Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/3da40667-e484-3533-addf-c1c93919695c.roa
File: 3da40667-e484-3533-addf-c1c93919695c.roa (raw, json)
Hash identifier: 86ilFxgv4PWxJR0jb4ZbnkrL+u7V01+jCGeJfYKwva4=
Subject key identifier: 5C:0D:57:70:60:8B:66:53:92:91:1C:55:2F:01:91:08:7E:95:74:62
Certificate issuer: /CN=2fe9ed1c-dd4f-4e1e-8e26-2014334ee265
Certificate serial: 010D0C9F43285849061AF3D611320BAEBCF83F80
Authority key identifier: 6D:C4:D0:89:FF:FA:B0:D6:2C:09:6A:11:2C:40:70:75:D4:63:7B:D3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/3da40667-e484-3533-addf-c1c93919695c.roa
Signing time: Thu 27 Feb 2025 17:22:59 +0000
ROA not before: Thu 27 Feb 2025 17:22:59 +0000
ROA not after: Wed 28 May 2025 16:22:59 +0000
asID: 13347
IP address blocks: 206.174.136.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:06:1a:f3:d6:11:32:0b:ae:bc:f8:3f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fe9ed1c-dd4f-4e1e-8e26-2014334ee265
Validity
Not Before: Feb 27 17:22:59 2025 GMT
Not After : May 28 16:22:59 2025 GMT
Subject: CN=59c8c92a-b637-4519-b086-6432b119bf6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:db:7f:b7:b5:26:cf:d2:f1:05:72:21:a3:a4:
10:03:18:4c:f2:bb:9f:b7:ad:99:fe:f0:4a:41:d7:
53:ca:10:0d:80:f3:bc:2d:ff:50:1f:cc:94:de:e8:
20:65:33:3f:f6:71:08:12:0b:64:e2:b6:33:7a:b2:
0a:4a:cb:50:a3:1b:75:56:99:21:13:1b:7b:fd:2a:
36:c6:1a:94:13:f4:2e:83:ff:04:96:1a:34:3a:20:
d6:10:33:79:c4:50:b0:57:b9:56:2a:23:0d:87:d0:
22:ef:7a:cf:f9:07:aa:33:a3:f7:bc:d3:3e:35:9f:
79:4c:53:23:6d:80:25:b1:b8:5c:06:35:97:ac:e3:
fb:78:bf:45:60:c7:0c:a5:87:32:a4:93:97:f3:18:
ef:d6:89:f4:83:86:32:64:7f:80:aa:f2:ec:e4:51:
12:bc:0c:d1:26:76:62:18:30:43:30:ba:e0:cd:ef:
1e:35:dd:24:d8:07:cd:c1:f5:b5:1f:cb:40:f1:bd:
f4:b7:aa:96:71:b0:3a:30:7c:7a:4a:90:46:e8:3a:
67:8d:61:a1:05:3a:90:67:eb:f9:48:a9:43:f2:3c:
88:15:ec:40:a9:b6:c6:2c:17:da:95:42:8b:b3:80:
eb:64:7d:58:5d:b9:57:1b:0a:b3:65:e5:67:ff:54:
a0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:0D:57:70:60:8B:66:53:92:91:1C:55:2F:01:91:08:7E:95:74:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/3da40667-e484-3533-addf-c1c93919695c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.crl
X509v3 Authority Key Identifier:
keyid:6D:C4:D0:89:FF:FA:B0:D6:2C:09:6A:11:2C:40:70:75:D4:63:7B:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer
sbgp-ipAddrBlock: critical
IPv4:
206.174.136.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:7a:b2:4d:e7:c1:6c:44:7c:ef:df:41:27:37:b9:f8:23:55:
64:7c:5b:cd:46:87:3c:f1:2c:68:f2:86:6f:0c:a9:cd:47:c9:
64:4f:77:01:f1:b0:db:da:50:cf:66:cf:4e:30:9c:8b:56:95:
66:98:61:ff:d0:ad:1c:76:a1:81:6f:80:99:07:b2:b3:6d:20:
8c:61:28:fa:93:32:bb:7b:69:fa:89:6d:b4:85:e5:38:04:61:
b9:ef:d3:17:9d:1f:16:98:00:f2:6a:7c:38:ad:5d:8d:86:1e:
21:6b:69:b8:9c:5d:49:a9:50:85:df:1d:3d:bd:40:d6:5f:1f:
ba:33:9d:80:f1:35:d0:b4:7e:14:1e:d4:c3:1d:09:df:c0:fb:
ab:e8:aa:12:c6:d2:b4:be:53:38:19:d8:78:af:3b:27:44:14:
a9:dd:26:4e:3f:ec:71:3f:a8:68:6b:1d:03:7c:8c:63:5b:f2:
f0:7e:d9:c9:0e:ff:85:cb:53:c9:fc:1a:4f:c7:99:d0:7c:56:
c6:df:b5:cc:7f:41:c7:4e:bd:6d:d2:9c:5c:c1:62:ea:d2:dd:
28:75:07:c7:7e:23:36:23:3a:9f:dc:45:34:34:e4:3d:f8:64:
65:f5:fd:a5:a6:42:d5:f7:97:66:5d:5e:a1:86:7f:6b:92:9b:
41:0d:fa:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:39:07 2025 by rpki-client