Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7/3e06c13a-87c4-36d1-89be-3cf5da5c5024.roa
File: 3e06c13a-87c4-36d1-89be-3cf5da5c5024.roa (raw, json)
Hash identifier: 2kdv1C8KF0LrEiPnnHVzIAZxZ+E2AelrXZIlkh9w9Ao=
Subject key identifier: DE:07:76:7F:B5:AF:0F:6E:6E:E7:E8:5F:7F:A8:7E:1C:A8:D8:A9:15
Certificate issuer: /CN=7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7
Certificate serial: 010D0C9F43285849287E60138F7DE5EF41F82580
Authority key identifier: 77:DC:D2:23:7A:87:58:BC:36:EC:B0:C2:E2:C5:FE:82:8B:CE:9B:FA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7/3e06c13a-87c4-36d1-89be-3cf5da5c5024.roa
Signing time: Wed 12 Mar 2025 01:00:39 +0000
ROA not before: Wed 12 Mar 2025 01:00:39 +0000
ROA not after: Tue 10 Jun 2025 01:00:39 +0000
asID: 3561
IP address blocks: 204.239.220.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:28:7e:60:13:8f:7d:e5:ef:41:f8:25:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7
Validity
Not Before: Mar 12 01:00:39 2025 GMT
Not After : Jun 10 01:00:39 2025 GMT
Subject: CN=9822e83d-ffef-487c-8b99-f261024cd4b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5a:37:46:f1:19:1e:78:6e:f7:65:57:4e:69:
bc:77:01:d2:29:7c:c7:f1:58:9e:6a:db:1d:91:22:
ab:f3:69:18:d2:8e:a4:b3:c8:ac:0d:cf:77:55:56:
25:7a:26:86:48:c0:56:df:5b:6c:5f:0d:ee:22:d1:
d3:8c:61:70:13:99:94:9d:2f:52:46:71:5c:94:2a:
60:1f:22:34:c8:4e:d4:bc:e9:b2:4d:f7:ba:81:e3:
d6:da:c2:ae:d3:fe:09:9a:2f:52:a0:3e:b0:e4:a9:
d3:f2:d0:94:1f:c7:de:71:a8:ee:c7:c2:9d:a1:7e:
1f:8e:df:15:0b:15:ea:97:65:17:c7:7d:e0:29:14:
e3:0b:bf:c3:b1:5c:43:95:f8:89:60:1e:b4:09:05:
c5:04:5a:f1:ce:13:c0:ca:a9:bc:e0:58:cb:16:ef:
9d:19:9d:75:3a:c9:d0:94:a3:19:0b:81:97:0c:be:
25:bb:25:9c:3d:1b:df:db:df:12:4a:6a:b4:e3:59:
2a:43:84:3e:31:77:a4:3a:12:bc:60:76:7c:c1:f7:
b0:99:5a:93:01:18:d3:f1:0e:e0:06:42:cd:b3:52:
62:66:e9:9a:8e:07:91:df:7a:70:82:58:d8:29:07:
70:23:bc:4c:97:0f:4a:5e:79:9d:b8:51:7a:11:c9:
02:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:07:76:7F:B5:AF:0F:6E:6E:E7:E8:5F:7F:A8:7E:1C:A8:D8:A9:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7/3e06c13a-87c4-36d1-89be-3cf5da5c5024.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7.crl
X509v3 Authority Key Identifier:
keyid:77:DC:D2:23:7A:87:58:BC:36:EC:B0:C2:E2:C5:FE:82:8B:CE:9B:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7.cer
sbgp-ipAddrBlock: critical
IPv4:
204.239.220.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:1d:8f:41:6f:e7:34:2b:4d:56:9f:12:f2:42:7f:c2:e1:c3:
ce:01:ea:39:d3:2c:0b:b2:a4:d6:52:32:b1:db:13:56:b5:04:
a9:c8:b4:95:37:e4:9e:16:a6:09:9c:b2:ae:48:01:14:92:d3:
51:ff:e0:d7:d5:be:89:d9:cb:f6:4a:62:8b:39:40:38:18:12:
c0:5b:51:15:87:3e:37:da:16:53:3e:a6:a9:6b:e6:98:4b:4a:
31:db:ab:78:48:a7:b0:f5:bf:e5:d0:90:06:1d:7a:68:c2:b1:
51:f8:9a:d3:e1:31:84:b7:21:65:36:78:15:ed:89:8f:b9:e8:
14:34:d7:53:fa:ab:64:63:a9:73:e0:72:0e:bc:6c:f3:69:27:
f0:fe:2a:5d:a0:ad:ca:3d:03:7f:3b:73:23:2e:eb:08:4b:f2:
f4:5b:3f:1e:63:88:ec:0b:85:3a:0c:41:48:b8:fb:c2:51:79:
53:f3:9d:cd:bc:bb:a2:3d:6a:fe:0b:f8:4f:ee:63:a0:e6:ee:
15:9f:38:07:09:61:a8:97:e4:15:e0:a0:88:3e:65:d3:ae:25:
bb:e5:a6:1c:96:fd:d0:7d:d5:e5:13:67:67:74:52:42:6e:42:
27:f9:6e:5a:5e:a5:6a:e9:be:fd:11:f7:7a:10:76:cf:db:da:
ab:a4:6d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 11:33:16 2025 by rpki-client