Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/48a22088-f396-3d4e-95af-ebb4015db6bd.roa
File: 48a22088-f396-3d4e-95af-ebb4015db6bd.roa (raw, json)
Hash identifier: tD50XpFDSVmLJvF8pNG63C8mc2SDnyE9b67IGuc9o7Y=
Subject key identifier: 12:70:60:18:55:4C:74:26:8F:BD:53:75:25:39:82:96:2A:13:FA:A3
Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial: 010D0C9F43285849192D1795BE4CD59F74FED080
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/48a22088-f396-3d4e-95af-ebb4015db6bd.roa
Signing time: Thu 06 Mar 2025 13:19:53 +0000
ROA not before: Thu 06 Mar 2025 13:19:53 +0000
ROA not after: Wed 04 Jun 2025 12:19:53 +0000
asID: 207266
IP address blocks: 65.22.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 17 Mar 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:19:2d:17:95:be:4c:d5:9f:74:fe:d0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
Validity
Not Before: Mar 6 13:19:53 2025 GMT
Not After : Jun 4 12:19:53 2025 GMT
Subject: CN=ea8a3d26-0666-4c74-8e79-e255ad62617f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:6d:17:71:93:a8:4b:cc:ea:0c:e2:9f:10:d6:
89:f5:58:a1:53:af:75:0b:81:5b:80:15:f5:fb:62:
68:07:ff:bd:44:6d:6c:7a:00:4f:00:7d:87:a7:e0:
67:82:1a:cc:03:26:61:0d:0a:8b:2e:8c:66:88:aa:
34:d8:3f:f2:84:65:f4:3b:12:72:25:dc:38:4b:95:
c6:9b:7f:ce:98:28:d4:17:ec:94:f9:81:33:54:f9:
9b:d1:cf:94:b8:b4:07:ba:6c:ae:1e:1a:67:27:a6:
69:b3:cb:70:07:b9:e2:89:13:d9:c0:ef:77:84:23:
ab:39:34:a1:53:a8:0d:6f:15:d0:4b:1c:d9:46:73:
02:20:c2:25:aa:d1:89:6c:da:a2:ea:de:7d:c4:b2:
aa:95:61:d6:87:69:e2:d5:b0:d6:38:9f:da:45:33:
32:b6:8b:53:cc:f9:32:0f:51:7b:a7:83:03:2e:8d:
02:fb:21:47:20:c6:ad:73:2c:ce:38:65:a0:3f:8f:
ed:6e:c4:e4:86:03:4e:0f:f0:4a:85:bc:c2:02:e1:
d4:91:92:a1:84:f2:02:1f:3b:33:63:33:19:ba:58:
2e:44:15:2c:1e:1e:30:2e:b2:1d:31:c2:51:4d:86:
5c:cb:27:50:d6:cb:11:b9:24:8f:93:0b:05:39:e8:
db:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:70:60:18:55:4C:74:26:8F:BD:53:75:25:39:82:96:2A:13:FA:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/48a22088-f396-3d4e-95af-ebb4015db6bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
X509v3 Authority Key Identifier:
keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
sbgp-ipAddrBlock: critical
IPv4:
65.22.43.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:f4:d4:d5:60:b4:09:9e:d2:ca:e4:e4:73:3a:1a:2d:ee:e6:
55:b4:87:98:f0:49:0d:4f:31:8b:ec:70:b8:3f:a1:53:16:92:
e2:a6:a4:01:da:f0:97:47:67:bb:37:48:0a:71:87:9c:19:bf:
b8:07:0b:0c:37:87:21:8c:87:f7:2c:13:2d:7a:00:ef:dc:da:
42:cc:86:94:b3:e9:82:62:5c:1b:3a:69:68:14:a9:4d:93:ac:
cf:40:24:3a:09:0b:8e:b9:e4:38:65:ea:3c:98:56:e1:9a:c2:
22:c3:c1:92:b3:58:a9:89:fa:97:f3:5e:78:b4:5f:32:b7:fe:
9a:50:c7:db:b5:53:07:3d:a5:e8:f7:01:e1:db:29:bd:62:51:
10:87:4c:c8:ac:83:40:0d:6b:b6:59:83:ae:cb:55:d8:f7:fd:
d9:de:21:d5:8b:70:85:4f:34:7c:24:07:47:5f:42:4f:2f:56:
f5:85:82:7c:2f:df:a6:90:e0:8e:cd:63:32:58:48:5e:28:19:
17:b9:59:fc:7a:b7:1b:36:93:bd:d0:3c:97:49:8f:8a:6a:ce:
fd:f5:ff:77:94:77:86:c7:fa:74:ba:46:d9:1d:12:60:93:72:
6f:86:c5:3d:9e:e1:50:02:63:34:69:2a:f9:60:3f:cf:88:38:
a2:9a:b9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 15 20:44:52 2025 by rpki-client