Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/c683473a-1972-3ef3-bd9d-67878b86a477.roa
File: c683473a-1972-3ef3-bd9d-67878b86a477.roa (raw, json)
Hash identifier: V2Dz0Q1RY3y7U0zHI4XpEiNSaZGl+fyL4Z4X+PokMMc=
Subject key identifier: C2:09:59:FF:C9:DF:87:8D:87:5B:96:3C:74:A4:C4:29:74:55:D9:E1
Certificate issuer: /CN=39695c91-50ed-402c-b896-6056bbde88df
Certificate serial: 010D0C9F432858496FAF105AEF4AD8A01B38F080
Authority key identifier: FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/c683473a-1972-3ef3-bd9d-67878b86a477.roa
Signing time: Sun 06 Apr 2025 13:01:01 +0000
ROA not before: Sun 06 Apr 2025 13:01:01 +0000
ROA not after: Sat 05 Jul 2025 13:01:01 +0000
asID: 14445
IP address blocks: 199.127.152.0/24 maxlen: 24
199.127.153.0/24 maxlen: 24
199.127.154.0/24 maxlen: 24
199.127.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6f:af:10:5a:ef:4a:d8:a0:1b:38:f0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39695c91-50ed-402c-b896-6056bbde88df
Validity
Not Before: Apr 6 13:01:01 2025 GMT
Not After : Jul 5 13:01:01 2025 GMT
Subject: CN=70e2581d-9a23-47bd-8ff1-61e10243d756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ca:5a:28:f5:79:cd:25:ae:61:8a:5f:1f:64:
cc:09:05:7c:49:2e:8d:03:ac:74:9a:45:56:18:17:
b0:10:1a:1b:76:fc:3c:be:41:11:09:10:bd:1e:1d:
3e:de:b7:39:02:82:dd:46:87:d5:16:d3:f8:4b:44:
fe:5f:ea:17:f4:ce:c1:30:18:f2:03:7d:e8:56:5f:
fb:03:be:71:72:7a:c3:19:6a:f4:57:bb:8c:82:21:
f5:76:bd:64:74:4d:7c:e3:78:8c:8c:d3:25:e4:81:
b1:fe:43:66:37:e0:39:7d:23:67:97:2b:e4:ce:61:
28:8d:af:26:24:ef:e1:0c:a2:b6:e9:19:03:75:f5:
ff:9a:18:8a:02:f4:e7:2a:76:82:b4:4b:f3:14:8e:
f8:d7:c3:4d:14:76:80:91:ed:eb:6c:8e:77:3e:f3:
ba:dc:35:f7:10:f3:e8:c4:6a:81:0e:19:3f:d0:5a:
07:c3:70:89:60:7d:b5:60:4b:9b:1c:8d:87:42:f7:
8e:40:e0:bf:f7:0a:0e:14:72:b1:cd:cc:3e:55:11:
83:0a:3f:a2:17:8d:7e:2c:ce:8a:eb:e8:f8:96:47:
1b:8c:b3:99:7c:c2:08:e9:1b:7c:c0:68:1c:63:a4:
83:1b:20:2b:bb:aa:b4:7b:e8:56:37:ed:d3:a7:d5:
ad:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:09:59:FF:C9:DF:87:8D:87:5B:96:3C:74:A4:C4:29:74:55:D9:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/c683473a-1972-3ef3-bd9d-67878b86a477.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.crl
X509v3 Authority Key Identifier:
keyid:FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer
sbgp-ipAddrBlock: critical
IPv4:
199.127.152.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:60:07:fc:e0:21:b2:83:f3:a2:51:17:7f:f1:88:6d:b5:09:
6a:a4:5f:e0:61:81:28:60:5c:a7:dc:c2:cf:62:2c:04:e4:ab:
4e:f4:10:c4:6f:af:82:85:da:6d:80:e5:88:2c:c7:f9:89:09:
7b:f1:06:5d:6b:b7:28:2a:df:88:48:a4:cd:eb:32:ba:3e:78:
86:5a:5b:64:ae:fb:fe:93:8b:ae:cd:c2:72:3a:c5:20:19:89:
bc:69:94:d7:16:ea:cd:5b:a6:6c:e3:d2:b7:30:24:e1:c9:44:
82:c7:b5:c7:42:a3:92:b7:79:98:54:e7:b7:1f:59:70:93:a8:
d3:8d:4d:b1:d9:f9:3d:60:fb:b4:53:8b:09:cb:18:95:48:6c:
68:ed:0d:94:a6:7e:d0:14:de:4d:cb:14:12:13:5d:fb:e3:e2:
94:cb:61:ab:63:c4:dd:ab:dd:17:63:e8:53:63:07:2b:21:ee:
cb:da:9a:1c:ae:c7:e2:cb:1b:72:b0:c4:aa:02:d0:ed:07:5b:
11:7e:10:a6:17:03:6a:b3:98:95:4f:07:c4:1f:ef:39:9d:6f:
93:90:39:d8:5c:35:bf:25:d6:cd:14:27:e0:9a:31:68:97:a5:
45:2c:4f:0b:cf:46:c0:8c:25:1f:69:9f:03:b0:3e:e0:6b:60:
63:33:c2:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 00:20:27 2025 by rpki-client