Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6b4bc13c-b790-3904-b48f-b3e1b08ac9e9.roa
File: 6b4bc13c-b790-3904-b48f-b3e1b08ac9e9.roa (raw, json)
Hash identifier: RzbH0WJt0Tv6sXJT25TQQFSLVFsVTOf6QU3fNMS2qJE=
Subject key identifier: 20:6A:46:C1:39:FF:D2:07:22:14:6E:5B:EC:AD:94:DB:62:73:99:B4
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F43285848AAFB5ED6674D399C5D600500
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6b4bc13c-b790-3904-b48f-b3e1b08ac9e9.roa
Signing time: Sun 26 Jan 2025 02:00:38 +0000
ROA not before: Sun 26 Jan 2025 02:00:38 +0000
ROA not after: Sat 26 Apr 2025 01:00:38 +0000
asID: 203
IP address blocks: 204.104.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:aa:fb:5e:d6:67:4d:39:9c:5d:60:05:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Jan 26 02:00:38 2025 GMT
Not After : Apr 26 01:00:38 2025 GMT
Subject: CN=2ed5e368-8825-423f-8695-ecf031591516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e5:f2:91:61:2f:57:3f:52:78:d2:69:35:3d:
16:3f:62:af:47:0a:df:4f:20:ae:54:c4:96:a3:33:
b7:0d:40:76:c4:5b:61:fc:84:9b:e1:64:91:1c:12:
92:03:fd:30:db:83:28:12:f0:41:7f:6d:f2:1b:6e:
d7:56:43:43:70:a7:e4:34:f8:70:a0:b5:c5:30:64:
7c:38:53:2b:3e:c8:e4:d1:db:c4:c7:59:18:11:80:
77:4c:d8:42:bc:53:6c:a7:77:f4:48:a7:40:44:68:
07:f1:8d:77:bc:9a:31:18:fa:ab:b6:da:4b:39:79:
1e:ce:fe:ef:24:3d:58:3b:f4:46:cc:b5:97:3c:79:
88:1d:20:6a:b7:58:d3:47:c4:ac:3f:f9:fe:41:f2:
82:25:03:e8:17:fc:37:dd:19:4d:26:13:53:57:8f:
91:b8:2b:46:ce:72:88:3f:46:3e:ce:ec:37:83:06:
f7:ca:80:f6:d1:e5:7e:e9:af:2b:24:94:30:d8:2e:
96:53:cb:cc:74:3d:87:96:4b:a7:51:6d:89:51:06:
2a:85:e1:a4:66:53:71:c7:b2:04:94:c5:fe:7a:46:
8d:ed:9a:ec:a6:9c:93:77:d5:ef:16:ed:51:32:38:
e6:ce:af:41:d8:95:84:af:83:3e:ce:e4:93:0f:0f:
3d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:6A:46:C1:39:FF:D2:07:22:14:6E:5B:EC:AD:94:DB:62:73:99:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6b4bc13c-b790-3904-b48f-b3e1b08ac9e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
204.104.12.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:de:ed:8a:ed:02:6c:df:11:92:c0:24:48:20:92:45:96:fb:
8e:a6:da:9d:0a:7e:a4:c0:71:3b:b8:f2:b0:f6:89:d9:16:64:
53:2f:ba:98:01:b5:3e:dd:c6:b8:96:30:64:52:4a:48:65:0a:
4d:42:d8:7b:b2:b7:fd:a3:49:89:57:38:19:4f:92:17:15:6d:
20:84:e9:e2:69:8c:e8:64:cb:32:e0:bf:52:d9:84:b0:df:f8:
19:f9:bd:54:83:4a:86:a6:59:27:73:ef:c1:e3:a6:4e:7b:ed:
5b:64:53:de:7b:92:4b:84:94:ae:b9:74:2d:68:d8:fb:47:91:
3d:de:78:d7:f6:4f:7e:88:ad:95:57:8a:d1:0f:a6:b5:07:2f:
d2:49:95:8f:ae:1d:c4:63:9a:47:74:cc:1a:22:2d:ca:b2:d9:
38:58:b0:a9:05:bc:36:97:51:52:5b:f5:a0:69:a1:ab:d7:ae:
69:4d:1e:07:8a:5a:e7:e9:38:a5:a5:61:01:c0:ec:bf:eb:79:
76:75:98:eb:b4:24:5c:1b:6e:c1:cc:ca:0c:e9:d2:94:6e:6f:
1d:8b:4f:0c:19:f3:54:f8:72:6a:26:01:94:62:49:81:c5:46:
0b:4f:4f:9c:11:42:37:57:88:61:f4:bc:90:26:c7:27:3d:5e:
25:c1:15:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:58:20 2025 by rpki-client