Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/0aace9ba-23a4-31b7-b17e-fca13712192f.roa
File: 0aace9ba-23a4-31b7-b17e-fca13712192f.roa (raw, json)
Hash identifier: HWSmzIc16Gi/xk4+R6opm8SCP+mZEvi38w28nvD2voE=
Subject key identifier: 88:04:90:BB:70:33:FA:0A:73:0B:69:EF:E9:E5:4A:26:DD:4A:2F:F0
Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial: 010D0C9F43285848C5821BF6483F41F5E6D86080
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/0aace9ba-23a4-31b7-b17e-fca13712192f.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 36492
IP address blocks: 136.22.228.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 08:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:82:1b:f6:48:3f:41:f5:e6:d8:60:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=c0d1e30a-6f33-47dd-a966-c2218b55a5f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:15:3d:27:c9:b6:ca:7e:59:bf:cc:73:15:76:
15:f3:d0:d8:8d:68:10:b5:61:1c:e0:78:df:80:19:
7a:78:85:fb:0e:ff:21:6d:47:dc:22:dd:c1:72:ac:
62:fc:f6:23:5a:dd:8f:b6:16:2b:47:2a:af:93:35:
a8:0f:7c:a1:14:e3:5d:5f:30:ea:b0:20:c5:ad:12:
40:4b:92:fd:3b:7a:51:b6:10:f5:fb:7d:11:bf:8d:
c2:fb:bf:35:42:fa:65:b6:54:b7:25:8e:a0:8e:09:
f6:a0:4f:04:28:af:83:27:ca:95:09:2a:61:49:f4:
d4:1f:ed:cc:e8:8f:90:25:a1:0e:0e:b3:08:b0:d4:
8f:b8:9a:30:66:02:50:a1:30:2f:89:27:98:3c:da:
ca:9a:68:d5:18:b5:cb:2e:75:d3:cd:dd:1f:15:6e:
bd:05:7b:48:53:59:d2:7c:77:26:48:7f:06:2d:07:
f4:3c:c5:57:ad:3d:e5:4e:fc:ca:e0:b9:a4:e3:75:
6d:86:6f:8b:5e:c4:29:c1:21:de:e9:d0:da:e4:85:
34:ca:60:ea:ee:e7:42:26:b6:7d:00:87:3e:d2:eb:
c9:f8:51:bb:56:16:dd:20:b6:9c:f3:3e:69:39:3a:
c5:30:05:5d:e5:72:d6:1b:da:21:51:10:6a:72:40:
59:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:04:90:BB:70:33:FA:0A:73:0B:69:EF:E9:E5:4A:26:DD:4A:2F:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/0aace9ba-23a4-31b7-b17e-fca13712192f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
X509v3 Authority Key Identifier:
keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.228.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:04:e1:a6:32:69:61:ae:49:84:6b:85:73:03:f6:c0:d9:bf:
59:03:92:99:2c:d7:7a:61:b9:38:67:9f:44:a2:b4:c5:3d:50:
b5:eb:94:4e:64:56:c4:c7:a2:01:4d:ea:25:df:92:b7:d3:63:
fb:a0:19:9d:46:01:72:82:72:04:e1:fc:b6:84:c2:03:1d:d7:
a0:4c:bd:2e:e0:7a:b7:47:cd:47:14:ff:30:d7:89:9d:79:a6:
72:ac:5b:01:a8:55:05:03:a7:ec:9a:6e:93:b1:57:0d:b4:37:
ca:70:d2:c3:44:2d:0b:4f:a3:2b:e6:00:6b:16:d9:8f:60:e5:
9d:77:53:ac:02:60:18:06:e4:38:0f:52:4a:e5:7f:ca:9a:f7:
40:24:e0:4e:0a:df:c7:25:63:41:81:95:5b:5f:e6:53:8f:87:
f9:8e:d8:cc:6d:8a:d8:78:1a:b0:1a:08:34:8d:77:3b:28:28:
7c:82:a7:fd:33:cc:78:a9:0f:81:19:3c:70:46:1e:13:2d:66:
4b:db:f3:48:f0:49:f6:45:55:4d:b9:73:6f:60:24:34:7c:be:
7d:30:a9:c4:98:94:a9:31:b3:aa:1a:fb:c0:72:82:4f:7b:37:
53:8f:df:d8:bd:19:de:ed:c5:07:61:e6:e8:6c:ce:8e:19:09:
ac:00:13:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:08:55 2025 by rpki-client