Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/3f82cdde-c2b4-38d3-a824-4741830db185.roa
File: 3f82cdde-c2b4-38d3-a824-4741830db185.roa (raw, json)
Hash identifier: kIdJRFBe66xntLVFNrwaPdPa7B3ocgRc6T/trA34S4Q=
Subject key identifier: 00:3C:09:37:1F:80:FB:A3:CF:7A:3D:99:C1:0D:6D:C7:C4:67:8D:54
Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial: 010D0C9F432858490E16C6B4816C55FA8F956700
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/3f82cdde-c2b4-38d3-a824-4741830db185.roa
Signing time: Sun 02 Mar 2025 14:00:52 +0000
ROA not before: Sun 02 Mar 2025 14:00:52 +0000
ROA not after: Sat 31 May 2025 13:00:52 +0000
asID: 271
IP address blocks: 207.23.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Apr 2025 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0e:16:c6:b4:81:6c:55:fa:8f:95:67:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Validity
Not Before: Mar 2 14:00:52 2025 GMT
Not After : May 31 13:00:52 2025 GMT
Subject: CN=d7568538-6b53-4ea7-b37b-cdabb304365a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f1:f6:43:af:58:9e:73:31:e9:34:63:77:81:
d3:70:ff:07:db:79:62:7f:10:10:e5:24:d4:9c:e1:
43:02:4b:f2:3c:16:8c:4a:bc:2f:77:ad:52:a1:6f:
84:49:81:44:d4:23:b2:9a:41:67:8f:34:fd:6a:cb:
e1:2b:9b:d9:db:65:3e:97:d5:c7:f4:69:8b:9c:5b:
d0:00:c7:83:27:41:3d:40:ac:31:c6:27:1a:92:dc:
cc:77:dc:13:14:a7:c4:cc:0d:ab:b3:49:ef:4d:c1:
04:90:5a:0e:e2:36:62:3a:b5:8c:d4:4b:8c:a0:ef:
98:a1:58:fc:51:8f:e1:9b:42:4a:8b:ef:66:78:0d:
27:2a:b5:1e:20:ec:56:91:54:8c:29:90:fa:94:9f:
a9:1b:dc:00:f6:9c:5a:c1:95:10:23:75:a0:e8:8a:
30:89:24:6d:4e:24:0d:73:15:7a:4c:2c:e4:2b:a2:
7d:83:b7:a4:f5:b1:bb:1d:2a:91:74:2f:ee:80:ac:
a3:5d:e7:5e:42:4c:57:4a:6c:2d:ee:94:cb:dc:5d:
26:51:0f:81:f3:8d:f0:13:ec:dd:7c:17:88:a4:02:
b4:ec:09:a4:da:84:22:0c:f8:68:76:1c:79:50:e7:
b8:51:b4:b0:b5:89:17:05:12:2f:8c:50:4a:eb:2b:
c2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:3C:09:37:1F:80:FB:A3:CF:7A:3D:99:C1:0D:6D:C7:C4:67:8D:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/3f82cdde-c2b4-38d3-a824-4741830db185.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
X509v3 Authority Key Identifier:
keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
sbgp-ipAddrBlock: critical
IPv4:
207.23.241.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:35:b4:68:55:fa:d7:86:d6:da:fb:a1:cb:f9:80:78:0c:e5:
e0:09:ec:74:7c:a2:6c:e5:70:c7:f0:b8:93:1b:75:41:4a:37:
90:98:97:22:fe:41:20:00:70:0d:90:1a:6f:20:1a:cd:d7:44:
0e:d0:c7:a9:0d:7f:b2:fa:57:51:bc:1c:98:6d:df:81:86:06:
0a:de:44:81:0b:2f:aa:47:92:83:3c:02:67:8c:50:11:f9:e8:
67:20:86:8e:0c:fb:a7:97:24:0d:7b:90:ff:35:fa:83:0e:70:
81:34:67:c1:95:17:62:b3:36:3b:cc:4a:94:be:4b:5d:a3:46:
5a:cb:96:98:aa:0f:b1:a5:fa:33:46:a5:a3:4c:bb:d2:d4:6c:
58:99:c0:54:1d:9d:f3:66:62:47:6e:db:82:87:fb:71:99:c2:
6a:99:95:38:d9:01:b4:94:30:46:01:64:0f:63:aa:84:23:4e:
e7:de:db:40:21:6b:20:0b:85:c4:be:21:88:b5:98:9a:aa:e3:
5a:60:ed:b3:01:9b:a3:fa:fa:f7:a9:9c:3b:e7:ea:22:1b:c3:
11:46:26:8a:e1:3c:54:b7:54:44:bf:d3:0b:53:d9:f2:f8:3c:
69:c5:d5:b0:b0:41:46:7f:cd:a5:7c:a8:ba:94:6e:71:15:ef:
9d:3c:8f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:53:55 2025 by rpki-client