Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/da2858a7-eec0-30f3-b81f-480864e238db.roa
File: da2858a7-eec0-30f3-b81f-480864e238db.roa (raw, json)
Hash identifier: +GKclDpNmgwHRW8g7G38M6brYkcmpV22pjPNGkixdeE=
Subject key identifier: C8:54:C3:4E:84:18:67:CF:5C:52:0C:0D:75:2D:5D:CF:2F:EF:94:1C
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D1CD7717408A4419F394C0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/da2858a7-eec0-30f3-b81f-480864e238db.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 17291
IP address blocks: 71.41.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:cd:77:17:40:8a:44:19:f3:94:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=6b8025d9-5481-4e72-98db-2d1a5a235ee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bb:e2:10:f3:6f:9c:06:0d:1a:ac:8f:be:a6:
fe:0f:6a:a8:93:d5:e7:93:32:ac:cf:25:ac:55:b1:
29:46:f6:ce:2b:e8:2b:2b:20:59:ed:6c:2e:8f:52:
40:c1:24:03:a8:19:76:2a:28:50:6d:23:6f:48:7d:
8e:27:ca:e5:4a:c3:d9:18:5b:f2:fe:f5:81:af:21:
9e:59:5b:40:cb:88:d3:49:25:2a:84:0a:d3:15:5f:
ea:35:48:69:87:2d:47:74:41:42:08:4c:26:ee:00:
42:be:8d:55:f1:6e:d6:c2:5d:23:d0:38:54:f7:2e:
81:23:bb:d6:15:dd:b0:a3:f6:22:19:1e:59:79:5b:
23:a1:69:7f:7c:29:9b:0e:55:49:6b:14:60:91:19:
f0:e3:5d:fa:d2:bd:5d:6a:a2:e7:f2:c7:85:ba:6e:
af:05:e2:3a:a4:bc:2b:5d:1a:49:50:8a:5a:bf:3d:
e4:77:ec:ac:7d:67:04:61:70:e5:34:17:0f:59:be:
9b:96:53:20:f2:1d:6c:9f:8b:8f:e5:33:de:02:d6:
18:8d:aa:76:6a:be:2b:79:f3:1f:50:55:89:d4:a7:
24:19:71:90:2c:fb:55:1a:2b:fd:02:50:1d:26:83:
ed:43:09:71:1c:75:13:87:55:71:17:df:28:20:97:
f5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:54:C3:4E:84:18:67:CF:5C:52:0C:0D:75:2D:5D:CF:2F:EF:94:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/da2858a7-eec0-30f3-b81f-480864e238db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
71.41.13.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:07:f8:df:03:95:55:87:a6:c3:78:41:f9:a9:8b:ad:85:52:
d6:7c:bf:99:38:b1:d8:d5:cb:a2:84:87:50:91:d5:41:a8:83:
a2:3c:2b:48:b5:de:e2:5f:3e:b6:17:05:57:23:26:16:31:99:
f8:40:f6:d0:af:d9:68:b1:2a:66:dd:d0:c0:8d:4c:56:57:4e:
c5:bd:91:6a:79:76:37:29:ad:4a:39:f8:05:c7:58:81:d0:43:
ec:e6:8c:05:e6:9d:ce:4c:0d:d1:c2:53:60:ab:66:1b:c0:24:
5b:66:31:13:19:53:b3:c5:f8:da:43:25:85:8a:49:d8:a9:ff:
ce:2b:eb:cc:df:8e:c5:4d:3b:bb:a3:6b:f2:cd:dc:65:74:5c:
07:ee:f0:77:e3:5b:0b:74:f3:91:07:9d:a7:52:c0:57:70:a7:
2c:8b:9a:bf:98:80:03:5f:c0:17:09:c2:c6:3d:35:cb:79:8d:
e4:53:10:ac:30:32:40:8b:60:7b:d4:31:3a:6b:b1:41:3b:f4:
6a:3d:79:24:6f:12:8d:e4:e4:4c:b4:2f:80:03:eb:fb:1a:36:
50:bd:56:fa:f5:ab:a7:02:ad:87:f0:99:3d:47:f3:70:d5:f0:
99:bf:92:59:4d:a5:1c:7a:e9:dd:9f:28:ee:bf:25:de:ed:00:
69:2f:78:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 10:10:45 2025 by rpki-client