Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/861286e7-5355-3c1b-abd2-492d05effe19.roa
File: 861286e7-5355-3c1b-abd2-492d05effe19.roa (raw, json)
Hash identifier: gPSleNdrtr/lWYxR+LYCO6MGewmrPpVEgRGJ1lmDF2M=
Subject key identifier: A4:9B:B1:D2:76:FD:30:84:89:84:8B:CA:F5:32:9A:76:CF:65:CB:74
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285848BBBB7807031C1BDB557D9600
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/861286e7-5355-3c1b-abd2-492d05effe19.roa
Signing time: Sat 01 Feb 2025 02:00:39 +0000
ROA not before: Sat 01 Feb 2025 02:00:39 +0000
ROA not after: Fri 02 May 2025 01:00:39 +0000
asID: 852
IP address blocks: 198.166.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Apr 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bb:bb:78:07:03:1c:1b:db:55:7d:96:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Feb 1 02:00:39 2025 GMT
Not After : May 2 01:00:39 2025 GMT
Subject: CN=a4e5696d-f4de-4a4f-8048-15147f950961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a9:24:35:28:50:fa:d8:f9:6a:c6:d1:35:31:
fe:06:71:e7:a5:d2:71:d4:cc:d4:b1:c4:46:7e:ec:
0e:2d:1a:56:62:ab:e5:c1:56:63:2d:b3:93:3f:f0:
c1:3c:22:8d:6d:80:df:90:36:eb:aa:24:9e:d7:b7:
5e:79:34:2a:d9:5c:90:0e:04:90:76:bc:7f:94:74:
31:7d:4f:a6:5c:e4:9d:38:0e:2c:2d:61:a3:bd:06:
d1:26:57:42:17:e2:1b:53:77:9c:87:dc:c1:0d:18:
38:fc:af:c1:f0:ef:7e:09:17:d1:72:ad:34:46:08:
42:f3:8c:71:0d:2a:97:a2:28:ce:a2:ab:35:4e:bf:
41:e2:8e:3f:e9:b1:d9:18:7f:dc:b4:16:27:db:2a:
eb:b4:ee:91:e5:1b:72:90:47:14:ae:98:f2:b0:6b:
a0:39:e4:9d:28:d3:38:0c:60:64:87:4f:fc:9a:03:
de:98:60:e2:45:ea:14:86:bb:62:9b:d4:29:7a:51:
97:ac:54:96:b1:98:be:0e:fb:fa:a0:51:4d:04:7d:
cf:56:32:9b:02:b4:9d:ff:68:8f:7e:4c:58:39:d7:
19:fc:e4:d6:a0:11:8b:39:12:e8:41:fe:b1:70:2c:
61:44:c7:7c:d3:d1:21:13:42:5f:46:05:62:96:d6:
44:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:9B:B1:D2:76:FD:30:84:89:84:8B:CA:F5:32:9A:76:CF:65:CB:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/861286e7-5355-3c1b-abd2-492d05effe19.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
198.166.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:ec:69:1b:f0:2a:54:00:20:32:0c:6d:fb:1d:98:86:43:61:
e0:26:ac:e6:06:80:76:a9:2e:e2:d9:8f:73:ca:d6:6b:94:bc:
9b:90:f8:41:09:c7:e9:be:13:e8:8f:b6:35:7d:10:90:85:6e:
c3:37:a2:eb:45:fc:96:ae:22:39:e3:bc:38:e4:80:d8:9f:a5:
66:08:06:d2:12:1f:6c:5d:42:5d:30:6d:b1:e2:e4:7b:98:04:
65:4b:e1:f4:66:d6:fc:b4:1e:38:be:ba:9f:1c:2f:71:5b:e4:
45:98:3d:15:86:d8:d5:d6:ce:f6:a6:0d:56:bd:a1:77:bd:ca:
02:f3:dd:d8:e7:61:7a:be:1a:8f:fb:08:21:2e:c3:c3:e4:92:
48:6f:31:45:55:63:5e:2d:4d:c3:8a:30:8d:28:1b:4e:e3:58:
d1:25:63:91:8b:9a:15:5f:96:b7:95:d3:dc:e9:3f:20:47:d2:
62:78:83:32:44:2e:31:2c:03:04:63:15:aa:37:bb:25:bf:0e:
57:3c:e3:eb:95:08:28:0a:5c:f9:73:79:ec:73:8f:6d:5d:28:
f7:d3:ea:26:7e:9b:7c:1b:0d:a4:60:fa:89:df:67:6c:53:b7:
e5:3d:df:23:62:b0:fe:3b:42:f7:0c:62:02:34:cd:c8:a0:86:
05:25:46:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:04:22 2025 by rpki-client