Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47d33a5a-ff14-4cdb-9fa3-a68c82fbf27f/87fb2e12-fbed-3501-9e6f-d3bffcc7d7fc.roa
File: 87fb2e12-fbed-3501-9e6f-d3bffcc7d7fc.roa (raw, json)
Hash identifier: idJpYcGiNjngIqFS9z5NerdcHrfPmZhcQ/xbowjkHmM=
Subject key identifier: 5E:41:84:FE:3F:E7:6C:B8:EB:6B:04:C3:D8:29:EF:B3:7C:D0:BE:03
Certificate issuer: /CN=47d33a5a-ff14-4cdb-9fa3-a68c82fbf27f
Certificate serial: 010D0C9F432858494CC948E1E412AC0312661720
Authority key identifier: 2B:81:44:23:12:6E:F4:2C:6F:52:A8:3D:66:1C:06:CE:9D:1F:0E:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47d33a5a-ff14-4cdb-9fa3-a68c82fbf27f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47d33a5a-ff14-4cdb-9fa3-a68c82fbf27f/87fb2e12-fbed-3501-9e6f-d3bffcc7d7fc.roa
Signing time: Tue 25 Mar 2025 01:00:40 +0000
ROA not before: Tue 25 Mar 2025 01:00:40 +0000
ROA not after: Mon 23 Jun 2025 01:00:40 +0000
asID: 11775
IP address blocks: 23.164.104.0/24 maxlen: 24
2607:7340::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47d33a5a-ff14-4cdb-9fa3-a68c82fbf27f/47d33a5a-ff14-4cdb-9fa3-a68c82fbf27f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47d33a5a-ff14-4cdb-9fa3-a68c82fbf27f/47d33a5a-ff14-4cdb-9fa3-a68c82fbf27f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47d33a5a-ff14-4cdb-9fa3-a68c82fbf27f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Apr 2025 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4c:c9:48:e1:e4:12:ac:03:12:66:17:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47d33a5a-ff14-4cdb-9fa3-a68c82fbf27f
Validity
Not Before: Mar 25 01:00:40 2025 GMT
Not After : Jun 23 01:00:40 2025 GMT
Subject: CN=e5a8b851-fc86-47f3-b761-33ddcead8608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bf:f1:ad:a6:0e:55:2f:0b:8c:56:1a:65:ad:
be:7e:c2:18:9b:d7:e0:38:ac:17:53:d9:61:87:3e:
a4:27:57:eb:72:84:4e:2d:c0:92:93:e8:bc:43:0c:
e1:7c:02:2d:ae:44:5e:76:91:fa:e1:41:de:85:07:
6f:85:8e:e0:cc:bc:36:4e:24:cd:5d:e5:bc:d9:7f:
a3:18:5e:03:fc:0c:a3:ca:30:cf:5e:5e:12:74:41:
f9:43:6a:a4:8f:4d:1c:eb:eb:66:b7:2c:22:8c:83:
64:a5:c4:02:08:ec:b3:d4:d6:86:1a:22:28:0d:32:
4a:4f:e2:1a:12:28:c5:4d:0d:d8:ab:43:61:5e:21:
eb:03:20:d1:79:4f:be:bd:8a:61:41:3a:7b:f5:7e:
86:58:cb:4a:37:ec:b3:e7:21:3d:57:20:99:20:e8:
c0:65:1a:4b:e0:82:fa:55:a1:bb:86:e2:6d:24:d7:
10:32:7d:ea:bc:41:4a:69:30:97:1a:88:e7:bc:3e:
af:54:2b:64:cc:d0:65:30:1c:7e:da:d5:f6:9f:6b:
c0:8d:0f:b4:b8:ee:97:57:42:4f:08:7e:5e:d8:46:
55:2b:ef:78:e1:43:7b:23:cd:9d:af:91:8a:a9:65:
db:b8:ab:f4:77:6c:3d:6c:5e:ef:06:0a:ce:67:7b:
76:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:41:84:FE:3F:E7:6C:B8:EB:6B:04:C3:D8:29:EF:B3:7C:D0:BE:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47d33a5a-ff14-4cdb-9fa3-a68c82fbf27f/87fb2e12-fbed-3501-9e6f-d3bffcc7d7fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47d33a5a-ff14-4cdb-9fa3-a68c82fbf27f/47d33a5a-ff14-4cdb-9fa3-a68c82fbf27f.crl
X509v3 Authority Key Identifier:
keyid:2B:81:44:23:12:6E:F4:2C:6F:52:A8:3D:66:1C:06:CE:9D:1F:0E:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47d33a5a-ff14-4cdb-9fa3-a68c82fbf27f.cer
sbgp-ipAddrBlock: critical
IPv4:
23.164.104.0/24
IPv6:
2607:7340::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:3c:3c:43:f9:b2:0e:cf:34:47:38:d0:6a:d7:36:e6:92:77:
16:99:1c:a4:69:38:15:6e:16:c9:3b:da:24:88:cb:37:8a:2d:
f3:71:c9:69:bf:f7:b3:80:5a:71:23:35:27:3b:d1:a4:97:57:
5f:33:b7:27:76:11:44:d5:91:08:e2:54:fb:b3:ef:47:ab:58:
b4:da:ec:56:39:82:33:bd:7b:da:54:a0:58:66:78:33:8e:a8:
4f:e7:ac:91:4d:68:73:d5:eb:ca:72:72:d8:bb:37:4e:70:cc:
ad:38:85:00:e0:08:74:9f:ca:a1:42:5a:90:f6:a7:59:f0:d1:
21:9b:74:95:ee:7c:a5:57:ca:53:27:4b:db:ad:3e:2a:4e:38:
4c:a7:1c:a3:5a:b5:91:2e:e5:56:90:47:6b:18:44:7f:0a:ba:
16:19:dc:9c:be:47:b9:62:f7:fe:6a:17:7f:e9:9a:be:6e:4f:
98:1a:5a:91:b9:30:3c:18:b0:e3:ef:33:2e:09:00:5f:53:0f:
b9:94:42:a6:83:46:d5:8a:d3:da:7c:92:bc:39:1b:08:96:67:
d5:28:5f:ed:34:eb:85:19:8b:ba:4d:3f:d8:f4:a7:f3:a4:7a:
89:db:35:93:77:d0:18:55:f0:44:9c:13:fc:91:4f:74:6e:9e:
8e:c1:14:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:01 2025 by rpki-client