Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfe6b5ce-b18b-4608-80c9-5651cde85219/a4248d18-50bd-3de2-869d-110232135253.roa
File: a4248d18-50bd-3de2-869d-110232135253.roa (raw, json)
Hash identifier: gpx++H/C7m4j0TADqbHWDeplsH2u6xNUWA3LE5q1Xl0=
Subject key identifier: 03:08:62:49:AB:4B:40:AF:94:91:98:AA:DB:6D:37:3F:42:09:DF:B4
Certificate issuer: /CN=bfe6b5ce-b18b-4608-80c9-5651cde85219
Certificate serial: 010D0C9F43285848FD56C48806A3BA41816E3880
Authority key identifier: E3:04:D5:E7:E4:5B:19:CC:9C:7D:61:A3:AA:A4:1C:99:8B:48:B5:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfe6b5ce-b18b-4608-80c9-5651cde85219.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfe6b5ce-b18b-4608-80c9-5651cde85219/a4248d18-50bd-3de2-869d-110232135253.roa
Signing time: Mon 24 Feb 2025 14:00:52 +0000
ROA not before: Mon 24 Feb 2025 14:00:52 +0000
ROA not after: Sun 25 May 2025 13:00:52 +0000
asID: 396100
IP address blocks: 23.164.168.0/24 maxlen: 24
141.193.0.0/23 maxlen: 24
2607:7540::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfe6b5ce-b18b-4608-80c9-5651cde85219/bfe6b5ce-b18b-4608-80c9-5651cde85219.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfe6b5ce-b18b-4608-80c9-5651cde85219/bfe6b5ce-b18b-4608-80c9-5651cde85219.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfe6b5ce-b18b-4608-80c9-5651cde85219.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 08 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:56:c4:88:06:a3:ba:41:81:6e:38:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfe6b5ce-b18b-4608-80c9-5651cde85219
Validity
Not Before: Feb 24 14:00:52 2025 GMT
Not After : May 25 13:00:52 2025 GMT
Subject: CN=298fa954-290d-45cb-b484-c1b5b2a309f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:19:99:54:80:c0:cc:e8:c2:62:27:f1:13:fa:
7a:9a:da:39:83:27:89:bc:fe:cb:58:e1:e2:93:db:
59:6e:5e:ed:e9:2b:f1:dc:be:2d:83:c2:fd:b8:c3:
dc:5a:4b:85:ac:9b:66:c3:2f:7a:39:b9:b2:de:40:
bd:5f:45:a1:53:9c:56:e5:7c:54:9a:ee:66:ea:aa:
22:db:17:00:6a:18:e6:aa:b5:83:73:53:e4:57:89:
92:ba:8d:b9:30:e9:c7:3e:ec:df:43:b4:04:b9:11:
2a:fb:f4:0e:69:de:a8:a7:3e:60:26:22:d5:70:19:
6d:85:34:62:38:21:96:3b:bc:ed:28:d1:45:0f:19:
78:40:ba:00:ab:0a:c6:c9:3f:59:19:75:6e:bf:76:
6b:38:3b:9a:fd:35:59:a6:78:b1:cd:7d:b5:ff:a2:
65:3d:d2:a4:d5:f6:e1:92:f1:53:fe:eb:a5:d9:d1:
d9:c0:b3:97:af:0b:39:e6:1f:3b:ed:41:a2:c1:ab:
8c:ed:88:70:35:8d:49:ef:a8:2e:27:0e:17:63:17:
1a:36:67:33:4b:e0:e9:32:3e:4a:7f:07:a6:43:1e:
e1:26:e9:29:7c:83:53:f7:7f:c1:1b:71:0f:9f:0e:
68:52:cb:b3:28:5c:f4:7e:55:99:25:5a:9c:db:de:
d7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:08:62:49:AB:4B:40:AF:94:91:98:AA:DB:6D:37:3F:42:09:DF:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfe6b5ce-b18b-4608-80c9-5651cde85219/a4248d18-50bd-3de2-869d-110232135253.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfe6b5ce-b18b-4608-80c9-5651cde85219/bfe6b5ce-b18b-4608-80c9-5651cde85219.crl
X509v3 Authority Key Identifier:
keyid:E3:04:D5:E7:E4:5B:19:CC:9C:7D:61:A3:AA:A4:1C:99:8B:48:B5:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfe6b5ce-b18b-4608-80c9-5651cde85219.cer
sbgp-ipAddrBlock: critical
IPv4:
23.164.168.0/24
141.193.0.0/23
IPv6:
2607:7540::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:e1:7b:d7:4b:e9:7d:7a:6e:2c:c9:0f:57:f9:8d:c2:06:09:
93:6c:1c:49:bf:b4:a9:bb:99:c5:a1:a0:eb:e0:69:d5:0b:df:
a5:4f:89:95:3a:b2:31:75:ae:da:d5:7a:11:7f:fb:7f:ab:28:
ee:3d:76:91:8e:2c:63:4a:0a:d5:29:a2:5c:8d:b4:f9:9a:f3:
0b:a3:4a:25:01:9e:e4:00:6c:f2:ea:df:d5:8a:69:90:14:36:
2b:8c:48:41:9c:42:c0:d5:bb:eb:38:ce:44:84:b0:e6:0f:8e:
a1:bd:74:b1:4c:e6:3b:04:1b:7a:d2:e9:d8:4e:cf:f8:da:f0:
55:43:95:05:d4:f1:87:5a:ad:1a:8c:91:26:93:c1:d0:b7:c6:
12:1f:d2:4e:2e:07:67:90:cf:db:4f:fb:59:75:8a:1a:f3:a1:
94:20:a8:e2:70:ce:bc:a7:3c:bf:71:b8:f8:5d:fd:63:ac:d0:
aa:31:f6:9b:92:5f:13:e0:6d:52:0c:89:93:0b:15:40:ba:72:
f3:ca:6f:77:b7:94:33:89:88:8b:24:d9:89:0f:36:4b:5f:bf:
b2:02:7c:90:20:e5:0c:d9:bc:ff:ef:49:bb:be:53:6c:44:f9:
06:78:bd:98:97:9a:1d:86:a9:55:34:a6:e7:ac:3a:5c:77:b9:
dd:37:d0:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:38:33 2025 by rpki-client