Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/0fa3b079-1e61-346d-abbf-fe26bccd7f78.roa
File: 0fa3b079-1e61-346d-abbf-fe26bccd7f78.roa (raw, json)
Hash identifier: rSv1yBfrGKq0g/dfM+SDiZ3ofgL9IRXMtjTBfL62pJ0=
Subject key identifier: 2D:5A:F1:1B:DD:9D:3E:67:00:1E:8A:D6:C9:59:E4:D9:A9:61:3B:85
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F432858493C092EC60EB5BA08ED081A80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/0fa3b079-1e61-346d-abbf-fe26bccd7f78.roa
Signing time: Wed 19 Mar 2025 01:00:40 +0000
ROA not before: Wed 19 Mar 2025 01:00:40 +0000
ROA not after: Tue 17 Jun 2025 01:00:40 +0000
asID: 13332
IP address blocks: 206.206.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 09 Apr 2025 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3c:09:2e:c6:0e:b5:ba:08:ed:08:1a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: Mar 19 01:00:40 2025 GMT
Not After : Jun 17 01:00:40 2025 GMT
Subject: CN=1b209ee0-c5b8-455c-bbbc-84ce128b074f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:40:b8:4d:d8:17:75:96:15:b3:52:1a:3e:e2:
da:19:16:ce:3a:01:4f:f6:90:7b:4d:8e:dd:b2:49:
92:0d:88:75:12:ca:8a:33:a6:4a:79:fb:cd:2a:e1:
12:72:36:6b:39:42:a0:73:29:d8:da:9b:ba:6b:23:
b8:d8:d2:1a:fd:dd:d0:c6:da:a1:65:2a:58:1e:7b:
39:47:17:33:28:df:bf:49:97:15:8a:de:36:33:51:
4f:8a:a0:51:c9:43:b8:ad:a5:5f:64:84:a8:cf:a3:
0c:22:91:10:a4:7c:49:61:a7:32:f0:fb:22:f0:00:
78:11:03:02:43:b1:cb:49:0b:2a:3a:23:a6:f7:73:
96:f1:2f:fb:6e:05:bd:b8:41:eb:10:36:a9:5f:4c:
a4:b5:e0:61:44:38:ce:a7:b0:4a:ab:be:81:58:3b:
93:46:d7:4e:e4:0e:a2:40:aa:94:02:b3:44:45:8a:
b1:d4:31:10:1f:82:62:12:f8:da:05:f1:13:19:c5:
90:02:dd:78:5a:d1:e2:87:04:b1:41:69:cd:ed:89:
48:a2:5c:e3:60:f2:b2:ba:e7:23:6d:92:75:3f:35:
20:a9:88:c3:35:5e:c5:59:2d:8c:1a:50:4c:49:9d:
82:aa:bd:b6:74:59:57:fa:ea:af:38:c4:e9:01:70:
fb:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:5A:F1:1B:DD:9D:3E:67:00:1E:8A:D6:C9:59:E4:D9:A9:61:3B:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/0fa3b079-1e61-346d-abbf-fe26bccd7f78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
206.206.69.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d3:72:6f:9d:05:c7:c7:19:24:b4:2a:b6:83:d3:e8:a2:2e:27:
dd:fd:04:a0:0e:41:13:dd:f5:34:de:a8:1c:fb:a9:b5:03:42:
d7:7c:74:48:a9:83:33:7c:c7:5d:8a:55:62:0e:1f:f1:b1:0a:
b9:96:f4:d3:76:6f:e1:4a:78:e5:49:29:32:4e:a9:bb:76:d0:
a4:9f:51:92:31:c3:a3:ac:fb:08:ec:12:47:85:5d:70:a5:80:
3c:09:29:80:7d:ea:e6:a3:23:61:79:bd:a9:ea:06:6a:7e:48:
20:34:09:79:95:61:2b:be:26:ab:7a:da:23:5e:cf:03:23:cd:
51:07:6e:e1:02:ed:0c:11:12:8f:dd:c6:7a:37:10:de:36:d2:
5a:db:e2:28:83:f4:2a:d9:1b:53:f3:b2:53:44:1e:e3:fd:08:
2d:2d:eb:0e:e1:ca:e5:59:4a:82:8c:e5:c2:c9:76:db:f9:9f:
1e:71:2c:ca:34:40:a6:1c:c3:bf:68:82:10:ae:15:2c:bd:68:
8e:b9:ca:2d:bf:1a:a9:32:2b:96:15:3b:14:cb:f6:e3:99:8e:
87:34:3f:45:f8:eb:93:fd:97:db:a6:cc:c1:4e:53:50:15:bc:
22:1d:3a:8b:a4:42:04:42:20:09:25:2b:14:76:42:7b:13:e2:
14:78:92:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:33:37 2025 by rpki-client