Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b8e86245-eba8-3d5c-b8ec-d5a49d4ab9b0.roa
File: b8e86245-eba8-3d5c-b8ec-d5a49d4ab9b0.roa (raw, json)
Hash identifier: iPpuCG+ImcZw66BTUEDTcLHRf9owb2y+6uaiEKtI/Kw=
Subject key identifier: 97:51:D4:9C:B5:9B:A7:1F:97:F9:F8:5A:01:C4:73:1E:CE:AA:B4:97
Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial: 010D0C9F43285848ED3D94EE45832A33D4ED3980
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b8e86245-eba8-3d5c-b8ec-d5a49d4ab9b0.roa
Signing time: Tue 18 Feb 2025 19:37:33 +0000
ROA not before: Tue 18 Feb 2025 19:37:33 +0000
ROA not after: Mon 19 May 2025 18:37:33 +0000
asID: 13901
IP address blocks: 199.19.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 17 Mar 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ed:3d:94:ee:45:83:2a:33:d4:ed:39:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
Validity
Not Before: Feb 18 19:37:33 2025 GMT
Not After : May 19 18:37:33 2025 GMT
Subject: CN=9bc5c4cc-85cf-44b9-84b0-6143d25064ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:43:cd:e0:4f:92:16:cd:ed:41:56:c1:a0:8e:
bd:1a:3f:e0:cb:57:fd:cd:bb:75:b5:76:82:bf:ee:
79:54:e5:5c:09:53:fd:6f:68:e9:53:69:e1:b9:6a:
17:5f:b9:46:00:52:c3:4c:b9:62:c4:8f:b4:00:84:
a2:ee:f7:89:c3:49:5b:43:84:2f:11:f2:b1:79:03:
14:33:fe:58:b2:ae:b9:d3:e7:4c:d2:9a:77:2c:76:
65:c4:df:fa:61:23:23:a9:a6:48:dc:90:44:11:e2:
35:8d:ae:90:e0:68:59:14:02:9a:20:00:08:4d:66:
a4:54:e5:b0:1d:03:cb:73:ac:69:c2:53:25:ff:9c:
b1:79:7e:a6:c3:53:d8:42:d8:cf:3c:a9:67:7a:b8:
03:e9:f1:eb:3e:57:6c:92:da:2c:f9:ca:79:85:ac:
e4:a3:38:2d:89:3d:70:47:3f:84:a4:67:3a:b7:23:
b7:e9:7e:eb:81:65:dd:93:17:fb:41:5d:b4:95:62:
22:57:23:55:c5:f9:84:a1:4e:db:b4:2c:e6:3f:5e:
b0:57:a0:28:5b:20:02:5b:b5:f0:dc:66:50:ec:cb:
44:61:59:a3:0e:41:cb:08:e3:41:97:1d:1e:56:f5:
f6:33:d1:1d:5e:8b:25:e5:37:26:61:ea:32:ef:d9:
d3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:51:D4:9C:B5:9B:A7:1F:97:F9:F8:5A:01:C4:73:1E:CE:AA:B4:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b8e86245-eba8-3d5c-b8ec-d5a49d4ab9b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
X509v3 Authority Key Identifier:
keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
sbgp-ipAddrBlock: critical
IPv4:
199.19.52.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:6a:1b:5a:85:b5:87:a0:c9:ac:4e:c2:c7:b4:3c:03:0f:37:
2d:81:c5:ec:ca:f9:a3:ab:bb:bc:62:af:aa:3a:d0:c2:0c:92:
aa:f9:a3:2b:06:38:c1:4f:4c:c7:9c:8d:28:ec:89:13:12:05:
ce:fd:ea:6a:d6:4e:f8:77:29:5f:46:92:5f:4c:fe:d0:0f:77:
d4:32:82:c7:f2:49:ff:53:db:1f:60:39:47:af:a1:c9:f5:72:
a9:44:9a:f4:bb:de:0e:55:85:9e:87:69:91:00:02:ce:70:2f:
cb:6a:3f:66:4b:57:82:c3:98:39:62:a8:ea:2f:34:8f:6f:71:
58:6d:f6:e2:56:8e:54:ae:5e:27:fd:f5:60:01:eb:e7:c7:e7:
d4:c8:28:1e:21:ce:52:ea:85:a0:4c:da:1b:e0:2c:7c:a7:37:
77:68:3e:b4:23:20:01:e2:8e:49:25:d1:d1:b8:cd:71:2c:08:
de:36:68:cb:b9:32:e0:1d:66:71:03:43:d2:eb:22:6c:ac:01:
27:a3:3c:1a:c5:8e:67:c3:39:79:34:9a:1c:9d:18:21:d4:0f:
39:3c:28:d9:f0:64:f2:ed:97:ae:4b:10:cc:c5:20:5d:7d:d4:
80:e8:a4:08:a9:88:e0:e0:ad:56:17:7c:37:66:47:b9:7b:03:
11:a9:79:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 15 21:59:13 2025 by rpki-client