Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8667f623-ff19-3d77-bafe-bc233bb08a6b.roa
File: 8667f623-ff19-3d77-bafe-bc233bb08a6b.roa (raw, json)
Hash identifier: Cxdgot3CDedhWM4w4S7hqdUrSifnqHrvjDuqqtyRzmI=
Subject key identifier: C5:E7:53:9E:35:4F:A6:02:46:96:C5:36:44:4F:2E:9D:D9:73:C4:34
Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial: 010D0C9F432858495C242A327E33A5086D7BC200
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8667f623-ff19-3d77-bafe-bc233bb08a6b.roa
Signing time: Sun 30 Mar 2025 13:01:02 +0000
ROA not before: Sun 30 Mar 2025 13:01:02 +0000
ROA not after: Sat 28 Jun 2025 13:01:02 +0000
asID: 203724
IP address blocks: 161.69.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5c:24:2a:32:7e:33:a5:08:6d:7b:c2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Validity
Not Before: Mar 30 13:01:02 2025 GMT
Not After : Jun 28 13:01:02 2025 GMT
Subject: CN=b0da5790-ebc0-4017-a7dd-19daa450301f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8b:7e:8f:3e:0c:0f:de:2a:b4:2a:cc:88:86:
96:c4:b6:11:25:85:c5:81:c0:b0:bb:96:19:fe:97:
1c:97:95:7a:b2:4d:19:6c:18:8a:54:75:0b:0e:d2:
1d:93:87:e3:46:96:19:65:d9:1d:af:73:b5:23:6e:
88:4b:b0:4a:f3:6b:fc:84:8e:a0:bf:c0:50:c6:37:
66:cb:a6:c9:e7:32:b9:5b:0e:7b:ea:b0:1d:af:3a:
1c:bb:76:7f:c2:df:0c:a1:a9:00:07:3c:00:50:fc:
b3:e2:41:c8:70:72:a3:2f:7c:a7:98:03:22:c9:09:
01:25:53:7e:d0:8d:de:e1:f7:7f:05:20:e3:cb:0e:
55:c8:b9:be:c9:c4:94:b8:85:8d:b0:c2:3f:e4:66:
3c:34:1f:b3:80:30:67:ca:04:4a:da:86:0c:3f:01:
d3:e5:87:bb:41:f9:d7:c8:47:b1:26:ff:af:88:1f:
22:7e:ba:7c:ed:ce:d5:8a:d2:65:19:19:f9:fa:ae:
a2:13:56:af:de:73:f4:05:a7:39:24:b8:6b:72:59:
36:90:bb:3a:2c:f1:ac:20:06:25:85:73:77:b7:b7:
59:08:bb:72:38:53:cc:36:b3:b0:64:d6:22:ac:65:
1c:dc:65:a2:e0:d5:58:8f:20:f4:e6:c2:f0:05:ef:
8f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E7:53:9E:35:4F:A6:02:46:96:C5:36:44:4F:2E:9D:D9:73:C4:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8667f623-ff19-3d77-bafe-bc233bb08a6b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
X509v3 Authority Key Identifier:
keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
sbgp-ipAddrBlock: critical
IPv4:
161.69.0.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:cb:49:ad:25:58:31:0c:b9:2f:15:c3:a4:5c:13:55:9c:15:
52:09:97:15:d0:5a:1e:28:ff:9e:02:0f:af:67:e1:0a:40:e7:
ed:01:a2:91:d6:1f:cd:f9:53:3d:61:3b:18:05:7b:54:e0:8f:
35:c2:d0:36:a3:12:8f:e7:52:d8:81:a4:02:6b:4e:27:ff:8e:
3b:01:ac:f8:bb:fa:0c:18:4f:16:74:00:43:d7:a5:76:46:6f:
d6:33:97:30:44:e7:99:bf:3d:24:26:0a:6a:01:fd:12:00:5e:
e0:ef:a0:a6:31:b6:25:59:ff:9d:f8:f8:41:47:c6:22:82:cd:
d4:28:94:a0:ca:a7:5d:06:23:24:cf:f2:45:9f:4c:b6:ea:d5:
0a:4d:e1:61:a5:63:12:76:a0:42:67:fc:20:5c:72:d1:e2:ac:
9b:59:c0:72:5e:04:4d:2c:2a:8d:3b:f4:c8:3b:67:ce:17:7b:
de:8f:36:7b:3b:d9:fe:13:2b:b1:3f:67:1f:7a:cf:44:8c:57:
72:ef:5c:59:91:ff:4f:23:36:47:66:02:bd:71:78:ba:d1:a2:
6a:57:70:5f:9d:29:43:fa:2e:19:4c:88:6e:64:6a:c4:55:ab:
72:46:cd:2f:0a:e2:3a:49:47:e5:2f:c5:2c:36:3e:6d:2e:8f:
0d:52:7f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:05:37 2025 by rpki-client