Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/ca119c6a-b20b-3b8f-895a-3e70a88b82d6.roa
File: ca119c6a-b20b-3b8f-895a-3e70a88b82d6.roa (raw, json)
Hash identifier: y0F1h/NZRi1bS7+4iU2ytYXQwBDkHY/cTClSHzJiWRU=
Subject key identifier: 53:E1:DA:AE:FE:DC:FA:C9:3D:10:42:D4:AC:9D:0D:1A:3B:C1:D9:1D
Certificate issuer: /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial: 010D0C9F432858489FD0973A77F4C76651CC68C0
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/ca119c6a-b20b-3b8f-895a-3e70a88b82d6.roa
Signing time: Wed 22 Jan 2025 02:00:39 +0000
ROA not before: Wed 22 Jan 2025 02:00:39 +0000
ROA not after: Tue 22 Apr 2025 01:00:39 +0000
asID: 53356
IP address blocks: 204.19.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9f:d0:97:3a:77:f4:c7:66:51:cc:68:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Validity
Not Before: Jan 22 02:00:39 2025 GMT
Not After : Apr 22 01:00:39 2025 GMT
Subject: CN=0acdfc0d-2c0d-40a7-b2f0-aab51991efde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cc:9e:a2:bd:57:c9:6d:59:a0:14:a9:1d:0f:
2b:52:ea:0e:a6:54:23:6a:61:27:c6:6a:7d:0a:2c:
08:dd:e0:f2:d4:08:94:60:ae:d5:2a:9a:60:ff:53:
1b:9c:78:24:fe:14:0c:a8:89:5c:8c:13:8a:85:4f:
1f:ce:2d:f8:02:4a:71:9b:90:64:8e:eb:4d:4e:a8:
03:f0:aa:41:dc:54:0a:1e:db:7f:8d:9d:6c:5c:f0:
74:a6:0d:99:26:62:11:72:b4:5f:f0:77:bc:f6:e4:
db:be:96:e8:d4:a4:80:e6:bd:d6:03:8d:27:d1:df:
52:e6:f6:9b:3c:16:97:05:1c:64:bc:34:ed:2e:00:
6b:47:43:f1:49:37:df:91:43:c9:6d:1b:36:f7:bd:
80:9d:63:9f:24:7e:51:c6:b4:86:28:7e:2c:87:02:
dc:48:59:29:d1:ab:f9:43:5a:d7:b0:ac:63:b2:90:
ee:de:f2:84:2a:8b:a4:40:15:e7:d4:72:dd:1a:4c:
cb:4f:78:2c:f8:20:69:08:df:85:fe:32:58:ca:0c:
fe:dd:ba:a3:04:21:4a:be:63:86:42:1f:03:70:94:
bc:a8:1b:f6:d1:fe:fc:4a:c1:89:63:e3:5e:84:5f:
43:23:d1:48:21:7a:06:01:d8:64:24:ac:5b:a8:96:
24:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E1:DA:AE:FE:DC:FA:C9:3D:10:42:D4:AC:9D:0D:1A:3B:C1:D9:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/ca119c6a-b20b-3b8f-895a-3e70a88b82d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl
X509v3 Authority Key Identifier:
keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
sbgp-ipAddrBlock: critical
IPv4:
204.19.238.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:70:b3:6e:15:28:50:97:56:34:f0:7f:84:e1:46:4d:4c:bd:
e2:ec:9d:0a:81:4f:0e:d6:26:77:b9:27:0f:73:63:97:6b:36:
3d:1c:e8:f5:d2:e9:ed:64:00:62:4e:ec:90:e4:89:0f:f6:ba:
75:d5:87:c4:0e:ec:9a:f2:d1:50:ca:76:37:d1:a3:35:31:3e:
0e:dd:fd:63:3d:aa:05:fd:ba:96:1f:14:38:77:f5:4e:3f:1e:
11:35:24:5d:6f:f4:55:e7:f9:90:22:50:54:1e:17:7c:89:4d:
e3:da:55:18:74:bd:d3:ba:22:b1:73:ed:1e:6c:90:e8:27:bb:
cd:fe:8c:c6:f0:28:08:54:f3:8b:37:ca:6c:f2:49:e4:e2:e9:
43:7a:35:f4:d0:1c:dc:67:6e:6a:68:b8:13:aa:cb:49:9e:a4:
ee:e9:12:ba:e5:a1:4d:74:33:f8:38:04:57:b6:f6:f3:dc:6d:
e9:90:34:37:45:67:9e:52:fe:66:1b:97:7c:53:fd:d4:6d:60:
f5:bb:04:3e:18:4a:c7:a8:da:f0:06:ec:58:e4:0d:42:fb:8d:
3a:4f:47:f6:b4:59:ee:82:e5:be:01:b4:ab:b4:8e:e7:46:cb:
88:21:84:a7:5c:69:64:1c:74:81:ea:36:28:61:d8:7d:8a:f4:
e1:dd:29:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 11:33:14 2025 by rpki-client