Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/61771297-1cb3-368b-a4b6-f8cdcd0c63f7.roa
File: 61771297-1cb3-368b-a4b6-f8cdcd0c63f7.roa (raw, json)
Hash identifier: O6ExFKd/SZ/8SBULEYtWts8KBNKQsDU2ozDS21A0aRo=
Subject key identifier: 52:54:A6:07:BE:2E:91:35:EA:76:87:70:C1:95:CF:64:AC:5E:E5:06
Certificate issuer: /CN=c85989e4-dae0-4a06-83a1-0ce7104427a0
Certificate serial: 010D0C9F43285848EF615C081022E1B400E81380
Authority key identifier: 99:31:C5:3E:0F:0D:94:B3:98:40:F4:0F:77:5C:19:4E:15:BE:F2:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/61771297-1cb3-368b-a4b6-f8cdcd0c63f7.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 30148
IP address blocks: 192.124.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:5c:08:10:22:e1:b4:00:e8:13:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c85989e4-dae0-4a06-83a1-0ce7104427a0
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=98fe70d2-74d7-4653-945c-b142fc10598d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:cb:d2:4b:d2:0f:3d:56:c7:10:c5:62:2b:7b:
17:49:fb:1b:62:e0:87:ec:16:0f:1f:3e:27:1f:ab:
4d:98:c8:67:34:b0:6e:2e:0d:16:ea:18:ba:8e:46:
91:f4:ef:6f:7b:ff:70:7a:80:10:4f:94:08:da:33:
ff:22:1e:de:1a:68:fc:f5:62:98:ff:bf:81:43:df:
d2:3d:16:4b:a8:76:79:0a:a8:f5:53:69:df:3a:35:
d2:46:b3:8a:91:54:e6:7b:6e:37:be:18:f7:1c:c2:
2c:26:97:c3:1d:94:51:c4:eb:db:5c:6e:5d:fc:56:
0a:19:f8:e8:e6:11:23:5b:ba:5a:92:6f:42:6f:86:
d8:f2:af:5e:7e:d2:f5:7b:d0:1d:5e:c2:b9:16:e0:
56:c2:a6:30:93:02:3e:7a:cf:82:e3:07:74:72:b6:
05:7c:29:27:06:f2:99:6a:84:78:0a:85:16:59:41:
b7:ab:b4:25:f4:8f:d6:67:da:68:5e:da:29:dc:e7:
8d:87:97:2a:42:37:48:18:c8:bd:aa:6a:5e:1f:ab:
1e:fc:a8:04:f8:18:95:60:4e:0b:26:5f:29:78:e9:
54:7f:e8:c4:e7:d3:7b:36:16:f1:86:da:d7:69:79:
51:c7:77:5f:fd:4e:7e:ea:d5:0f:7b:be:30:2c:e1:
8c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:54:A6:07:BE:2E:91:35:EA:76:87:70:C1:95:CF:64:AC:5E:E5:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/61771297-1cb3-368b-a4b6-f8cdcd0c63f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.crl
X509v3 Authority Key Identifier:
keyid:99:31:C5:3E:0F:0D:94:B3:98:40:F4:0F:77:5C:19:4E:15:BE:F2:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer
sbgp-ipAddrBlock: critical
IPv4:
192.124.249.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:90:77:c3:d9:1e:29:d4:4b:43:55:1b:97:72:0a:e7:47:5f:
09:ec:8e:be:50:31:6c:66:a4:bd:be:f6:28:8b:eb:74:0a:05:
05:f2:f6:a7:0f:63:da:04:6c:63:7d:3c:94:24:ce:f8:05:f8:
46:63:15:8a:4f:46:65:59:93:f1:52:5b:e7:e0:88:83:2c:8d:
29:f6:a5:4b:5d:3f:ed:31:1b:df:bb:7e:7e:39:08:a0:e4:53:
ad:27:f2:15:49:9d:8b:5d:c7:aa:8b:f4:80:89:c8:de:73:ce:
40:ce:a7:33:0e:b1:40:52:24:e9:31:d0:fc:54:d5:1a:e0:bd:
e6:bb:3e:03:c6:54:56:08:29:7a:89:9a:57:43:21:c7:47:3f:
27:e7:19:56:cc:bc:64:ed:3b:1f:01:f5:43:2a:b7:41:1c:24:
8b:22:83:e5:2e:54:c2:4c:b3:b8:8e:19:86:2e:93:d0:90:b9:
ed:fb:cb:04:c9:8a:54:58:66:e4:fe:f2:da:f0:af:8d:5e:52:
e9:74:03:04:24:e9:da:11:23:47:3f:4f:c3:f7:b8:30:24:fb:
8c:ec:e0:78:d9:43:3c:63:e2:a8:0c:d1:6d:31:34:e7:9d:59:
53:93:aa:0d:68:d1:f6:e9:f7:7b:2b:99:58:ea:2a:56:63:fd:
71:ac:36:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 07:27:03 2025 by rpki-client