Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/e7a0037c-7c1d-35ec-a9cd-6935014b9093.roa
File: e7a0037c-7c1d-35ec-a9cd-6935014b9093.roa (raw, json)
Hash identifier: cozevT4SFqjzTX9X2FN5ZNx30lRPqUsE1Fez4WLY0ZI=
Subject key identifier: A2:C8:F9:86:5A:EA:17:12:80:69:1B:AC:32:B0:0C:B5:98:E0:F7:AE
Certificate issuer: /CN=6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2
Certificate serial: 010D0C9F432858496A19992DD6A2542A90EF4180
Authority key identifier: 70:1F:B5:BF:D0:BF:AB:6B:B2:C4:F7:D8:37:1E:EC:A3:59:C1:6E:F7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/e7a0037c-7c1d-35ec-a9cd-6935014b9093.roa
Signing time: Fri 04 Apr 2025 13:00:59 +0000
ROA not before: Fri 04 Apr 2025 13:00:59 +0000
ROA not after: Thu 03 Jul 2025 13:00:59 +0000
asID: 8030
IP address blocks: 161.151.112.0/21 maxlen: 24
161.151.208.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 13 Apr 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6a:19:99:2d:d6:a2:54:2a:90:ef:41:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2
Validity
Not Before: Apr 4 13:00:59 2025 GMT
Not After : Jul 3 13:00:59 2025 GMT
Subject: CN=8a22e35e-efae-46b5-948b-68493526d3aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:84:23:4e:32:85:af:2b:b9:17:9f:5c:38:25:
52:46:c0:ec:f7:c2:de:e1:29:c1:27:b8:66:46:db:
79:2a:32:8e:2e:b1:4b:c4:79:14:97:b8:a5:39:99:
ff:4b:a9:21:b2:dc:be:4e:09:72:1e:ee:bf:6c:87:
4c:40:f3:b1:5f:f5:ee:8f:4d:3d:b9:85:c8:4c:a2:
12:7b:89:ce:1f:1d:9d:22:84:44:7d:44:3f:e1:35:
55:fe:9d:1a:d0:48:af:be:b7:b4:63:0e:7a:78:a3:
30:38:fa:0f:39:ef:5e:54:ae:d9:16:c7:56:a8:32:
e9:7d:44:f6:33:1f:87:15:e2:1d:83:e1:da:7a:42:
68:3b:f4:e0:fd:0d:99:7d:06:73:e2:49:fc:22:fb:
2c:0e:3c:01:53:b6:dc:f2:b2:00:5f:ff:50:8e:1d:
8b:48:5c:d1:08:4f:a9:e0:49:dd:ba:da:1f:96:26:
ba:e9:51:64:02:4d:83:f0:85:21:81:70:60:9d:71:
7c:7d:cf:62:f4:ca:50:45:be:dd:b1:b5:02:41:7b:
cf:d6:fc:06:73:4f:0f:ea:73:93:3d:27:8d:90:e3:
9b:64:8d:ec:27:4c:36:d7:ad:6b:0a:d3:99:d9:18:
4a:a7:10:a2:20:1d:25:5d:7e:c7:b7:a4:f2:59:c5:
4e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C8:F9:86:5A:EA:17:12:80:69:1B:AC:32:B0:0C:B5:98:E0:F7:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/e7a0037c-7c1d-35ec-a9cd-6935014b9093.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.crl
X509v3 Authority Key Identifier:
keyid:70:1F:B5:BF:D0:BF:AB:6B:B2:C4:F7:D8:37:1E:EC:A3:59:C1:6E:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer
sbgp-ipAddrBlock: critical
IPv4:
161.151.112.0/21
161.151.208.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:63:2e:b0:97:d0:ff:cd:6e:54:c1:3e:48:62:a5:40:3a:71:
4d:03:1a:e6:85:eb:66:63:07:00:26:00:93:93:72:15:ae:9b:
4b:74:1e:98:b8:b0:2b:a4:fd:eb:77:1c:f0:f7:bf:b5:a7:cf:
62:44:83:a0:03:d7:c4:f5:36:57:2a:d2:0f:98:69:0d:5a:b0:
12:e8:ea:73:79:7a:8e:6b:61:db:06:f3:4e:68:8c:7f:d8:aa:
15:1a:f9:eb:48:82:2c:79:a9:d4:40:ad:89:4c:8c:f2:a8:14:
41:58:ec:be:a3:a5:06:ce:37:0d:c1:f1:68:04:03:be:0a:5f:
69:05:0c:78:b7:76:c3:0e:e3:be:5f:00:5a:68:3d:d7:5b:da:
c5:c6:85:18:08:43:ad:11:20:f2:ca:73:7d:7c:2e:05:9c:25:
36:7e:39:a1:84:e4:42:4e:fd:64:02:b1:75:23:aa:bc:af:ea:
15:2f:e7:40:99:03:8b:01:4d:a2:da:a9:63:59:26:66:69:bc:
2f:dd:21:55:b3:92:59:13:0c:18:b4:61:f3:16:61:db:e8:a1:
ee:e4:82:3c:83:e9:38:a3:40:aa:1a:b5:71:b9:e0:1c:46:e6:
5f:e2:7a:3b:af:8f:b5:55:5e:58:45:49:36:bd:61:71:b2:70:
f0:cd:20:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:54:09 2025 by rpki-client