Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f/f0c12dd2-83e6-3b1e-9ff5-b3b103077075.roa
File: f0c12dd2-83e6-3b1e-9ff5-b3b103077075.roa (raw, json)
Hash identifier: 2jM7ZFYUFAwNtJxzAKSZMj708OSUsTer4BNJV4RgRKE=
Subject key identifier: 90:27:09:7F:A1:0B:31:70:A2:1F:04:1D:D8:FD:74:01:36:A0:45:B1
Certificate issuer: /CN=8b77a7d1-99e1-41fd-a1d7-901b6db5d45f
Certificate serial: 010D0C9F43285848F65BD31BD2E8BD880AB9D280
Authority key identifier: F4:AB:8E:0B:AE:72:8E:39:E6:31:A4:DE:75:CD:AD:E2:2D:95:33:57
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f/f0c12dd2-83e6-3b1e-9ff5-b3b103077075.roa
Signing time: Sat 22 Feb 2025 02:00:38 +0000
ROA not before: Sat 22 Feb 2025 02:00:38 +0000
ROA not after: Fri 23 May 2025 01:00:38 +0000
asID: 399218
IP address blocks: 172.81.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 13 Apr 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f6:5b:d3:1b:d2:e8:bd:88:0a:b9:d2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b77a7d1-99e1-41fd-a1d7-901b6db5d45f
Validity
Not Before: Feb 22 02:00:38 2025 GMT
Not After : May 23 01:00:38 2025 GMT
Subject: CN=e29f5f1b-e3e7-47a8-93ba-50b12e92d7d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0c:0f:fe:2b:64:94:68:51:1f:7d:07:c3:f0:
61:2e:8e:32:47:c9:e5:bf:f7:03:40:a6:3a:dd:7f:
74:ac:2d:3a:d3:19:92:65:06:82:19:dd:0f:23:30:
46:23:09:82:f3:6c:71:04:87:58:b3:89:a7:71:08:
e0:41:cf:6c:12:22:d1:47:73:4c:e1:5b:56:03:5d:
f6:fc:a1:05:cc:a3:ed:af:85:8a:a4:46:e7:0a:a1:
e4:c5:9e:62:dc:bf:2c:66:a1:24:fe:20:1d:db:fe:
4f:cc:a0:8c:22:2a:0e:d9:0b:ee:23:55:e3:40:15:
b1:fd:3e:48:29:a7:c6:da:d0:75:53:12:1e:08:1e:
42:1b:45:68:e1:71:ff:62:77:5d:37:55:49:9f:e2:
7a:03:9d:3a:e9:75:0e:14:e5:6e:73:e0:98:16:a4:
e9:73:72:38:55:12:9f:a9:4e:c0:4d:56:90:92:1b:
a3:76:92:3b:d3:c6:02:20:6b:f9:6c:d1:d2:aa:3d:
8b:a0:aa:dc:e6:e0:a3:1a:38:0c:1e:39:81:93:bc:
ff:bf:db:80:0c:0c:87:04:dc:32:be:c0:d6:65:f4:
f1:ca:aa:4b:c8:42:26:8a:17:51:a6:7f:8e:16:51:
da:4d:14:d9:b5:c8:4b:81:a3:91:93:ea:73:20:b8:
97:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:27:09:7F:A1:0B:31:70:A2:1F:04:1D:D8:FD:74:01:36:A0:45:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f/f0c12dd2-83e6-3b1e-9ff5-b3b103077075.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f.crl
X509v3 Authority Key Identifier:
keyid:F4:AB:8E:0B:AE:72:8E:39:E6:31:A4:DE:75:CD:AD:E2:2D:95:33:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f.cer
sbgp-ipAddrBlock: critical
IPv4:
172.81.36.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:65:e6:22:c9:62:5a:90:e0:5d:16:b1:34:f5:58:0c:a2:55:
71:45:9f:45:ba:52:0c:30:bd:b9:4d:41:17:77:1d:a7:88:bf:
1e:5d:71:49:66:02:eb:56:34:39:fa:9c:2a:ed:84:7a:1e:0b:
46:82:04:30:d9:65:7c:b7:f0:b0:a1:94:50:20:f6:43:e9:e1:
70:58:a9:23:22:ab:58:a4:1d:a9:f8:c5:b1:1d:0d:0a:23:22:
76:cd:26:98:1c:61:da:73:89:a0:a5:b1:d4:90:22:40:cd:de:
a3:b4:a4:f8:f1:75:cb:72:eb:f8:2a:37:75:a3:03:21:50:c6:
b5:93:37:94:a2:c0:d3:23:d4:e6:c1:a2:7a:a5:51:a4:a4:30:
f4:12:61:59:97:12:f0:67:db:21:69:b6:a7:e5:aa:b1:01:24:
2c:88:36:5d:fc:bc:b7:38:ec:dd:16:24:d7:4e:8d:ec:5c:19:
14:80:40:af:70:c2:c1:27:53:eb:35:bc:b5:1f:4f:b9:bd:3d:
b7:bc:18:c0:7d:e4:af:62:91:58:2b:51:8b:b3:f6:e0:4e:64:
50:19:c1:25:58:34:fd:92:a3:d0:88:dc:d6:80:10:6e:3b:60:
62:bb:58:c8:77:4f:d0:2f:6a:72:b4:54:34:e3:5a:e4:aa:d3:
84:7c:9b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:20:36 2025 by rpki-client