Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5acc3cd0-5cf5-38d6-b086-a0d56a4b27a8.roa
File: 5acc3cd0-5cf5-38d6-b086-a0d56a4b27a8.roa (raw, json)
Hash identifier: M9Fkiflbk5qi7rC0LnOlprtpkKyWBx1Lzygpi/eztqQ=
Subject key identifier: D2:E5:49:94:4C:B0:07:75:FD:75:1B:DB:21:A2:5C:5A:28:AA:38:64
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F43285848E2D11F15A3A8D602B6636D80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5acc3cd0-5cf5-38d6-b086-a0d56a4b27a8.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 21859
IP address blocks: 198.102.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 16 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:1f:15:a3:a8:d6:02:b6:63:6d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=8c343ec0-3f75-4030-b24e-82e22baea607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:91:12:03:2d:3b:4b:5f:b2:0c:7c:93:27:10:
5f:7a:f1:92:96:c9:71:46:93:65:4f:a1:2e:44:f2:
72:31:31:30:cc:ef:0e:cc:38:8d:09:89:57:2d:d3:
eb:ac:18:d2:fb:7a:6d:c0:80:a7:92:f2:27:32:cd:
52:63:db:8d:7a:fa:59:ba:2f:db:99:97:6d:78:14:
ff:f8:35:00:bb:a8:4d:69:5e:e1:e3:38:0e:64:fd:
45:b3:21:4e:55:8d:8f:d4:35:05:c7:af:76:3f:2e:
49:92:09:a2:9f:a4:61:49:9d:54:1f:6d:da:86:ba:
11:45:9f:68:7c:f2:dd:48:1a:ef:39:24:4b:aa:c4:
48:74:27:72:ea:e4:97:8c:17:29:3d:40:2b:a2:6c:
69:79:8d:f0:27:ce:6c:cd:e8:08:d3:3e:85:40:f8:
4d:27:63:c8:fa:b1:8b:6d:5e:7a:4a:3a:72:a6:97:
9d:7d:2f:35:66:e2:d3:c4:89:6d:80:88:7d:7f:f1:
87:dd:12:6e:e7:86:10:5e:cd:29:6f:15:83:b7:32:
3a:1c:a1:70:39:26:3c:8a:69:f7:c0:02:a5:fa:1e:
9b:d0:4e:69:3b:9b:50:18:39:5c:fa:b6:d7:34:c8:
c7:b9:8a:67:f7:22:0f:2d:45:7b:66:39:77:bb:b1:
8f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E5:49:94:4C:B0:07:75:FD:75:1B:DB:21:A2:5C:5A:28:AA:38:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5acc3cd0-5cf5-38d6-b086-a0d56a4b27a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
198.102.11.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d7:83:4b:ca:27:90:9e:dc:82:9b:5c:18:0c:c4:76:01:91:ff:
ea:45:eb:52:ac:f2:5f:74:ca:1d:b9:f3:c2:3b:31:0a:8c:23:
0c:dd:d7:ea:fb:c3:e7:ca:a5:1a:93:75:6f:c4:dd:d1:c0:0a:
80:c2:b6:f8:41:66:15:06:b7:0f:8d:c2:11:78:0a:ce:8e:22:
ec:4d:f9:e1:32:4e:f6:05:7a:7c:ba:d3:fc:0a:1b:e4:d2:5b:
37:32:f6:b8:ef:eb:cd:52:cb:e7:17:77:b9:b9:2f:37:4e:26:
7c:ca:46:3d:a9:7a:10:d4:94:44:7e:86:a6:a9:70:60:29:00:
85:12:02:f1:9b:4f:d7:a4:e9:0a:89:bc:6c:fb:ef:2d:3a:a9:
1d:6e:42:e4:99:96:26:25:7d:c6:80:60:eb:4d:8b:80:db:c6:
fc:d0:b8:d7:f5:a3:c3:86:95:5a:f8:16:af:be:94:cd:f5:ef:
b1:a7:3b:91:e2:0e:b8:71:20:09:c5:db:28:6f:0e:ee:c2:6d:
0b:bd:d2:b9:2f:7d:47:38:ad:6b:6d:f1:c3:75:af:fb:a0:9c:
89:07:76:16:64:7c:78:7b:7d:08:69:73:59:36:f6:0f:fd:1d:
20:52:8b:7e:27:ce:c8:f7:b2:9c:a7:a7:6c:22:09:66:10:ce:
3c:d4:94:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 12:28:35 2025 by rpki-client