Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/d50e1309-25ab-314a-abea-0d4f177b5564.roa
File: d50e1309-25ab-314a-abea-0d4f177b5564.roa (raw, json)
Hash identifier: /lp65rAc2iNkEEQqkPGp+g8GlbsqWq6bLPrT3HxnU/E=
Subject key identifier: EC:04:40:74:7E:96:C2:F8:57:EF:7C:DB:CE:43:F4:50:83:16:00:15
Certificate issuer: /CN=45de47ca-0b52-44ab-af26-767d8a671192
Certificate serial: 010D0C9F43285848DA70FEFE7427AFF960FD36E0
Authority key identifier: C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/d50e1309-25ab-314a-abea-0d4f177b5564.roa
Signing time: Wed 12 Feb 2025 02:00:39 +0000
ROA not before: Wed 12 Feb 2025 02:00:39 +0000
ROA not after: Tue 13 May 2025 01:00:39 +0000
asID: 5645
IP address blocks: 173.230.160.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 17 Apr 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:da:70:fe:fe:74:27:af:f9:60:fd:36:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45de47ca-0b52-44ab-af26-767d8a671192
Validity
Not Before: Feb 12 02:00:39 2025 GMT
Not After : May 13 01:00:39 2025 GMT
Subject: CN=5aca27e2-36b5-4d9d-b4f2-a48a5904c0ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:96:d6:48:2b:84:5c:9c:48:a3:12:f5:53:6f:
7c:6f:f4:9a:bf:ac:c0:73:ba:8a:09:84:be:92:87:
96:06:32:de:71:59:74:e4:9b:7b:d9:5d:0d:e9:1a:
45:f3:08:d0:c2:96:50:09:ff:fd:aa:62:1f:fa:da:
31:c8:3b:8e:bb:9a:b7:bf:e6:78:a5:be:aa:88:a3:
76:87:98:03:cc:5f:c4:b5:67:ba:e1:b1:29:2c:ea:
56:a1:6d:92:a8:6b:4f:91:1e:9b:cd:0a:2c:73:83:
1f:3b:67:51:3e:a6:ca:8a:b3:28:3d:87:97:1d:da:
f2:55:2b:4f:e8:0f:a9:e6:73:dd:89:66:f9:74:0b:
af:7a:c4:fa:2e:09:1a:b1:e8:99:9d:06:b9:27:cc:
93:a0:22:29:74:f3:5a:9c:95:bd:90:d8:6c:d4:f7:
68:b2:86:b5:6c:81:6b:b0:c4:37:ec:3d:01:6e:6f:
c8:4b:61:73:44:f9:83:4d:6f:47:00:9a:4a:c9:b2:
9b:81:8e:74:5d:66:87:00:6f:41:da:4c:64:14:bc:
c0:d9:9a:bb:ba:ae:cc:68:53:d6:b4:f8:b5:04:69:
1c:2c:c3:db:c9:b6:df:51:1e:7e:c2:da:4f:82:bd:
48:41:d3:b9:8f:32:bb:fc:15:80:c2:76:b4:ca:0b:
5d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:04:40:74:7E:96:C2:F8:57:EF:7C:DB:CE:43:F4:50:83:16:00:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/d50e1309-25ab-314a-abea-0d4f177b5564.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl
X509v3 Authority Key Identifier:
keyid:C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer
sbgp-ipAddrBlock: critical
IPv4:
173.230.160.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:97:7f:ba:48:09:8a:ee:e0:79:51:8b:c2:04:92:8e:dd:c9:
31:0a:63:60:c0:23:8c:75:f6:4f:90:70:20:d2:fe:a7:fa:20:
2a:c0:bc:ff:66:37:16:c0:da:20:14:2b:f3:22:9e:cb:b0:40:
f0:60:6a:47:ad:6d:9a:6d:ab:4b:ff:5e:6e:62:29:92:9e:d7:
3d:20:ec:ba:fc:33:28:61:d8:af:de:8f:1d:8b:d2:99:02:a3:
a8:08:22:2b:4f:f5:87:f9:42:e4:93:43:bc:d2:ad:24:2c:25:
89:8d:4c:c4:c6:67:b2:70:4b:81:2d:7a:0e:fa:58:a2:39:42:
0c:16:bd:49:3a:eb:f5:21:76:ed:9c:dd:2e:30:b1:08:ae:e8:
ea:8b:2f:9e:90:e6:1b:37:dd:91:f8:e1:ad:1d:5c:ad:8b:5d:
60:13:ba:05:8c:e2:03:44:2e:8d:3b:30:88:a1:01:43:8f:d1:
ce:63:bb:51:ed:5b:90:89:e5:5c:a3:5c:a5:50:e5:3f:68:14:
6d:b0:1e:5e:da:34:49:5e:d6:0a:af:be:34:a0:52:69:cf:72:
64:50:58:09:15:9d:ea:3d:b0:94:9c:90:c3:4d:19:94:0e:3a:
d3:56:68:af:6d:76:57:9d:db:6e:d7:a1:03:82:de:38:85:96:
59:37:f0:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 22:03:09 2025 by rpki-client