Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/37110967-075b-3fc8-ad70-da136e7d082e.roa
File: 37110967-075b-3fc8-ad70-da136e7d082e.roa (raw, json)
Hash identifier: GMA28+d7+MHY3FKFbgvCSiDDyNTwEeLqlrrTEKnZQ+g=
Subject key identifier: FD:23:12:8A:96:35:0B:B4:2B:01:26:3E:C3:64:DB:2A:BA:25:C2:DB
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F43285848D641292F3183ECE43F0692C8
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/37110967-075b-3fc8-ad70-da136e7d082e.roa
Signing time: Mon 10 Feb 2025 14:00:52 +0000
ROA not before: Mon 10 Feb 2025 14:00:52 +0000
ROA not after: Sun 11 May 2025 13:00:52 +0000
asID: 204957
IP address blocks: 172.120.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d6:41:29:2f:31:83:ec:e4:3f:06:92:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Feb 10 14:00:52 2025 GMT
Not After : May 11 13:00:52 2025 GMT
Subject: CN=6140ef3d-cade-4999-a079-8fa1342495b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:10:be:1f:cd:f6:1b:d5:43:62:18:cb:cf:03:
ed:91:d9:69:69:58:5b:9e:f0:c3:99:42:07:ef:aa:
ef:36:d4:ac:1f:21:40:a7:6e:23:1d:bd:b7:42:cb:
59:5d:24:81:09:83:4b:f4:4a:c0:80:41:df:c4:6c:
ac:69:ec:47:57:48:04:a8:65:5e:dc:ae:11:f1:39:
09:29:65:69:8c:c7:e3:53:4e:59:1b:1c:20:a5:e5:
92:1d:44:61:32:e7:1c:19:e3:fa:ff:c5:66:1a:c0:
00:36:cd:98:7b:b1:4c:ba:ad:d9:5d:c1:d0:37:30:
38:7c:2d:d7:81:e2:55:e5:f0:d0:e6:3d:ed:28:6a:
7a:1a:96:85:27:bb:2a:15:dd:bb:e1:49:f4:c8:8c:
f4:db:f7:6e:11:03:1a:a9:18:ad:71:83:1d:af:09:
70:85:47:fa:8a:68:ec:d4:a4:3d:31:f9:6b:38:14:
35:cd:75:f9:9a:21:18:b1:5b:d7:2b:4a:45:e4:a9:
61:a3:2b:33:8c:d6:f8:71:f5:2b:e9:f0:0b:e9:65:
ab:e8:fc:93:7e:ed:e5:ac:0b:23:fa:e6:c0:e0:d8:
86:34:ff:2c:47:13:25:d1:71:d9:3e:d0:e8:ae:60:
3b:d2:0f:35:08:6e:77:42:03:34:4b:0a:37:43:16:
20:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:23:12:8A:96:35:0B:B4:2B:01:26:3E:C3:64:DB:2A:BA:25:C2:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/37110967-075b-3fc8-ad70-da136e7d082e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
172.120.209.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:e1:34:e3:12:f7:00:f6:e1:1f:dc:8c:10:63:2a:6c:ae:c9:
1f:c5:a7:6b:22:37:8d:5e:f6:b0:08:e6:2b:c4:a5:00:3e:8b:
85:78:a3:ed:af:55:9d:6e:ec:52:01:a4:3f:df:14:80:95:24:
5d:25:db:bb:27:89:e3:29:38:12:cf:b9:7e:8f:89:34:25:b4:
16:83:ea:b5:b9:73:69:27:15:4f:b5:eb:3b:28:61:77:8e:44:
a8:6f:8a:9f:af:34:03:c3:79:2a:e3:47:fc:c7:5c:64:3d:b3:
e3:bf:37:95:fe:ea:db:86:c4:20:65:80:9f:46:6f:8c:0e:40:
09:49:3a:a1:83:a8:62:fd:5b:15:ab:02:ae:52:b7:41:c3:eb:
28:c6:59:3b:ac:a4:35:5e:f4:8a:16:5a:4a:1b:fe:c4:71:0f:
01:fc:12:fb:f0:10:c6:99:18:3b:9d:6f:c2:98:1f:34:55:c3:
4a:77:8f:4f:22:f9:8f:f5:8e:96:cf:67:eb:5d:22:5f:de:7c:
d6:ef:c9:52:67:2b:58:e2:26:c5:99:15:8c:66:fc:6e:a8:fc:
e4:73:71:22:43:b3:6c:16:27:4e:a2:57:74:77:05:13:b6:ae:
52:83:9f:81:ed:1b:3c:bd:c9:24:9b:c9:c2:74:09:47:5e:5d:
28:ea:79:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 19:36:12 2025 by rpki-client