Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/86a2fa96-af1c-3520-b8e2-324df289efd3.roa
File: 86a2fa96-af1c-3520-b8e2-324df289efd3.roa (raw, json)
Hash identifier: b3h89ipMZRIROOOwoVL2YoGtDZpOMl7Uwdm+ZSNPF7E=
Subject key identifier: DD:A0:35:06:36:EE:DE:35:F2:A3:9B:36:27:59:A4:77:E1:FE:A7:14
Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial: 010D0C9F432858495C2445830E3EA93C7F83E380
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/86a2fa96-af1c-3520-b8e2-324df289efd3.roa
Signing time: Sun 30 Mar 2025 13:01:02 +0000
ROA not before: Sun 30 Mar 2025 13:01:02 +0000
ROA not after: Sat 28 Jun 2025 13:01:02 +0000
asID: 393249
IP address blocks: 206.12.208.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Apr 2025 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5c:24:45:83:0e:3e:a9:3c:7f:83:e3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Validity
Not Before: Mar 30 13:01:02 2025 GMT
Not After : Jun 28 13:01:02 2025 GMT
Subject: CN=5bda0a99-1920-40ee-9cf7-d1c947c6fbc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:bb:9f:7e:8f:d7:f7:cc:e1:16:e7:c2:b0:a4:
c5:3d:e5:71:35:5a:42:34:b1:e1:08:86:30:83:b4:
68:86:15:14:15:31:bc:36:97:20:89:1f:a5:1b:58:
2b:4b:13:78:37:43:73:a2:45:cf:63:00:52:ba:b8:
31:32:9a:1f:ab:40:17:ee:6e:cc:fd:84:43:33:c3:
d1:29:f7:77:f9:4d:77:97:f1:68:20:8a:72:79:7e:
a0:63:e2:fe:07:0f:bc:be:14:15:50:9d:23:4a:09:
74:85:3f:af:0b:f9:20:db:31:de:02:91:90:8a:f6:
01:1f:ad:8a:cd:d4:2a:dd:73:55:09:5d:3c:c5:e9:
44:03:2b:bd:e1:da:27:76:a5:cf:6e:34:b2:d8:38:
d9:92:fb:d1:b3:0a:57:89:e5:56:c2:af:ce:2c:3c:
ff:bb:a2:8f:0b:73:4a:87:ce:85:09:88:1c:57:60:
b4:a8:a3:d0:a4:76:bf:cc:19:82:dd:4f:af:8b:af:
4f:f4:35:1a:61:f0:1c:39:14:c2:3e:b9:e9:b4:1a:
e7:0a:be:7f:e6:75:a2:30:1b:f1:30:4b:f3:81:1a:
ae:96:01:41:81:23:17:c1:92:8e:3d:27:a5:c1:37:
a8:98:e1:da:0c:cc:cf:2b:19:71:d3:32:ca:83:0d:
f6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A0:35:06:36:EE:DE:35:F2:A3:9B:36:27:59:A4:77:E1:FE:A7:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/86a2fa96-af1c-3520-b8e2-324df289efd3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
X509v3 Authority Key Identifier:
keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
sbgp-ipAddrBlock: critical
IPv4:
206.12.208.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:7b:af:d1:a0:5b:2d:76:6a:d3:af:a9:13:2c:4f:d1:8c:c5:
41:51:8c:21:5e:5e:1d:a8:fd:33:c0:ce:41:9d:08:48:8f:2e:
1a:dc:37:11:47:06:8e:ca:70:15:5e:67:47:62:ed:99:f8:c6:
1f:84:0d:29:3c:23:d9:96:0a:eb:57:58:06:af:e9:35:32:fc:
b8:be:b3:1a:24:8b:16:7c:4e:b6:8f:aa:3c:50:af:70:61:09:
87:27:be:91:ce:b9:39:e4:a4:dc:9d:aa:52:44:9e:54:bd:fd:
d8:be:78:bb:dd:ab:95:b5:05:69:fd:d2:52:bf:a4:af:29:e3:
6b:eb:d9:22:2b:3c:f6:33:94:32:1a:a6:9f:2a:ab:5c:2f:d6:
e0:c7:a0:0f:92:d7:45:d0:7f:56:ac:92:a3:a3:5a:88:65:44:
0c:50:99:d1:ce:fd:41:8e:d0:83:f7:8a:6f:cf:e1:82:a9:3d:
45:84:fe:c7:ae:b5:c1:42:15:a1:b9:83:92:75:f8:80:1b:f5:
1e:92:f8:25:80:96:fc:5e:d9:79:5b:8a:20:e2:6a:b4:ee:f7:
0b:80:2e:32:e7:fb:bd:6e:84:ac:0e:80:a8:f6:0c:d1:fd:ba:
b7:1e:37:28:4d:32:d4:73:d7:7d:7e:83:5c:7b:65:33:8b:7f:
5b:c9:0e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:52:35 2025 by rpki-client