Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/46598a02-3153-32e9-856d-86550fb5994e.roa
File: 46598a02-3153-32e9-856d-86550fb5994e.roa (raw, json)
Hash identifier: 8yn6oetKvgq+aYSS1tEGkcfu0pD1LStDfprjRknTmhQ=
Subject key identifier: 0B:10:61:76:60:F2:5D:1E:39:9E:20:FC:FB:61:4A:A3:9B:40:50:54
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C84BEB88231F7A6BA1B06F00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/46598a02-3153-32e9-856d-86550fb5994e.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 396982
IP address blocks: 34.124.80.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Apr 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:eb:88:23:1f:7a:6b:a1:b0:6f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=70a4851e-ff2b-44b4-8727-968d955cef0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1e:4f:38:09:19:1a:33:a1:f8:25:fd:0b:b4:
d4:30:e0:b4:5f:a4:42:9d:0f:04:2c:79:3d:74:5b:
d1:64:38:f6:54:c2:0a:f5:41:9a:47:12:69:a1:87:
8a:dc:43:12:78:8f:e3:3f:8e:e8:dd:41:9d:b4:a7:
bc:5c:6c:00:23:28:5b:96:d4:1a:df:ab:f6:61:f1:
e4:c4:c1:14:1a:31:71:10:fe:ee:45:20:30:00:e9:
a2:6f:96:7c:34:9d:30:db:9b:4d:79:ab:b7:d8:8a:
34:6a:b1:21:e2:fe:3c:65:69:56:c0:98:db:7a:c3:
b0:bf:ad:82:90:50:8b:ae:ee:7a:d1:87:59:d9:11:
6c:e8:ff:af:ff:cd:7a:72:3b:42:c0:41:7f:34:94:
6c:41:56:7f:9d:9c:3b:ed:b9:88:75:10:17:8b:5a:
1f:92:66:94:95:4b:8d:8c:40:e6:a0:b9:a2:ef:d3:
29:fb:01:a4:44:2c:3a:97:8c:3c:46:19:ae:d9:a2:
b3:87:d2:b9:83:3a:88:62:e7:26:d7:a1:f3:bc:09:
79:71:9f:ec:48:f2:0a:09:59:14:4c:2c:c4:9a:d3:
56:d0:d1:d1:cb:fb:7d:6f:8e:7f:7f:33:da:94:9d:
64:ba:6d:21:85:b1:9c:15:33:94:a2:c6:54:94:10:
16:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:10:61:76:60:F2:5D:1E:39:9E:20:FC:FB:61:4A:A3:9B:40:50:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/46598a02-3153-32e9-856d-86550fb5994e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.124.80.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:e2:08:d3:84:c0:15:b3:9e:b7:69:dd:f0:07:e4:ae:58:c0:
12:ee:41:5e:a0:4a:8c:4a:19:b2:33:fe:53:5e:68:c2:e1:c0:
b3:ec:e3:4c:82:52:ce:19:f6:fc:1e:ed:79:aa:3f:83:12:5f:
4b:52:b3:08:ba:9c:bd:39:ab:5f:16:ba:22:43:4d:9d:9a:8f:
0d:93:d9:4d:d7:bf:4c:eb:cd:69:a0:5c:ab:b3:76:b7:67:c3:
1b:5f:ef:8e:03:26:de:fa:35:3c:2b:34:58:3c:54:a8:83:ec:
07:55:36:2e:3f:89:c5:a5:83:ca:bd:a3:0b:39:02:b9:55:21:
6b:ca:5a:c6:b1:23:09:16:79:7d:d9:6b:2d:a3:14:cc:37:3a:
ab:4d:dd:29:ac:fd:4e:40:f8:95:94:30:d0:d8:f0:e9:7b:9f:
05:1d:0a:d6:ff:ea:93:af:f1:40:34:c8:99:bf:eb:f4:7f:90:
1b:80:31:fa:0e:60:f1:1f:fa:8f:09:72:3f:e0:e1:7e:1f:60:
81:ce:0c:b6:03:0f:e6:b2:67:93:00:6c:5d:6e:49:aa:dc:47:
57:cf:50:cd:ea:5b:14:8c:81:89:12:fa:a8:57:10:7b:35:86:
24:1d:88:89:32:cc:9c:e1:14:bc:18:b3:bf:3d:b7:a5:e0:5e:
4f:8e:1d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 10:36:42 2025 by rpki-client