Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/20c1838b-eb75-3b4a-a0dc-855d2ecba960.roa
File: 20c1838b-eb75-3b4a-a0dc-855d2ecba960.roa (raw, json)
Hash identifier: RhH9PP6HfYL0N7C1s4wNGz+wzI9AoE9qlyk0jMbyKoA=
Subject key identifier: 7B:A9:9B:BA:F1:56:C5:99:9F:83:BF:33:51:42:7A:72:D4:98:2A:16
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F43285849674EF82837BB3E14360B9D80
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/20c1838b-eb75-3b4a-a0dc-855d2ecba960.roa
Signing time: Thu 03 Apr 2025 13:01:02 +0000
ROA not before: Thu 03 Apr 2025 13:01:02 +0000
ROA not after: Wed 02 Jul 2025 13:01:02 +0000
asID: 7018
IP address blocks: 172.96.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Apr 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:67:4e:f8:28:37:bb:3e:14:36:0b:9d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Apr 3 13:01:02 2025 GMT
Not After : Jul 2 13:01:02 2025 GMT
Subject: CN=2294f2f8-28f4-431f-9b10-8c7a402878a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6c:d2:a2:e9:d3:dc:33:d7:da:36:68:87:c1:
93:38:50:3b:4b:d9:ea:1c:97:7e:fc:58:3e:80:79:
1e:64:0a:45:79:90:2f:9a:4a:69:52:da:f0:4f:18:
64:62:26:2c:83:d6:1c:34:eb:8e:95:dc:5e:23:b2:
b2:be:d9:6e:78:01:b4:cb:0e:e0:16:2b:2f:d5:e5:
da:8c:00:7b:65:f6:64:3d:9d:c7:01:ed:4a:21:aa:
2e:c7:ae:75:0e:a4:f3:ad:55:eb:5a:74:7c:4e:82:
f3:d3:3c:41:45:c1:f1:82:9d:67:a9:ae:ba:19:37:
19:5a:88:dd:c9:5b:aa:3e:61:14:2d:75:50:40:a6:
fc:4f:fb:c0:4f:bf:bf:24:71:1f:3b:ec:8e:1d:83:
44:6f:34:84:9e:b0:18:82:c2:72:66:f7:e9:f6:86:
3f:9b:c1:04:1c:de:f8:05:ac:50:4b:d2:79:94:ed:
2b:ec:03:ac:fd:2f:b5:4b:9c:d0:dd:9b:eb:72:0d:
8e:2d:6c:f7:a7:36:46:07:40:8e:13:a2:eb:83:cd:
d6:6f:b0:16:32:34:51:f4:7a:2d:4e:a1:eb:3c:65:
01:9b:74:65:7b:12:09:2a:33:fc:1e:27:ee:b3:d0:
91:1a:b4:a3:f5:d9:72:ab:b4:f9:88:32:e4:11:9d:
66:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A9:9B:BA:F1:56:C5:99:9F:83:BF:33:51:42:7A:72:D4:98:2A:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/20c1838b-eb75-3b4a-a0dc-855d2ecba960.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
172.96.84.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:cd:06:13:b2:b7:99:8e:e4:ae:86:03:28:72:48:a2:36:e0:
bc:56:0d:7a:38:18:52:bb:27:44:57:c0:df:9c:90:e2:a0:36:
3f:c7:5e:36:f9:cb:be:f0:4a:76:07:e6:42:30:55:e8:25:4f:
af:9e:d1:ac:75:d5:39:71:e5:9b:a8:6c:e8:21:c8:d6:a8:ad:
f7:eb:87:b7:98:11:fc:9d:91:19:b7:6e:a1:80:83:ce:96:e9:
ea:4d:70:e8:24:13:b5:9b:06:05:df:dc:10:8e:38:71:62:ac:
a8:37:2f:c2:3e:f3:f6:2c:b2:d7:b7:22:8d:ba:f2:41:f0:20:
a6:5a:b2:ac:3e:74:50:ca:e8:68:66:9d:c7:5c:5e:41:62:ab:
c7:01:90:26:ce:6d:5a:8f:3f:35:47:62:ae:08:55:dd:a5:31:
c1:0a:63:80:fb:9e:11:02:2c:31:6c:11:03:1e:de:fe:35:c1:
cb:0d:96:2f:ec:2e:c2:f1:5d:eb:3a:64:5e:75:5a:df:4d:9d:
41:ea:f6:29:da:1b:a3:a0:c0:b9:ad:15:f5:ec:cd:28:b4:e1:
35:3e:22:2d:33:a9:aa:8a:d7:cd:8c:4d:9d:90:9f:e1:74:32:
b6:e4:b4:6c:76:b3:90:5a:95:88:6e:8a:ac:b4:94:7a:21:1e:
6b:81:d4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 16:01:25 2025 by rpki-client