Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/b71a26d1-4044-3ed9-87ac-7c9445a25157.roa
File: b71a26d1-4044-3ed9-87ac-7c9445a25157.roa (raw, json)
Hash identifier: PDm97FaWauwFxoAEOeaXZ4SL9uILvzHApxa0uQivb/Q=
Subject key identifier: 2D:4F:BD:F6:E2:A1:87:8B:65:11:51:2E:E7:33:70:BE:A0:DB:A8:7B
Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial: 010D0C9F4328584909E6A6FBBEEB8426C271B800
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/b71a26d1-4044-3ed9-87ac-7c9445a25157.roa
Signing time: Sat 01 Mar 2025 02:00:39 +0000
ROA not before: Sat 01 Mar 2025 02:00:39 +0000
ROA not after: Fri 30 May 2025 01:00:39 +0000
asID: 394437
IP address blocks: 205.196.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Apr 2025 05:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:09:e6:a6:fb:be:eb:84:26:c2:71:b8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Validity
Not Before: Mar 1 02:00:39 2025 GMT
Not After : May 30 01:00:39 2025 GMT
Subject: CN=bd4b6aa2-4f88-4031-b7fa-afc576986a51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9e:83:26:19:f7:85:ab:27:ee:51:76:21:6a:
fd:98:d4:2c:51:a2:67:07:77:13:d4:cb:67:e2:f4:
94:f0:51:a3:38:ad:79:54:a0:44:1d:4f:dc:70:39:
b2:ab:e3:47:b8:73:5b:1f:0e:ad:58:4e:a1:38:90:
d1:03:8c:5a:3d:48:e7:cc:ac:9e:6f:1c:67:80:2f:
69:74:cb:af:d6:10:e0:44:ac:72:2a:08:3a:1b:40:
ab:83:9d:19:e4:e4:6f:c6:1c:17:c2:c7:33:b9:03:
1f:e3:de:38:57:d6:bb:49:b5:1c:2c:a3:40:d1:be:
95:6b:9e:ac:d5:6d:56:8c:10:d7:b2:9e:aa:ed:8d:
85:49:34:de:15:8a:f7:ed:5b:3e:49:c0:26:f6:ce:
a1:88:f9:35:5b:84:08:0d:74:05:80:e6:7c:41:fb:
59:84:28:8e:ad:2f:cf:a6:83:e3:29:fb:ee:31:79:
5c:17:42:cc:ec:78:4d:87:a1:60:85:9d:1f:a3:1d:
4b:d6:74:e1:09:9a:7f:21:fd:cb:67:bf:8b:56:24:
09:72:9a:ca:bc:56:1d:8f:70:1f:35:c2:aa:c8:ab:
8c:6d:0e:17:28:e9:28:03:1a:4b:c7:84:2d:85:80:
bc:95:dc:ca:d0:1f:71:51:d7:89:66:84:88:9a:02:
f8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:4F:BD:F6:E2:A1:87:8B:65:11:51:2E:E7:33:70:BE:A0:DB:A8:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/b71a26d1-4044-3ed9-87ac-7c9445a25157.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
X509v3 Authority Key Identifier:
keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
sbgp-ipAddrBlock: critical
IPv4:
205.196.181.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b7:5d:61:2e:ec:65:93:6a:6d:06:bf:96:43:2b:06:72:dc:09:
7b:61:16:4c:dd:06:04:0d:62:25:1a:e4:2a:c1:9f:4d:bf:cf:
a8:66:65:65:8c:66:9e:ef:c6:18:ae:76:38:09:7b:16:d0:c2:
b4:f9:71:fa:53:8b:bd:5d:96:e4:28:dd:30:b4:71:37:47:99:
99:ca:ee:bd:fb:76:87:09:a1:fa:f6:f3:30:4e:0a:26:15:d7:
ed:a6:a3:f4:f7:a1:43:24:97:61:b5:2d:3e:c3:cb:49:f9:b2:
f4:fd:05:6b:0e:83:a7:ef:21:f7:db:40:7b:0f:fa:cf:68:cc:
7a:cd:0e:a5:23:3c:01:88:b8:4f:5f:99:d4:f2:b0:6d:49:4d:
cc:61:29:1d:10:13:10:b8:be:c1:b3:e1:21:fb:6e:8f:39:87:
16:3d:cd:33:fb:7b:e9:e7:84:f4:23:63:2e:bd:43:7d:76:e5:
ac:1b:7f:b3:e0:3b:c9:0a:54:29:54:e0:1e:67:67:46:2b:9b:
e3:2a:7a:37:e6:0c:d5:81:13:b6:bc:63:7b:db:22:1a:de:4d:
70:a0:61:f2:73:8e:9b:9d:f8:5d:c5:b4:df:49:a8:f5:60:6a:
c9:37:93:2f:07:22:6c:f9:63:44:49:c3:1b:82:8b:f2:9e:e3:
33:c6:64:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 17:14:49 2025 by rpki-client