Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f08438f2-f343-4b2c-b0be-ac56b734d48d/5c53ae5b-7530-3f5b-a004-33f5575ea34b.roa
File: 5c53ae5b-7530-3f5b-a004-33f5575ea34b.roa (raw, json)
Hash identifier: kcrxmkXlCIdlQjU+A3Bkxza7kXsVXSsBQ0ljxD9p1gE=
Subject key identifier: 71:BE:C8:82:DE:9D:9F:3B:42:46:AD:7B:D5:92:D7:E5:CB:5F:C1:54
Certificate issuer: /CN=f08438f2-f343-4b2c-b0be-ac56b734d48d
Certificate serial: 010D0C9F432858493AA3DB9350D42A95D0568000
Authority key identifier: 0C:19:B9:07:16:CE:1B:F8:24:47:E0:05:9C:02:C0:30:96:A6:17:67
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f08438f2-f343-4b2c-b0be-ac56b734d48d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f08438f2-f343-4b2c-b0be-ac56b734d48d/5c53ae5b-7530-3f5b-a004-33f5575ea34b.roa
Signing time: Tue 18 Mar 2025 13:00:50 +0000
ROA not before: Tue 18 Mar 2025 13:00:50 +0000
ROA not after: Mon 16 Jun 2025 13:00:50 +0000
asID: 17303
IP address blocks: 185.212.4.0/24 maxlen: 24
195.85.116.0/24 maxlen: 24
206.55.212.0/24 maxlen: 24
208.67.108.0/22 maxlen: 22
216.250.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f08438f2-f343-4b2c-b0be-ac56b734d48d/f08438f2-f343-4b2c-b0be-ac56b734d48d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f08438f2-f343-4b2c-b0be-ac56b734d48d/f08438f2-f343-4b2c-b0be-ac56b734d48d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f08438f2-f343-4b2c-b0be-ac56b734d48d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 16 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3a:a3:db:93:50:d4:2a:95:d0:56:80:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f08438f2-f343-4b2c-b0be-ac56b734d48d
Validity
Not Before: Mar 18 13:00:50 2025 GMT
Not After : Jun 16 13:00:50 2025 GMT
Subject: CN=e49c6039-cd2d-47a5-a1e0-ca160835bafe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9a:80:2a:d8:32:ad:da:da:cf:2d:ae:8c:35:
9e:5b:c9:db:62:42:99:f2:e2:ca:fc:d6:b9:a0:ef:
ff:96:3e:66:13:5d:fa:05:c2:97:4d:b1:72:d8:f4:
e6:ec:62:33:f2:eb:78:31:99:54:a9:ca:05:02:8b:
c6:f7:24:1f:81:bc:74:2e:7b:0a:1b:23:bd:5e:75:
52:56:0d:cd:21:6b:be:d6:c0:ca:f7:31:f5:fa:3e:
8e:9f:83:1d:0b:9c:88:c9:3a:4e:80:6a:ec:87:f9:
03:da:f9:20:c3:6d:c5:e8:98:10:26:bf:8b:2b:d5:
6d:91:56:ba:19:a5:9a:26:79:72:45:d9:bc:a6:3b:
4a:bd:5f:f1:fa:f6:e9:3e:35:41:05:ce:da:d1:25:
02:95:50:a9:a5:2c:14:30:84:81:f6:5f:b9:f5:fe:
d4:83:ae:b1:9f:b6:ab:54:18:c7:20:cf:ad:f1:8d:
c1:bd:78:f4:7b:26:de:34:c7:fb:4c:ff:d7:10:e9:
2d:f0:50:32:2f:f5:56:7c:fe:01:4f:c0:55:ce:39:
15:2e:5d:63:66:39:e3:76:cd:b3:5d:c0:49:fc:0a:
96:40:ee:ef:fa:8b:61:18:19:ce:a2:09:8e:90:d7:
e8:84:e7:83:2c:53:c2:8e:df:19:08:4a:57:b7:08:
bf:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:BE:C8:82:DE:9D:9F:3B:42:46:AD:7B:D5:92:D7:E5:CB:5F:C1:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f08438f2-f343-4b2c-b0be-ac56b734d48d/5c53ae5b-7530-3f5b-a004-33f5575ea34b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f08438f2-f343-4b2c-b0be-ac56b734d48d/f08438f2-f343-4b2c-b0be-ac56b734d48d.crl
X509v3 Authority Key Identifier:
keyid:0C:19:B9:07:16:CE:1B:F8:24:47:E0:05:9C:02:C0:30:96:A6:17:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f08438f2-f343-4b2c-b0be-ac56b734d48d.cer
sbgp-ipAddrBlock: critical
IPv4:
185.212.4.0/24
195.85.116.0/24
206.55.212.0/24
208.67.108.0/22
216.250.99.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:ce:e6:88:f9:a3:41:e9:a8:79:51:b6:52:0f:4e:f4:d8:38:
73:ab:b2:52:53:af:1c:f4:23:59:29:55:ae:2d:a4:04:80:12:
ab:f5:b3:42:4f:9c:79:67:24:0a:48:89:ae:7e:72:17:41:22:
14:14:b0:2a:ae:2f:f5:7b:84:23:53:ef:fc:b0:b3:bf:df:0f:
9c:0f:94:3b:01:4d:2c:71:20:2d:f1:3a:3d:a0:f0:e0:b9:0c:
d6:46:69:4b:d8:d7:bd:90:2a:93:e0:9d:5a:12:be:63:4d:8a:
be:9e:e2:62:7a:46:64:f0:e4:c2:0d:27:ff:e1:4a:f6:ca:ae:
ee:db:88:56:dc:58:11:65:07:c7:51:7b:a7:bc:a4:ea:9a:b6:
35:d4:fa:36:98:68:d7:bc:be:86:d4:61:d3:92:92:22:73:86:
ee:aa:e9:98:6a:30:75:0a:df:3b:02:0b:aa:7d:36:9b:e4:7d:
28:11:f1:e4:db:b7:c3:55:89:9d:87:cc:26:6a:b3:2c:9c:96:
e1:2f:88:43:a1:3a:82:ba:fc:1a:73:fb:ad:df:bf:d1:4e:d4:
46:06:71:f1:66:f1:57:0f:81:d7:f4:b6:d0:37:07:fc:25:db:
02:ad:10:9e:9e:2d:ee:da:d2:41:d6:fa:23:df:ac:fb:3e:62:
48:65:aa:98
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Apr 15 13:57:24 2025 by rpki-client