Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/3ca3c550-517f-3ec2-8f5c-7462c111b151.roa
File: 3ca3c550-517f-3ec2-8f5c-7462c111b151.roa (raw, json)
Hash identifier: 2D7qkH/O8TGzkUJxiIO63wyhiwmFkg7+ORVu8hRto9w=
Subject key identifier: 6A:D7:EF:2A:4B:85:AF:8D:15:E7:9C:28:1B:F6:BC:CD:8C:15:F7:F6
Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
Certificate serial: 010D0C9F43285848F4F690D844A3FF83DC74B500
Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/3ca3c550-517f-3ec2-8f5c-7462c111b151.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 1280
IP address blocks: 149.20.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f6:90:d8:44:a3:ff:83:dc:74:b5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=e8f7c26a-019f-40cb-b9ae-181516686f6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:35:02:e6:70:8b:4b:c4:50:29:07:48:d8:61:
87:41:c5:e1:83:b2:8c:06:01:db:a6:da:af:cf:8d:
da:3b:37:28:49:c1:eb:01:eb:f3:03:e2:e5:73:03:
97:8e:57:4b:25:14:e4:f9:99:9e:4d:5b:cc:e1:bf:
e7:5a:fe:6a:27:11:29:de:42:62:7d:10:ca:4e:77:
17:e7:87:9a:84:8a:d5:8c:8b:9b:89:f7:b9:08:6b:
bf:14:07:7d:26:8d:5b:17:dc:f2:81:58:c0:88:df:
bc:fa:9c:66:20:a4:bf:ee:0c:8a:5b:7e:53:1c:c8:
fc:2f:39:79:95:0a:f2:02:27:f5:ab:38:ff:ff:d9:
80:ee:e5:54:20:ce:d1:e7:af:54:46:96:49:d5:c9:
3e:68:2d:27:c5:fb:7f:5c:c4:73:91:f0:e6:b7:9f:
b6:1e:c3:e5:e2:fd:c2:33:83:5d:f8:e8:28:3a:35:
b2:f0:29:9f:e4:9d:24:68:ec:2e:4a:78:d2:75:58:
a3:59:37:b3:15:62:b0:12:6a:4e:8e:52:57:42:8d:
3a:15:17:50:ac:55:84:95:f5:95:85:a5:1a:a0:e4:
cf:ce:ca:fa:41:cd:b7:ab:e5:80:43:34:80:05:2e:
23:6a:64:d0:71:a2:d5:82:bd:e2:2d:8e:74:de:5e:
cb:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D7:EF:2A:4B:85:AF:8D:15:E7:9C:28:1B:F6:BC:CD:8C:15:F7:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/3ca3c550-517f-3ec2-8f5c-7462c111b151.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl
X509v3 Authority Key Identifier:
keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
sbgp-ipAddrBlock: critical
IPv4:
149.20.11.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:46:5c:0a:57:e6:9c:8f:dc:b8:65:ee:93:bd:02:3c:b4:43:
bc:a9:94:62:5c:34:7e:3f:77:46:73:91:ec:a7:37:49:df:90:
e2:e2:0a:d9:f4:88:dc:4e:37:b5:af:f0:15:c8:49:46:e4:67:
22:99:64:d6:a5:76:d8:8a:a9:5c:0c:27:2d:f8:ff:56:52:16:
95:c3:4f:53:99:8c:08:41:27:6e:14:59:0a:bb:09:e2:30:e1:
f5:23:eb:5c:06:19:15:b6:42:3d:ea:3b:97:74:fe:84:c4:86:
34:22:69:01:f0:09:4a:95:bc:e5:34:73:e2:26:a2:4f:ec:2f:
a4:36:87:8e:71:56:99:45:da:99:41:58:88:9a:ff:01:78:68:
32:a9:28:5f:8b:24:c6:f2:70:3e:29:5f:76:de:eb:60:76:9c:
19:3a:11:2e:a1:61:29:df:d2:dc:09:14:c2:59:25:08:17:97:
17:40:89:0a:50:0b:3a:ba:a4:5a:62:fb:ff:c8:09:58:fe:37:
f9:19:35:d1:bd:82:30:e5:1c:eb:0a:1d:34:65:b2:d0:ae:47:
0a:5d:89:fc:ad:38:a8:8b:81:bb:1f:22:5f:cc:56:c6:de:d0:
7b:98:05:8e:92:74:9b:c5:78:96:63:07:7e:89:f7:39:af:e4:
07:3e:93:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 08:27:32 2025 by rpki-client