Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/0f3aa90f-3e5d-32ca-ada6-81a47a5ffb2b.roa
File: 0f3aa90f-3e5d-32ca-ada6-81a47a5ffb2b.roa (raw, json)
Hash identifier: RqWlrNE04IMWzCClMTEMi9G1PXzX0Hr6VkA86F2jjMo=
Subject key identifier: 11:AB:E7:AA:BF:78:4C:1B:9B:D1:EC:15:58:2F:F8:09:1F:3A:A5:BE
Certificate issuer: /CN=48f8534f-57cd-45ba-bfa4-ce60842463a4
Certificate serial: 010D0C9F432858493597E2951037D68D4AAA16C0
Authority key identifier: E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/0f3aa90f-3e5d-32ca-ada6-81a47a5ffb2b.roa
Signing time: Sun 16 Mar 2025 17:37:42 +0000
ROA not before: Sun 16 Mar 2025 17:37:42 +0000
ROA not after: Sat 14 Jun 2025 17:37:42 +0000
asID: 212477
IP address blocks: 45.59.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 04:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:97:e2:95:10:37:d6:8d:4a:aa:16:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48f8534f-57cd-45ba-bfa4-ce60842463a4
Validity
Not Before: Mar 16 17:37:42 2025 GMT
Not After : Jun 14 17:37:42 2025 GMT
Subject: CN=4be79d19-e133-49c3-bfab-639944c3c823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f3:45:d0:b5:dc:68:3f:6a:56:c7:b1:98:93:
c3:4a:46:6c:f4:0b:7a:c8:d4:2f:3b:49:39:2b:16:
49:65:6c:bc:66:9b:56:7f:8f:a5:b6:c4:c1:91:2e:
1b:95:a2:6b:64:31:89:c7:70:57:4f:c7:6c:3a:5e:
28:11:f5:79:c5:f2:85:37:e2:ca:70:e6:5a:08:bd:
01:c6:a5:e9:0d:5e:24:11:f8:db:ec:9b:d2:23:6c:
d1:62:69:0f:c0:74:10:99:16:b8:2b:64:f2:6f:98:
01:98:a8:12:fc:6f:4f:43:83:df:61:d1:f1:16:04:
f7:93:2f:82:b2:1b:50:37:39:d0:84:2a:13:02:4d:
52:37:b4:a8:d4:4e:ab:e6:23:3c:4d:21:8f:75:88:
a9:8b:c1:88:89:35:ff:3b:61:5f:fd:37:74:81:6c:
e1:ce:a9:0f:ca:5a:fb:2d:83:08:47:fa:e6:07:dc:
c3:e7:fa:f1:29:f0:52:2a:26:bc:e1:da:51:51:e1:
1b:b5:6d:9e:dd:f3:f7:9d:8f:57:da:97:eb:b6:e8:
7b:de:b3:14:64:19:f3:66:19:a3:28:e9:a8:8b:e3:
40:83:c5:4f:63:23:e5:a4:6e:55:5a:95:9c:e4:e7:
ea:ab:be:bd:f4:15:af:7e:ca:67:69:d3:d6:91:bb:
af:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:AB:E7:AA:BF:78:4C:1B:9B:D1:EC:15:58:2F:F8:09:1F:3A:A5:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/0f3aa90f-3e5d-32ca-ada6-81a47a5ffb2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.crl
X509v3 Authority Key Identifier:
keyid:E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer
sbgp-ipAddrBlock: critical
IPv4:
45.59.170.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:f7:24:d1:15:d6:13:44:89:db:a2:cb:21:24:f2:8f:da:ac:
7d:98:9f:da:0c:5c:84:62:8b:b1:b6:ac:84:18:47:06:a6:7b:
34:77:5d:07:4c:fa:bb:d2:0d:31:7b:59:c7:06:ae:3f:72:8b:
e0:4f:b0:84:64:cf:c4:b4:b4:ad:0b:bb:ff:3f:6b:fc:fe:01:
ae:7f:66:b1:05:c2:94:9d:2e:e8:2c:2d:47:f2:6d:b5:89:42:
57:c7:fa:aa:71:41:55:b6:9f:3e:7b:15:99:22:b8:ef:44:ac:
24:93:54:3c:88:8f:eb:96:2f:69:ca:39:b9:34:d4:eb:51:25:
45:d7:ff:6e:8d:e4:7a:8b:5b:c0:bc:44:c9:6f:ad:f3:3a:0a:
c6:a9:5e:5b:8d:77:5d:49:f6:e7:b8:8b:c8:08:75:d9:1e:8b:
7f:42:70:ec:d2:a6:ac:45:bf:6e:f4:eb:d4:08:07:13:59:46:
b5:fd:5a:f6:ce:fc:ce:64:73:9d:18:51:b1:63:b1:f0:6c:ff:
d8:fc:ef:1c:78:a6:20:76:aa:46:5e:1d:32:61:d8:e9:c2:c5:
53:5f:e6:1f:d4:cc:1a:9f:fb:80:c1:ee:13:6d:f0:f2:27:e8:
3e:8c:66:ff:f1:6c:31:c5:35:03:6e:f0:44:1b:11:c1:4f:66:
84:02:98:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 04:06:31 2025 by rpki-client