Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0210c7ef-8b31-336c-867c-3f3aaa002553.roa
File: 0210c7ef-8b31-336c-867c-3f3aaa002553.roa (raw, json)
Hash identifier: lMdYZHH9zFsVtTgQPQsBdNjknYdWXBuOf/PQxeRHUm4=
Subject key identifier: 5D:96:61:65:F0:4D:54:86:89:36:F1:48:1A:1D:CD:77:94:2A:18:02
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858496CE46FA9DCEFAB8868309E80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0210c7ef-8b31-336c-867c-3f3aaa002553.roa
Signing time: Sat 05 Apr 2025 13:01:01 +0000
ROA not before: Sat 05 Apr 2025 13:01:01 +0000
ROA not after: Fri 04 Jul 2025 13:01:01 +0000
asID: 20940
IP address blocks: 23.54.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 09 Apr 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6c:e4:6f:a9:dc:ef:ab:88:68:30:9e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Apr 5 13:01:01 2025 GMT
Not After : Jul 4 13:01:01 2025 GMT
Subject: CN=ef137d6d-c793-45fb-9424-2cc5c7005b81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:71:69:86:9f:7a:2c:42:2a:5f:4e:53:89:fd:
e3:3b:93:3a:2d:47:ed:fc:f5:bf:bc:68:2e:08:33:
b2:25:fd:99:a9:20:6f:79:d9:90:5f:36:69:65:0e:
0e:b9:8e:40:7d:2e:99:a0:24:73:31:9b:72:bc:34:
55:48:5c:51:c3:20:34:84:c4:72:11:39:c3:04:6d:
3e:e4:fd:a9:12:b3:2d:53:1c:4a:c1:f6:c1:2a:a5:
02:10:87:2f:a0:5a:17:a3:58:cb:79:ba:bd:9a:ee:
08:97:57:08:6b:13:ea:a9:77:b0:2c:5e:39:27:71:
42:38:03:0a:52:44:a4:fe:6b:e8:06:c6:9d:fb:fd:
8a:14:24:bd:74:36:2e:12:88:20:b5:34:02:b3:f9:
8b:9a:8d:53:3f:6c:05:9e:9c:d8:f4:f4:cd:0a:78:
62:aa:83:68:99:3a:a9:99:18:1d:f7:5a:ab:81:05:
ca:5c:60:b9:89:f4:eb:74:90:a1:dc:c2:65:7b:82:
46:af:f6:59:2e:c2:f0:41:69:5b:1d:6a:97:6c:6d:
d3:86:30:b7:b5:e8:e3:22:fe:c4:68:ea:92:7d:a8:
52:8d:bd:2d:1a:71:c2:0b:ac:3b:44:bf:87:47:0b:
a3:e2:4d:a5:9d:df:3b:71:a5:cc:b3:8f:af:2f:5a:
f4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:96:61:65:F0:4D:54:86:89:36:F1:48:1A:1D:CD:77:94:2A:18:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0210c7ef-8b31-336c-867c-3f3aaa002553.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.54.77.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:77:59:40:b6:9c:67:7b:3a:c0:d5:44:03:7d:2d:e2:f8:19:
5f:db:05:df:de:a2:5e:5f:d2:70:d3:0b:e9:34:30:0a:6a:6c:
12:88:80:54:97:ff:04:73:ae:91:3f:0f:53:ab:75:2b:44:a6:
a7:e1:36:de:fa:4d:0b:07:cb:6d:ff:6f:6f:8c:e0:11:77:50:
7a:71:1b:66:31:f9:67:06:b6:9e:30:1a:7c:44:fb:e0:80:06:
ae:3d:2a:b4:de:4c:f5:72:92:e5:2b:67:2a:3a:cc:e9:86:1c:
37:4a:53:02:ea:29:b1:f5:e2:e1:06:d6:52:c8:bf:39:31:e4:
81:ee:d8:a4:1b:ea:a7:02:20:9c:06:d3:d9:6f:8e:96:75:c2:
60:f5:61:e6:85:b1:18:e0:07:d4:05:37:6a:24:b5:e1:c0:fe:
d8:19:47:d2:50:3a:81:a9:b4:8f:96:0d:c7:aa:a1:06:04:e7:
80:a6:6d:7d:04:6e:7e:21:1d:0d:10:92:6c:b4:03:9e:7d:f5:
a2:17:6a:99:8c:ff:34:60:47:df:a5:ad:4f:ed:d5:1f:be:0f:
45:f3:98:f5:0b:13:e2:00:df:0d:4c:00:0e:55:c5:05:c5:48:
f5:d3:23:d7:d2:c7:34:94:4d:f3:38:3c:3b:39:60:0a:3c:a6:
55:3b:fe:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:47:59 2025 by rpki-client