Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/933acfb1-a945-3bf5-926b-43192ed750e8.roa
File: 933acfb1-a945-3bf5-926b-43192ed750e8.roa (raw, json)
Hash identifier: LqKSe+lCRnxKxtLJJFTze8Sel//RIb9Z/4/4TwX5puk=
Subject key identifier: D2:3E:11:5A:AD:7C:10:EB:DF:22:5B:0C:69:CE:7F:3B:68:2D:CA:D0
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F43285848E941A68C4DE50BBB9495D568
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/933acfb1-a945-3bf5-926b-43192ed750e8.roa
Signing time: Mon 17 Feb 2025 09:22:31 +0000
ROA not before: Mon 17 Feb 2025 09:22:31 +0000
ROA not after: Sun 18 May 2025 08:22:31 +0000
asID: 812
IP address blocks: 104.164.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e9:41:a6:8c:4d:e5:0b:bb:94:95:d5:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Feb 17 09:22:31 2025 GMT
Not After : May 18 08:22:31 2025 GMT
Subject: CN=407bdba2-79a0-4a69-9c3d-44a427505ab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ff:ff:fb:2d:f2:14:30:4c:cb:5d:43:f2:9f:
a5:31:a8:69:52:30:8a:ee:76:05:c9:24:f9:45:3a:
f1:77:f0:ee:43:c7:de:9e:6c:03:61:c2:94:dd:31:
2a:e5:12:14:a2:00:8e:8e:93:17:2c:91:83:76:ba:
7e:0e:b2:16:de:e4:da:7b:3c:38:83:bc:97:a7:4c:
8f:54:93:31:2b:b0:08:95:f8:60:28:8c:55:ce:0b:
fc:9d:36:da:24:cc:f9:63:de:57:7b:d1:39:f1:05:
bb:76:03:65:ef:a4:f9:d5:fe:d6:6e:90:9f:17:5e:
37:14:5f:b9:58:34:b3:fc:cf:93:bd:dd:43:49:8c:
26:1c:4c:f1:a4:67:60:13:72:06:c4:53:29:8b:da:
e2:95:f0:72:68:c4:c1:81:63:ea:64:10:95:23:1d:
0c:26:4c:53:e9:79:33:98:88:28:92:67:d9:35:71:
5b:f2:b7:b5:b6:50:58:c4:89:ba:1c:f9:be:d3:d9:
6f:ef:8f:06:d4:1c:b9:a9:5e:2c:fd:97:3a:b4:51:
45:c2:7d:10:5b:13:b8:ad:59:e2:8b:ed:71:b7:37:
2f:04:0e:97:65:64:95:02:ef:be:c8:da:39:cd:fe:
40:ea:6e:a1:ab:5b:f5:29:43:77:57:f1:37:d1:ad:
6b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:3E:11:5A:AD:7C:10:EB:DF:22:5B:0C:69:CE:7F:3B:68:2D:CA:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/933acfb1-a945-3bf5-926b-43192ed750e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.164.77.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:c9:16:ed:ba:30:c7:ce:db:a9:45:fb:08:56:58:cd:d9:17:
2d:96:1b:41:40:0f:ef:25:aa:65:8d:c0:11:7c:61:8d:b5:67:
47:f6:a6:a7:53:ab:9f:0e:0e:3a:b2:88:14:3f:a5:c7:8e:24:
0a:25:b5:b0:43:16:fe:63:cd:d3:31:ac:c6:eb:58:98:6d:59:
84:11:48:40:b6:de:07:53:01:53:55:dc:26:25:48:1e:e4:74:
ed:25:9d:e1:77:9e:0a:2c:88:fd:1c:de:93:bd:b1:ca:2e:fc:
32:4b:b2:d4:f6:72:9c:8a:35:e4:2c:95:25:ee:49:39:20:66:
af:64:7d:bf:a9:ec:0a:6a:71:e4:e1:bb:c8:54:02:98:f8:f1:
db:41:02:0f:68:2e:c6:76:60:27:00:dc:62:dd:82:2c:59:be:
8d:3a:5e:ca:37:b7:6f:59:7d:51:21:3a:f5:0f:32:7b:9c:51:
58:45:5e:e7:46:99:f8:5c:42:d3:96:fe:c8:0e:fe:02:e5:20:
43:da:39:a4:3d:da:f8:ab:2e:25:e6:f5:0e:02:45:96:b9:83:
21:3c:92:14:7f:cd:1d:41:0a:7c:a8:1e:4a:24:f5:a0:33:12:
97:a5:ed:27:7e:08:2f:f0:bc:5d:4b:3c:e5:cf:53:4c:e0:0d:
17:c0:33:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:59:46 2025 by rpki-client