Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/40f20705-08e5-30ca-9207-ec92623c45ff.roa
File: 40f20705-08e5-30ca-9207-ec92623c45ff.roa (raw, json)
Hash identifier: 5IlON37YI6J6RbDhGd8Tom5AapXYJbpbYVbj1J0dukA=
Subject key identifier: 8C:7E:7F:24:A3:43:1F:57:62:C5:2B:86:BF:DF:B6:ED:34:6A:13:6F
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F432858491246B1AC6B0ED6FA2F05EDE0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/40f20705-08e5-30ca-9207-ec92623c45ff.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 203
IP address blocks: 130.174.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:b1:ac:6b:0e:d6:fa:2f:05:ed:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=1fcc3976-b162-4cf3-b380-481ed494f8ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:dd:d9:c5:be:06:54:66:9f:a4:e2:fa:f9:b9:
7b:d1:21:a0:37:10:76:9d:01:5a:82:09:a1:5a:5d:
84:58:56:62:8e:4d:92:f8:a9:dc:df:79:58:ed:97:
7b:9d:eb:4a:6d:0d:23:dc:9c:12:5f:76:d5:f7:35:
27:ad:77:7e:b8:43:d5:ec:d9:13:d7:bf:ef:4d:b0:
bc:ef:a2:43:2f:e9:78:75:e0:6e:e7:86:3a:70:a7:
34:c2:e6:03:cb:77:c5:e3:63:e6:6c:47:0e:df:fd:
f3:bd:65:96:5d:e7:d1:90:6a:b3:6c:be:f3:81:a9:
40:37:eb:a4:ec:fc:a8:19:2f:fc:43:5a:ae:26:37:
df:58:a1:ff:e6:6a:2e:47:3f:6a:9e:f5:6d:a2:86:
76:9e:b3:d7:4c:6c:ed:c3:d8:86:d2:5e:c9:fe:96:
49:57:2e:61:86:ac:a4:15:a4:b5:b1:7c:ed:e4:38:
05:51:0e:b2:a0:e3:4e:36:52:87:a7:e4:39:e5:16:
6c:f6:ab:ce:65:e4:61:a8:d9:d1:25:c8:e6:5b:a2:
54:df:1c:cb:a3:5a:5a:89:dd:44:29:f8:df:09:83:
08:90:20:0f:7e:e8:4e:6b:37:5e:1b:1f:fb:c5:d2:
3f:95:e2:eb:84:84:14:21:b7:f1:a5:8d:83:06:c3:
33:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:7E:7F:24:A3:43:1F:57:62:C5:2B:86:BF:DF:B6:ED:34:6A:13:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/40f20705-08e5-30ca-9207-ec92623c45ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
130.174.13.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:e0:40:04:ed:f7:fb:6f:f2:b8:95:d0:32:0a:f5:cb:e9:21:
3b:80:cd:fb:fb:d3:72:a0:33:e6:50:8c:9c:61:38:22:f9:ee:
92:b1:23:46:88:ee:cd:75:6d:ea:b1:08:b4:2c:f6:7c:f8:40:
78:8f:d9:5c:73:ab:49:31:66:ba:95:fe:73:32:ff:0e:8b:0d:
48:1e:47:fb:21:77:2e:27:0c:bd:ae:7b:1d:a6:64:fa:6f:ed:
8b:b8:0b:df:9a:28:b7:59:5d:7f:bd:a7:b4:ab:81:d3:ec:9a:
f7:61:71:5c:10:9f:52:e9:7a:13:cc:8d:92:72:01:9d:18:9b:
2f:6e:77:39:0c:97:e7:da:93:64:34:02:58:e0:f9:bb:6d:d7:
34:b9:db:ba:39:e3:c0:c1:aa:7c:21:e2:20:cb:00:45:6c:ec:
5f:4e:73:91:96:ca:df:53:52:17:2e:8e:00:07:33:04:9c:6f:
a7:94:aa:00:9b:f1:95:9e:3f:10:d7:28:17:90:56:73:0a:f5:
f9:ab:df:9e:2d:da:78:c6:12:57:9d:2a:93:74:32:44:ad:74:
f1:e7:e8:59:42:fb:b7:0f:c4:f8:26:5b:b3:4f:d7:0a:39:5e:
de:a4:28:80:00:fc:cb:5e:0d:81:38:b1:0c:5b:17:3c:a6:ee:
6e:95:15:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 12:06:01 2025 by rpki-client