Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8b2d2aec-4e3d-320a-8792-ac33c3bd48cc.roa
File: 8b2d2aec-4e3d-320a-8792-ac33c3bd48cc.roa (raw, json)
Hash identifier: VfBtVOSMsKtY9aUCooJk4ozOEHT1GsPCLd+nuvd9je4=
Subject key identifier: 48:3B:C2:2C:AF:BC:03:4A:08:C2:CB:5E:EC:64:31:04:32:E7:DD:5E
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285848BBBB7C3B977F707D995F73A0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8b2d2aec-4e3d-320a-8792-ac33c3bd48cc.roa
Signing time: Sat 01 Feb 2025 02:00:39 +0000
ROA not before: Sat 01 Feb 2025 02:00:39 +0000
ROA not after: Fri 02 May 2025 01:00:39 +0000
asID: 852
IP address blocks: 207.148.128.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Apr 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bb:bb:7c:3b:97:7f:70:7d:99:5f:73:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Feb 1 02:00:39 2025 GMT
Not After : May 2 01:00:39 2025 GMT
Subject: CN=6680c6f5-c257-41fe-b618-44cb62d62777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:2c:4e:8a:14:3b:f3:6a:f7:e9:d3:6c:eb:8e:
89:3a:e4:27:4b:8d:4e:78:36:f2:6c:37:cd:29:43:
cf:c4:a3:f6:64:45:19:3e:04:89:9e:4c:aa:1b:21:
85:86:bf:61:26:5f:5b:11:19:c4:a9:85:a4:81:85:
db:98:58:2a:17:2d:60:88:ab:9b:86:4f:92:a1:8d:
1b:1f:0e:1c:05:26:41:f6:9a:74:33:60:d0:91:0e:
77:c3:78:8c:2e:30:b0:fd:0a:db:44:54:6c:da:99:
56:64:8d:e9:d6:f5:b2:36:da:d5:7c:63:cf:b6:ab:
6d:d2:09:ec:38:8a:8e:7e:af:89:16:08:81:e0:b7:
c1:05:9c:9c:d3:0b:6c:3b:0d:a6:ac:ae:2e:ac:36:
99:7e:c7:9b:54:7c:95:6e:61:88:fb:dd:f2:3b:e5:
23:89:b6:ed:44:f8:09:e8:e6:6f:2f:10:19:3d:32:
7a:78:ce:51:48:2f:5e:84:4e:ee:d5:98:bf:26:cc:
d5:b7:c7:96:74:9f:81:83:b6:1c:89:55:73:3b:6e:
08:4e:4b:1a:cd:c5:66:c2:71:a2:c0:10:17:6a:27:
b9:12:b8:a5:a8:5e:97:18:53:50:b8:96:52:54:1d:
a8:11:ad:e9:1b:51:c7:f1:8e:61:a7:f5:62:dc:65:
1b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:3B:C2:2C:AF:BC:03:4A:08:C2:CB:5E:EC:64:31:04:32:E7:DD:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8b2d2aec-4e3d-320a-8792-ac33c3bd48cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
207.148.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:b5:25:81:a5:ec:11:0f:84:1b:e9:f6:d9:45:81:b4:1a:e1:
7a:7f:1e:6a:c6:bb:03:43:d8:a9:23:9e:aa:fc:72:16:06:1d:
d7:77:4a:82:4d:9b:0e:76:92:cc:a8:4f:c7:9f:8e:66:65:01:
7c:7e:39:e3:4d:70:d0:72:c7:80:31:e8:ae:7c:0c:c4:ab:4c:
21:12:58:2b:9f:fe:34:9e:6d:61:1a:ab:60:35:ae:ef:e2:24:
5d:f0:4e:b4:f6:44:4e:a8:ef:a5:8f:04:60:ed:35:20:b5:3a:
b3:f8:64:ac:67:d4:61:b1:cb:62:fb:80:4c:ac:90:6a:c1:67:
00:c0:16:8f:5b:95:d9:7f:20:cf:32:83:b5:b3:84:b8:14:c2:
63:5f:eb:6b:52:6d:91:8b:99:4e:a8:25:b0:1d:de:d9:56:07:
34:29:0c:88:f1:35:16:3a:65:f3:2d:68:6e:14:70:a1:74:e3:
59:7e:88:8c:54:ad:6c:fd:ed:bc:b2:f6:af:0f:e8:c1:6c:b2:
68:e7:1f:74:28:4a:4e:48:37:84:5d:ab:84:55:13:f0:88:0b:
c3:2f:61:6d:29:6c:dc:37:3a:ec:6d:58:21:93:63:74:73:69:
e6:a3:4d:1c:17:01:f0:19:b2:aa:7e:1f:96:c2:d4:d8:3d:f2:
63:6f:05:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 06:41:10 2025 by rpki-client