Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/942ec425-2259-3cd4-97f1-f7efbcb4f829.roa
File: 942ec425-2259-3cd4-97f1-f7efbcb4f829.roa (raw, json)
Hash identifier: 9Pmz7XXE2SMu3KceOpnRKruCgqJ+48OSKB9okXukX9o=
Subject key identifier: 6D:85:EE:FC:86:50:0F:3A:15:90:83:1A:C9:50:F9:F7:EB:5E:29:0F
Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial: 010D0C9F432858495C24444A418CA2A1255D2FC0
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/942ec425-2259-3cd4-97f1-f7efbcb4f829.roa
Signing time: Sun 30 Mar 2025 13:01:02 +0000
ROA not before: Sun 30 Mar 2025 13:01:02 +0000
ROA not after: Sat 28 Jun 2025 13:01:02 +0000
asID: 393249
IP address blocks: 128.189.128.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Apr 2025 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5c:24:44:4a:41:8c:a2:a1:25:5d:2f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Validity
Not Before: Mar 30 13:01:02 2025 GMT
Not After : Jun 28 13:01:02 2025 GMT
Subject: CN=8e86c95a-4015-4b42-9d9b-879ecd118318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:02:4c:31:ee:cc:ee:d2:41:43:d9:b6:81:e8:
90:c6:51:3b:10:8c:37:08:1c:b8:a5:c3:f3:62:55:
9d:70:7f:22:a1:ad:f2:c4:60:15:e9:43:34:86:08:
f9:b9:72:0a:0a:e8:4c:1f:f8:90:aa:a2:35:3e:0b:
01:43:0b:9d:ba:1f:35:be:73:ed:27:7c:19:1c:41:
7a:b9:a5:6f:cf:1d:be:98:19:6b:2f:40:7d:a3:dc:
5f:ba:56:5f:4b:59:97:a1:61:4f:15:cb:7e:28:37:
ee:f9:0a:04:29:70:ed:56:79:19:84:7d:4f:28:1d:
00:43:fa:2b:f1:5c:c0:09:3c:57:1f:71:cd:1c:b9:
f1:ba:72:0d:a9:a8:5a:c6:8a:cb:83:6b:18:f2:07:
e5:ea:39:bb:37:57:a7:29:e4:c0:77:fa:52:25:a4:
2c:a8:ae:d6:06:10:f6:92:ee:cd:45:bc:08:e5:5c:
28:6e:76:dc:d6:cb:35:bc:3f:e2:74:79:81:a1:39:
b9:99:d3:e8:c5:7f:48:e1:3f:60:b8:f6:94:ba:3e:
ee:b2:ea:bc:eb:34:21:54:dd:fb:2e:f9:02:b0:76:
b1:13:99:46:7e:66:bf:01:d3:9a:8f:00:c9:3a:c3:
66:0b:a1:fe:e0:9c:c2:39:99:a6:77:bc:49:ea:8c:
c3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:85:EE:FC:86:50:0F:3A:15:90:83:1A:C9:50:F9:F7:EB:5E:29:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/942ec425-2259-3cd4-97f1-f7efbcb4f829.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
X509v3 Authority Key Identifier:
keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
sbgp-ipAddrBlock: critical
IPv4:
128.189.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:93:ed:11:bf:45:e1:c4:67:25:0a:55:21:6d:3c:96:4d:1e:
a2:b8:9c:f3:a9:e6:79:cb:c7:4a:a1:c2:b9:0f:37:73:7a:8b:
22:8b:54:9e:10:5a:fc:92:b0:d2:29:fe:db:67:9d:c9:27:d8:
31:73:f6:e7:8d:89:b8:5d:9e:e9:e8:e7:59:4d:14:23:ca:a0:
fa:56:42:47:61:1d:c5:d8:2c:a0:16:c9:73:24:9a:e0:95:06:
57:e0:5c:4b:b7:c6:e2:69:85:a3:96:44:fb:a7:fb:42:0b:b1:
da:91:97:9e:85:16:f9:80:82:0b:6a:7e:08:37:eb:75:e8:f0:
30:e7:4b:88:89:bd:3b:dc:7a:66:87:09:3b:53:d3:8b:b7:1b:
79:a9:aa:57:b0:cf:1b:fa:93:44:98:5b:85:08:ef:5f:be:f3:
91:a1:06:ce:31:89:e4:14:e8:23:d2:1e:84:15:e3:62:37:24:
cf:28:5e:26:20:3b:ca:34:b0:35:b3:e6:6d:95:dd:bb:9d:a1:
76:92:54:6e:67:83:78:85:30:55:98:e6:a4:fb:71:55:6c:bd:
7d:bf:3f:94:aa:94:8e:3e:ff:e9:56:9f:0f:02:c2:e2:4d:8d:
ac:84:42:87:c2:c9:cd:57:ce:d4:4b:3c:7b:ce:f7:05:25:a9:
86:d2:e0:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:52:35 2025 by rpki-client