Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/1cdfd7df-3c2b-3661-b33d-998bf52749c7.roa
File: 1cdfd7df-3c2b-3661-b33d-998bf52749c7.roa (raw, json)
Hash identifier: zKkXlwdS1WZMh864oauNB3ahl79tinoU+7679k3gPT0=
Subject key identifier: 89:39:18:26:50:20:5E:9C:47:16:7C:87:B8:27:27:F0:15:C5:D2:1B
Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial: 010D0C9F43285848C582069539EA6F96AFA35D80
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/1cdfd7df-3c2b-3661-b33d-998bf52749c7.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 36492
IP address blocks: 136.22.80.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:82:06:95:39:ea:6f:96:af:a3:5d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=196c9453-47ce-46e6-8204-3a1499eea3a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1b:20:b6:43:64:88:1a:b1:c4:01:32:b0:6b:
8f:dd:62:ce:c9:8a:76:62:7e:1e:80:24:d5:9e:78:
97:3b:69:cb:8b:46:ae:b8:dc:9c:46:3d:d4:4b:91:
9f:5f:bd:60:21:3a:7e:bc:94:a2:bc:a1:6a:e8:93:
d2:56:b7:16:f5:5e:f0:77:e7:07:16:e1:64:3e:01:
8e:77:0b:2e:fb:0c:51:01:9a:d1:1d:0d:31:0f:74:
c9:c0:d3:c7:b3:1a:0b:91:24:06:37:49:14:c3:0f:
62:58:e2:4b:fa:38:77:3e:07:8e:d8:71:f0:46:e7:
54:5f:bf:ce:f2:5f:1e:a3:8f:34:57:fc:76:f2:cf:
f4:38:0b:b4:36:b0:4a:89:09:03:41:6a:73:60:a7:
29:2e:d1:d8:c3:9d:4a:37:c6:29:08:c6:88:c7:5b:
bc:82:c6:9e:14:df:35:bc:48:12:9b:73:c5:74:36:
c7:84:67:d6:09:70:1c:a6:f3:67:03:99:32:70:5d:
a7:d8:f0:b4:73:79:a5:52:02:6d:5d:5d:66:b7:66:
67:2f:9e:70:99:51:44:a3:48:f2:39:ee:75:af:61:
9f:9e:18:ea:48:f3:91:f5:f2:6c:e9:51:99:28:e1:
c4:d9:8b:44:ab:79:be:99:4a:86:b3:3c:fb:ec:08:
22:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:39:18:26:50:20:5E:9C:47:16:7C:87:B8:27:27:F0:15:C5:D2:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/1cdfd7df-3c2b-3661-b33d-998bf52749c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
X509v3 Authority Key Identifier:
keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.80.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:76:2c:1a:1d:75:2b:6b:88:c3:84:46:b0:5f:16:99:a5:a2:
2a:c2:0f:68:4d:c8:02:77:1b:ac:4a:94:ec:46:ee:b3:15:db:
a0:0b:e7:f5:dd:b6:77:ea:72:b5:ab:aa:b4:5d:3f:19:55:ee:
62:52:96:48:f8:46:97:ad:b4:46:2c:78:93:64:df:83:15:48:
9a:f3:e1:7a:fb:49:ee:a3:ed:34:8c:bf:0c:39:77:94:c9:18:
8c:28:78:b2:86:4b:e2:d5:05:64:64:e8:cb:0d:d6:4c:0f:6a:
64:78:f9:39:8b:5b:69:cd:80:f6:3b:16:54:08:58:b3:ae:ba:
cd:60:29:04:34:88:a9:5e:d4:12:18:13:66:d5:d3:3d:63:a3:
40:40:7a:0d:76:c6:f5:1e:2c:c2:1a:fb:2e:fb:6b:39:9e:c4:
ff:32:00:3f:f4:ed:91:9c:4c:87:49:35:5b:0a:21:9f:d9:09:
81:ff:ca:22:87:76:5c:aa:f6:63:90:5a:46:c5:27:48:8c:52:
1f:02:a3:25:39:66:1c:a1:29:db:aa:d1:a2:e4:a7:b3:53:65:
c4:56:7b:41:76:b0:87:bc:22:6a:8e:ca:85:8c:27:2c:9a:f5:
05:29:a9:85:bf:0e:49:cf:7f:c7:a8:88:b4:50:1a:24:88:b6:
46:5d:18:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 11:33:12 2025 by rpki-client