Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/40e54394-2360-36f3-a862-6f59c980ca4f.roa
File: 40e54394-2360-36f3-a862-6f59c980ca4f.roa (raw, json)
Hash identifier: gqfM4K5z6zSmhBP+TGF2kk7lKUwfArxi2lUIjLcGKRw=
Subject key identifier: 18:C2:28:CB:2D:70:4F:27:61:3E:BE:43:B4:DF:EB:6C:EA:3E:D5:4F
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F43285848ADC618A1056BF4227FB0F200
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/40e54394-2360-36f3-a862-6f59c980ca4f.roa
Signing time: Mon 27 Jan 2025 02:00:39 +0000
ROA not before: Mon 27 Jan 2025 02:00:39 +0000
ROA not after: Sun 27 Apr 2025 01:00:39 +0000
asID: 202
IP address blocks: 204.104.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ad:c6:18:a1:05:6b:f4:22:7f:b0:f2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Jan 27 02:00:39 2025 GMT
Not After : Apr 27 01:00:39 2025 GMT
Subject: CN=4695a0cd-f58a-47d8-95c2-a917dee8d612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ec:ab:b5:7a:a0:4d:7d:7c:e2:62:64:95:34:
81:d3:ed:fc:d6:db:4e:f0:d4:c1:d5:81:63:07:a1:
69:7b:d5:e4:89:0b:d1:83:f0:2e:3f:a6:25:1d:98:
09:94:71:03:19:2e:bc:e3:ef:18:9d:ef:ab:08:0f:
89:71:bb:66:03:54:b1:c0:3a:ea:7a:94:23:ff:04:
2a:76:e3:62:c4:35:fb:c3:2d:1a:ae:8a:39:f1:2e:
dd:f5:87:da:e2:85:d1:4f:cc:e5:4e:35:46:67:dd:
12:27:e2:fa:b7:47:2a:dc:a3:75:18:e7:6b:bb:4c:
2c:92:1f:3c:d2:5d:61:09:6b:95:32:68:9f:1d:79:
7b:9e:52:a3:36:c4:f8:f9:45:f1:f5:a1:55:cb:17:
01:11:cc:a7:54:41:18:ce:fe:18:d3:ae:86:6d:6d:
ad:65:22:60:0c:59:2b:fb:3a:da:36:dd:a7:13:44:
11:ab:a9:09:70:7a:91:f3:88:67:01:b3:80:74:b5:
d7:07:d1:e7:6b:91:76:19:35:ae:d5:34:5a:aa:a8:
f1:74:74:96:47:b5:c2:7d:29:5c:01:26:dc:36:b8:
a0:e0:48:f2:5d:c4:9d:eb:21:d8:9a:ae:35:99:0a:
d8:ae:e8:0b:a1:f0:3a:da:41:7d:85:09:b9:48:83:
3c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C2:28:CB:2D:70:4F:27:61:3E:BE:43:B4:DF:EB:6C:EA:3E:D5:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/40e54394-2360-36f3-a862-6f59c980ca4f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
204.104.140.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:ba:66:3c:1b:fc:f0:17:89:07:bb:c2:84:e4:20:a3:27:16:
97:ad:e9:4c:ae:98:d0:76:03:31:86:23:bd:ee:cc:64:92:2a:
c3:07:2b:5f:73:1d:44:29:d9:95:60:1e:db:c0:56:73:c6:19:
ef:4e:47:3f:6f:ea:27:a4:20:1d:13:73:33:ae:4a:9e:ad:3a:
10:a8:c8:65:77:b7:6e:d7:11:e2:d6:f1:cf:6e:0d:33:93:7e:
f7:88:90:49:5a:85:eb:44:00:38:52:fb:e7:c4:af:66:fb:a8:
ed:67:99:d2:2d:a3:0c:69:a2:2b:da:76:d7:ff:29:58:a6:20:
74:9f:37:af:7d:4a:64:f5:8a:d1:af:90:0b:c8:5f:a9:df:83:
cb:b3:b9:57:ae:09:80:dc:b9:51:05:f3:00:f0:9d:9f:c8:3f:
1f:3d:b5:55:74:8c:9f:09:92:b7:d8:94:30:86:47:03:05:33:
be:ac:a1:a1:e5:74:a6:9f:61:df:9c:15:1b:49:62:30:f8:61:
8c:65:0b:84:e5:60:e3:48:f0:cb:be:61:e3:ee:f3:7a:3e:30:
34:95:2e:f6:b3:fa:0c:6d:f1:43:69:61:b0:f4:5b:60:1d:80:
96:fa:0d:09:36:88:86:d1:af:34:46:4e:fc:72:8a:bb:0e:dc:
e9:f0:be:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 10:36:46 2025 by rpki-client