Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1cfa66b5-000b-334d-b55a-825ccf04bf6b.roa
File: 1cfa66b5-000b-334d-b55a-825ccf04bf6b.roa (raw, json)
Hash identifier: kBtBEvZ5tpNaiWlVL9oA+7C1Z9ohBiclAOGCmlHdSoU=
Subject key identifier: 15:F7:42:C6:D0:B2:CF:07:62:2B:C0:58:08:0A:AB:67:88:9D:EE:2E
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F43285848EF78A0250F9A5A0B4A548B80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1cfa66b5-000b-334d-b55a-825ccf04bf6b.roa
Signing time: Wed 19 Feb 2025 14:48:08 +0000
ROA not before: Wed 19 Feb 2025 14:48:08 +0000
ROA not after: Tue 20 May 2025 13:48:08 +0000
asID: 18779
IP address blocks: 45.38.8.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 17 Apr 2025 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:78:a0:25:0f:9a:5a:0b:4a:54:8b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Feb 19 14:48:08 2025 GMT
Not After : May 20 13:48:08 2025 GMT
Subject: CN=8b190828-5af3-4da7-9280-55e18feff352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5b:c9:14:6a:f9:13:9b:eb:c5:80:9a:e1:7b:
87:09:a6:5e:29:d2:da:f3:d7:87:22:83:eb:8e:bc:
81:66:66:f0:dc:c5:53:2f:2c:17:45:6c:3a:82:a3:
37:44:48:f2:00:40:12:21:41:3b:de:f5:3f:22:96:
ba:ee:15:e1:46:73:56:e3:4b:bd:ec:e5:3e:b3:6b:
3f:52:d5:ca:d9:71:3b:c9:c9:b3:0a:f9:84:d3:a3:
75:13:33:e7:56:85:df:db:c5:b9:10:00:48:48:7c:
bc:6e:de:f4:62:3b:b7:a8:11:8d:77:81:74:01:1a:
de:a1:c8:20:0b:db:1a:9c:31:d0:f8:61:ba:43:80:
a4:c8:a4:01:9d:8a:10:2a:19:0f:cc:16:c6:ef:4c:
61:9f:79:ce:4b:d8:2c:b7:6e:d3:f6:32:98:7b:97:
48:e4:ef:7c:c2:29:c8:81:08:f7:ff:00:dd:46:5f:
eb:96:ee:44:fe:3e:58:d2:37:6b:42:ae:aa:28:1b:
db:85:6d:84:6e:26:2e:7c:52:a3:b2:09:74:76:ad:
56:59:8a:fe:b7:25:cd:5f:4e:16:ff:4c:7e:27:50:
fa:29:ea:26:14:af:85:ed:72:4e:fe:ca:bc:85:18:
7e:48:f8:d4:40:2f:d4:1e:35:df:3a:ea:3f:8a:3f:
b6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F7:42:C6:D0:B2:CF:07:62:2B:C0:58:08:0A:AB:67:88:9D:EE:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1cfa66b5-000b-334d-b55a-825ccf04bf6b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
45.38.8.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:e0:ac:24:b5:1a:f7:ef:78:7d:d7:58:04:f0:57:06:c3:d8:
4e:e6:8b:82:cf:96:e6:c4:39:e9:6b:5a:a3:f4:e0:a2:b6:a1:
ef:a5:98:7e:3b:b8:cc:20:03:63:ae:da:8c:87:fe:56:7d:8d:
8e:a7:97:87:d0:88:a4:fc:98:84:62:6b:03:e0:b7:01:23:4b:
2c:34:44:c4:13:ef:eb:4b:c6:cd:3c:70:e0:5a:18:b8:6d:a0:
2d:0b:27:b7:ec:0f:30:3b:a5:77:b7:fe:2d:dd:56:04:f4:81:
c7:93:f7:cc:31:00:a5:8c:6c:12:34:14:bf:ad:60:7e:b0:73:
73:69:81:11:3a:bf:c0:b2:f6:86:bd:cc:10:1a:f4:45:8d:3c:
54:81:ca:5b:2d:c4:63:6c:cf:4f:d2:85:18:15:d2:24:6d:44:
b9:d4:f2:64:e4:b9:6f:12:8f:2f:2e:e9:7f:d6:4a:3e:a3:4a:
c5:06:81:e2:83:10:54:3f:3d:c4:de:f9:41:54:c1:9e:76:f0:
a8:aa:c5:b3:5d:8a:78:b3:28:f8:5a:c7:34:be:dd:cf:19:d7:
a2:17:d8:71:7d:11:b7:2f:70:70:8f:81:31:a4:a2:a6:15:1c:
e6:44:bc:28:d5:c0:91:ee:0e:7d:ad:ea:33:38:a5:fc:b6:33:
f6:b7:6e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:47:38 2025 by rpki-client