Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9b4350f8-f924-3436-abe0-d255fe557ac9.roa
File: 9b4350f8-f924-3436-abe0-d255fe557ac9.roa (raw, json)
Hash identifier: 9pRRwxjTBBUrBVIJLIMAfLTs4jzfPbGUcPobSq3OjT0=
Subject key identifier: DC:95:83:68:D5:79:6E:31:A3:6B:1A:05:DF:B6:F3:AF:16:D7:97:90
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D1D1B8343D41276C688700
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9b4350f8-f924-3436-abe0-d255fe557ac9.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 20001
IP address blocks: 98.155.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:d1:b8:34:3d:41:27:6c:68:87:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=05965cf8-08f6-43ae-9f6b-56400f99b359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:64:1a:43:01:01:1d:41:a5:b8:43:0c:31:ff:
dc:2b:4d:25:9c:37:5c:28:77:89:5d:1a:07:92:56:
65:89:f0:b7:44:7f:c0:fb:7f:f5:31:e9:25:4d:b3:
8b:06:65:86:75:94:b0:79:80:1c:7e:df:b3:53:22:
22:f1:85:44:e5:fe:0c:e2:90:71:45:57:88:70:56:
36:f0:7f:37:74:ca:98:c2:01:eb:c7:6e:6b:6e:a8:
35:3a:fb:2a:25:c6:d5:bd:b7:06:1b:6e:23:af:98:
56:81:e5:ed:33:bc:55:ff:bc:63:1f:0b:d9:3c:15:
42:7e:df:f0:d5:27:78:d7:ba:a8:97:3f:41:fb:76:
cb:e7:9d:60:85:f9:6e:38:16:d8:3d:eb:6b:66:08:
16:9e:87:a3:b7:bd:85:e8:6e:13:77:3e:d8:ca:d2:
44:f5:e7:59:54:1f:bc:29:4a:d8:ae:84:bf:9f:09:
b8:5d:58:d7:1a:f8:75:b2:f5:2a:ee:a0:b9:0c:20:
a1:38:ce:45:82:10:bb:ae:3c:97:01:97:57:37:9f:
12:22:c1:a5:db:93:f6:d2:fa:bf:a6:aa:8b:33:8e:
d3:9a:e3:ba:27:90:1d:87:0d:ba:dc:82:28:d4:77:
2f:77:12:48:13:90:e5:49:e3:30:1e:b8:a6:3f:19:
98:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:95:83:68:D5:79:6E:31:A3:6B:1A:05:DF:B6:F3:AF:16:D7:97:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9b4350f8-f924-3436-abe0-d255fe557ac9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
98.155.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:33:2c:f3:6f:b3:55:5f:29:b5:0a:d7:a1:39:52:ff:93:73:
e2:e1:f9:58:81:52:f7:07:6f:6f:1f:ae:8a:3b:fd:47:72:d4:
94:74:06:7e:41:9b:12:89:b9:54:e8:8d:a6:4c:30:de:21:fc:
09:50:a4:9a:a1:f7:3a:37:3e:c5:34:2f:37:bc:a6:e0:80:f9:
73:09:a8:2d:01:0d:64:6a:1f:bb:82:1e:c2:f2:b7:42:59:70:
75:ed:d5:38:55:0c:0f:97:f1:c1:03:bb:f7:ab:cd:42:05:e1:
94:7a:cc:8c:17:54:cb:07:d9:a4:f6:7c:3d:5a:b9:7d:88:8d:
14:65:5d:6f:65:9d:87:1e:5c:a9:6f:85:5a:50:36:30:24:2b:
e5:6b:fa:71:d1:98:12:4e:71:94:bc:75:e5:9a:52:fc:e4:29:
7f:43:a6:e5:fc:b5:38:f8:8c:bd:8a:20:fb:7b:8b:12:46:5e:
23:bb:16:21:36:14:e0:82:06:d6:18:80:a7:d1:34:df:5f:f1:
bb:95:20:84:e1:03:d2:92:bc:7e:f2:ec:fa:3a:3c:59:26:f9:
63:8d:17:20:fb:bf:7d:65:27:1e:eb:24:5e:42:a1:3d:bd:96:
b3:00:01:00:8a:d7:b8:d9:67:19:5e:41:19:36:e0:07:73:83:
bd:03:88:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 11:20:01 2025 by rpki-client