Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d38415fe-d2ba-3cb9-9e5f-d019839c548c.roa
File: d38415fe-d2ba-3cb9-9e5f-d019839c548c.roa (raw, json)
Hash identifier: Clr653NYddwHT9iLZDlYeRC8JNemqxMr/Oyc1nDtHVE=
Subject key identifier: 6D:5E:27:73:AF:03:F6:A2:07:81:FF:96:AA:0A:87:C3:F8:47:66:DC
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C84C12B8C977DE6654D98740
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d38415fe-d2ba-3cb9-9e5f-d019839c548c.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 396982
IP address blocks: 35.199.96.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4c:12:b8:c9:77:de:66:54:d9:87:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=ab0924e5-0bb3-432b-8d3e-bde00516d5a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:74:3e:01:1f:ad:9b:a6:12:05:68:67:cb:fc:
42:0f:0c:b7:36:41:56:6c:67:91:c6:00:8e:26:a9:
5a:3b:7f:29:49:8c:1d:0e:b4:7b:8d:6b:93:96:4b:
d2:ff:f0:a2:7d:d1:e7:7b:89:fb:52:9f:d6:ab:86:
86:b2:1f:42:7b:f9:44:85:fe:77:1e:ea:27:a6:41:
ad:d4:fc:1e:d5:1a:43:63:51:28:50:67:2c:fa:1e:
92:de:89:39:3a:ff:a3:12:54:c1:d8:48:20:fa:72:
2d:21:f0:f0:d2:d0:cd:84:88:4a:72:49:2d:77:7d:
70:82:a4:37:45:f3:a6:0d:f5:45:bd:3f:20:79:df:
37:41:de:b3:36:0b:ca:cb:de:c1:bd:30:9c:42:48:
30:3d:9e:7c:1f:cd:db:c0:85:6c:23:a9:94:18:36:
5a:8f:07:e1:f2:e6:3a:89:86:74:17:e3:79:78:e8:
29:1e:9f:27:a9:0f:35:d9:e7:ec:22:b2:9b:c3:27:
47:8c:d4:f2:c0:ab:b6:b0:0e:db:a2:a9:d7:6a:64:
21:a2:14:c1:08:b5:9f:59:1d:7b:d5:c3:23:e7:f0:
fc:8f:a8:e9:3b:6a:e9:7b:5b:99:a8:3c:87:9f:fd:
67:93:0e:dc:db:7a:27:fa:b1:11:87:2d:33:00:30:
10:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:5E:27:73:AF:03:F6:A2:07:81:FF:96:AA:0A:87:C3:F8:47:66:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d38415fe-d2ba-3cb9-9e5f-d019839c548c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.199.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:84:84:5d:2d:51:92:1e:e4:47:a8:ce:49:47:d7:6d:ae:27:
b2:63:aa:dc:16:08:73:c3:f5:32:82:94:e9:1f:74:c4:53:66:
e9:ba:7a:88:ba:b6:0c:c5:e3:48:70:a6:e9:25:ba:4e:1b:82:
8c:aa:ed:53:45:7b:93:c3:ec:aa:00:19:d0:6c:a5:81:f5:99:
9b:e7:54:7a:23:46:79:ca:ec:78:09:6f:6e:0a:eb:1d:fe:1f:
a5:b1:3f:b4:8f:b0:2c:00:0c:b9:3a:c4:c0:33:fc:75:11:36:
fd:d9:77:24:c5:cd:ed:66:b8:e4:61:96:0a:63:d8:ec:a1:90:
27:b1:e3:26:d2:26:eb:51:32:3e:f0:9c:6c:92:e2:45:51:61:
cb:92:9d:ea:cd:8d:2a:06:ff:78:58:f3:6e:8c:eb:df:aa:1c:
a8:57:08:09:ff:79:6d:07:cd:a6:34:fc:72:3d:64:4b:a7:9a:
86:f7:da:5e:c2:25:e1:81:58:18:51:cd:a3:21:64:76:e7:b5:
e8:bc:e6:3e:1a:6f:2f:2b:6d:fa:59:01:52:e1:01:5c:95:d3:
5e:9c:e0:a9:5a:3d:30:d1:1a:c2:6f:7a:99:b9:0c:9c:bd:84:
16:0a:20:d6:1d:e3:ba:77:4b:01:64:cf:12:1e:78:e5:8f:37:
85:7f:70:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:46:25 2025 by rpki-client