Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b3a6c310-d0fa-3ade-85ed-85abacf57a79.roa
File: b3a6c310-d0fa-3ade-85ed-85abacf57a79.roa (raw, json)
Hash identifier: LnYtAalFONNgyxI8zRjthQhMayfY2DDGi+nmIW7QFp0=
Subject key identifier: F2:8B:02:93:5E:51:93:76:16:C0:75:28:F9:78:6F:A5:7B:6F:4E:D6
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D1B14E434651CFDD767B80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b3a6c310-d0fa-3ade-85ed-85abacf57a79.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 10796
IP address blocks: 24.208.128.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Apr 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:b1:4e:43:46:51:cf:dd:76:7b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=91e6167e-3e2a-4cc8-af3d-6e568a7d905c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8f:f1:a6:16:d4:92:de:71:c0:4a:66:8d:d8:
ed:d7:d8:bf:62:d3:0b:e4:9b:bd:58:d8:82:b7:ef:
5d:64:8f:bb:fa:f6:e2:bb:b2:4d:07:02:c3:28:83:
4c:90:94:88:77:00:22:4a:f6:ee:ca:53:d0:00:d2:
0e:be:0a:d7:de:51:c0:e4:f6:0a:46:a2:93:9b:80:
aa:1c:0c:1c:a8:45:ec:42:2c:cb:49:80:fa:f6:8e:
22:3e:1a:d5:39:96:71:3c:fa:23:5a:8a:08:83:05:
0a:87:54:18:9f:69:e6:cb:8f:b4:16:cc:1f:25:f8:
bb:1f:d3:fc:5e:6e:ed:93:3d:9b:d7:d7:8e:8b:b6:
9c:7e:76:ac:5e:0c:df:fd:58:d1:15:72:9a:82:c4:
f8:f1:cb:2f:b9:1d:e5:6c:9b:4f:53:e9:46:71:52:
c8:bf:b5:62:b8:d3:33:ea:d6:d5:fe:2e:8f:21:9c:
0e:ea:8a:75:f0:63:d7:f6:8a:0a:d4:4b:79:54:a0:
e6:c1:94:74:d3:21:3e:d2:20:f0:09:81:1f:66:da:
1a:b9:74:53:db:f0:f6:f3:a5:63:ab:80:30:84:90:
d0:ef:69:a5:06:80:21:7c:28:ea:f9:2b:dc:85:b1:
0a:a1:f4:51:12:47:ab:d1:5e:a8:14:28:d6:3b:71:
59:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:8B:02:93:5E:51:93:76:16:C0:75:28:F9:78:6F:A5:7B:6F:4E:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b3a6c310-d0fa-3ade-85ed-85abacf57a79.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
24.208.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:5c:75:26:ac:b8:b8:e2:d7:2a:b3:ce:1b:4a:1d:64:a0:b3:
fb:ac:8e:58:6c:85:5d:e4:a8:ec:49:3d:72:fd:00:df:7b:7a:
88:36:64:9e:bc:b7:c4:7b:01:98:5a:4d:dc:5b:19:12:e1:b9:
cb:d2:79:f1:02:a8:9a:ef:98:87:46:8b:64:82:6b:9f:6a:50:
67:b9:ba:15:0a:59:65:7a:dc:0a:36:4c:85:00:c9:04:93:2e:
04:cc:b9:75:e9:e0:9f:22:61:8f:36:bb:d5:3b:45:ce:b5:2d:
50:87:0e:c7:01:3d:b5:f2:fc:b0:92:12:c3:46:53:c3:5a:de:
1a:3d:58:0f:35:b8:26:bf:fa:83:08:46:7f:27:ce:57:0f:12:
8b:27:3b:35:7f:94:97:f1:aa:78:3a:87:91:74:36:39:44:5a:
41:74:1a:c0:42:7f:c9:a2:39:57:96:18:48:c4:b7:b9:3e:fd:
70:ef:dc:7a:49:4b:5f:32:6c:39:64:2c:65:e7:22:07:a5:b6:
8a:6f:d6:d8:7c:a9:0e:4e:d5:aa:dd:2a:06:da:48:55:73:00:
3a:20:71:37:4e:c8:68:62:c3:de:69:43:50:44:c6:39:9a:d8:
f4:68:da:8d:fc:5e:12:a7:bb:53:c8:a7:f8:06:43:9f:07:f6:
54:4f:52:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:04:26 2025 by rpki-client