:a6:25:0a:f9:5c:43:71:
5c:ab:e0:36:50:c0:5f:60:8c:f3:03:03:a8:f9:3f:
b5:39:c5:13:73:30:ca:0d:2c:03:c6:f3:d3:36:47:
8f:74:d4:07:b4:5b:72:dd:0a:a5:ea:f4:b1:4e:19:
1e:3f:a9:a7:cc:23:e5:b1:11:f7:65:22:20:3e:74:
f2:e5:a7:06:98:05:41:94:4a:60:23:24:68:2f:22:
86:3b:c4:b8:1b:12:bf:71:44:0a:df:58:c6:d5:eb:
fd:2c:3a:eb:78:70:c8:ad:71:d8:5b:6e:29:89:89:
7f:b7:27:a7:1a:00:c8:bc:7f:58:9d:e3:7d:71:43:
55:6b:fd:0d:e7:42:77:b4:80:40:24:82:b6:ed:b9:
7f:0a:fa:95:e1:41:eb:a3:01:4b:08:a4:8a:66:bc:
30:fe:77:b1:7a:07:58:98:a3:3c:b4:82:48:e1:64:
f0:26:7a:70:5c:5c:fc:4f:4f:1a:a0:90:43:52:e1:
14:f1:8d:52:04:c8:03:10:87:34:74:d7:36:e4:48:
2f:d5:18:20:9f:06:6d:66:6a:af:3a:24:aa:02:50:
5a:56:c7:7e:0a:53:94:49:c8:ab:23:17:4b:e5:df:
9c:f5:c3:95:ee:5d:f9:88:7b:aa:bf:1b:19:b3:7e:
94:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E9:A3:04:AB:06:9F:C5:3C:2B:D4:11:18:9C:DD:EF:81:4E:47:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/95c38fc2-cc4e-3d33-bd4c-9cc2b224452b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
24.90.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:79:e2:74:4a:94:95:50:06:98:b5:a4:9f:5e:a0:28:47:7f:
47:8b:44:80:4c:19:b2:45:71:37:cb:1e:f1:18:a4:39:7d:02:
95:ff:69:a6:a9:88:91:ef:33:f2:5f:56:7f:ad:f5:eb:9d:53:
af:c0:7c:f7:8e:94:3a:20:1b:19:62:d9:22:22:ef:74:e9:c2:
60:c1:ba:34:67:66:9d:de:f4:57:06:14:d3:2f:39:90:1b:85:
ba:d7:ee:f1:00:4c:11:c4:0c:30:e4:3d:51:76:be:87:83:18:
2e:06:40:87:b1:f7:c1:7c:8d:b0:bb:dc:80:7c:44:a5:54:e8:
85:5c:01:48:79:d7:40:25:47:dd:49:a2:9e:43:43:f3:70:64:
ff:b4:88:89:50:4b:68:10:2f:65:db:22:fd:48:ab:80:76:4b:
5f:19:91:89:ad:39:9f:95:ec:2d:08:2b:a6:37:84:dd:4e:17:
7a:44:17:b1:d9:8d:c2:77:0d:15:c6:5f:4f:f2:d3:5d:86:ee:
6a:6f:39:75:5d:dc:b7:ed:d8:1f:d0:7e:1b:ca:62:b2:61:96:
9e:08:dc:45:b2:7e:76:ce:84:ca:71:49:f2:18:25:7a:1f:b2:
da:96:d3:0d:e9:10:59:06:c9:7c:c8:3a:ee:58:b0:f5:7d:5c:
ba:d1:3f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 00:20:49 2025 by rpki-client