Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/d32e2e90-6957-352d-93e8-5e464d96ea2c.roa
File: d32e2e90-6957-352d-93e8-5e464d96ea2c.roa (raw, json)
Hash identifier: 6mP2s8MHqjI/fk/abH59RoRX9rm4vFY/pm+CSSbDiH4=
Subject key identifier: 37:58:A4:FD:3A:53:FB:22:12:97:03:84:08:9A:A9:A1:5B:FA:E4:B7
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F432858492CAE8F9A886E9CFEC4492EC0
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/d32e2e90-6957-352d-93e8-5e464d96ea2c.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 13576
IP address blocks: 216.249.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 09 Apr 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:ae:8f:9a:88:6e:9c:fe:c4:49:2e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=b147c0c2-206c-4d10-8f76-2a0ea4b47ee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:4f:9e:79:30:d4:53:e5:ae:32:b0:66:b9:3b:
40:b9:e5:28:e5:81:87:cd:58:6f:3c:5a:07:6f:a6:
66:5b:b7:10:83:16:1e:b5:0f:c6:33:8e:9b:61:e7:
aa:e9:da:63:c4:6c:24:ba:6a:94:a1:28:ce:7a:15:
2f:a8:ce:a0:45:26:fa:73:07:fb:f0:ab:d0:fd:b7:
21:d8:48:b5:87:d0:cf:c9:90:18:e9:19:db:e5:c6:
29:3a:24:c1:10:9e:e0:97:f1:98:42:77:6e:8c:0e:
f2:81:55:d9:77:d0:77:03:09:d3:1e:90:8d:54:08:
eb:84:88:aa:d0:a1:78:25:36:93:05:c3:4d:eb:f2:
81:5e:2f:f4:15:0f:86:06:0b:5d:2b:65:93:96:41:
8e:b7:ae:8e:1d:40:9b:b8:26:e3:55:c0:15:2f:29:
76:26:72:2e:be:74:05:fa:cf:e5:d9:88:22:cf:fc:
e4:2d:3d:32:7c:e6:fc:ae:1a:c6:31:43:cd:a9:13:
e4:80:ae:1a:12:6e:d5:c9:1a:50:ed:db:c0:37:3c:
bf:3c:81:c3:1b:e5:cf:3a:25:b8:6a:41:e3:50:7c:
6f:31:c4:75:f3:3f:fc:ac:cb:88:85:7a:16:fe:f9:
b2:bf:6f:f3:1e:31:d4:2d:cd:e2:90:a5:5f:d6:63:
79:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:58:A4:FD:3A:53:FB:22:12:97:03:84:08:9A:A9:A1:5B:FA:E4:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/d32e2e90-6957-352d-93e8-5e464d96ea2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
216.249.201.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:77:87:9c:f2:35:89:95:53:14:36:e9:05:5f:6c:4b:e6:5a:
f0:e9:59:cc:58:30:a3:2b:8a:66:29:46:60:2b:85:9a:a3:d2:
62:91:6c:c2:13:e2:80:d4:42:f8:a9:b4:4c:5d:56:25:54:4a:
1d:55:ee:26:43:53:ba:65:5c:ad:ea:81:ae:1f:fb:34:80:f8:
4e:a4:5d:7f:36:83:de:6f:e7:a2:ed:7a:e0:20:0f:f1:ac:46:
41:71:24:23:1a:52:2f:99:51:0b:96:c3:26:06:9a:46:05:b9:
1a:46:4c:1f:f8:43:b1:aa:7a:71:c1:07:7a:0f:f5:13:7f:ba:
3f:ba:c3:cd:7f:fc:ed:30:99:64:f6:1d:55:93:a9:2f:5e:1d:
b9:91:a2:28:e4:6e:e0:b5:e8:d6:69:16:34:93:7a:88:b4:35:
54:cd:da:6e:9a:29:3f:ac:08:79:5a:e8:be:42:8f:d4:20:a1:
1b:01:9f:d4:4b:50:51:28:1f:22:0b:de:86:75:94:7c:d1:f1:
1c:10:6f:c1:25:ab:64:a0:20:49:6c:f3:23:f5:e4:a6:02:b0:
2f:8a:3c:87:ce:b8:87:66:42:7e:c5:2b:2f:22:0a:4a:db:33:
62:a9:c4:49:79:67:43:95:66:a7:09:f7:9c:db:b3:95:da:e2:
de:71:2b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:13:45 2025 by rpki-client