Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2b22b7cf-21e7-3a16-bff4-cae9cbf02382.roa
File: 2b22b7cf-21e7-3a16-bff4-cae9cbf02382.roa (raw, json)
Hash identifier: lnPjMtN+eGArBpQZY2FDuX8FRCZF5aYny5lXLPXqT88=
Subject key identifier: D1:3C:A8:A7:E1:DA:AA:30:F6:24:18:59:4C:6A:B3:72:76:CF:33:7C
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848C9B0E4479033D264DE043D40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2b22b7cf-21e7-3a16-bff4-cae9cbf02382.roa
Signing time: Thu 06 Feb 2025 02:00:39 +0000
ROA not before: Thu 06 Feb 2025 02:00:39 +0000
ROA not after: Wed 07 May 2025 01:00:39 +0000
asID: 20940
IP address blocks: 23.218.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 09 Apr 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c9:b0:e4:47:90:33:d2:64:de:04:3d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 6 02:00:39 2025 GMT
Not After : May 7 01:00:39 2025 GMT
Subject: CN=39c2f51b-0259-4e22-bc92-7c8203246f05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:72:98:49:a9:62:22:1e:ee:6c:44:51:87:e7:
b4:36:8d:70:80:c0:49:3d:a4:c7:3c:6a:4f:a6:64:
de:00:54:cf:be:3d:55:1a:e9:d6:c9:49:5b:0e:02:
3f:65:04:29:81:c6:9c:ce:a9:c3:a5:f6:58:d4:3e:
90:b9:fc:2e:51:7d:e0:44:24:77:cf:25:9e:06:59:
97:97:3d:a4:d3:8a:6f:4f:65:a1:8f:ba:a6:f4:c6:
b7:9e:31:7b:c5:71:8a:7f:be:34:15:81:f3:50:04:
27:1d:c7:fb:c1:6a:05:70:07:e4:d5:10:6f:45:da:
dc:7d:69:40:01:67:c5:52:bb:57:46:e3:ff:7a:46:
13:f4:ba:30:ed:7d:50:b7:53:51:79:52:71:4f:69:
80:72:cc:b5:46:ba:53:f3:4b:b0:0d:78:98:42:d2:
07:1e:19:f5:52:db:1e:de:bb:50:fe:ac:03:19:96:
4b:e4:2d:23:af:ec:d2:e8:17:1a:d7:ff:df:b1:29:
eb:f6:b2:13:4e:7c:76:22:d3:70:d3:72:d6:ee:19:
b2:cd:bd:a0:3e:8a:dc:b2:55:77:cc:b9:de:a6:39:
4d:86:39:64:a2:79:53:d4:6a:e7:7d:b5:ca:43:83:
8d:84:90:8e:a1:4b:66:f5:f4:58:00:70:c5:6a:f4:
55:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:3C:A8:A7:E1:DA:AA:30:F6:24:18:59:4C:6A:B3:72:76:CF:33:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2b22b7cf-21e7-3a16-bff4-cae9cbf02382.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.218.80.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:36:37:ba:23:b8:d8:41:ba:7a:f4:d8:1c:fb:1b:62:14:9c:
4f:f0:11:d9:10:35:30:17:b4:c9:bd:30:8d:d9:a4:13:eb:c7:
0f:0a:85:9f:b5:f7:76:c8:2a:e5:90:35:0b:c9:64:fb:74:5c:
06:3b:bc:35:ed:5b:5f:ab:27:30:c0:7e:c6:3f:30:34:ef:93:
0b:a2:c1:db:01:fc:d7:b7:ba:54:33:1c:17:aa:05:f2:01:a7:
93:a0:f4:4d:66:0a:0a:b2:6f:97:64:45:a8:ab:ab:53:42:9b:
78:05:1d:38:f9:27:c0:e7:c3:8a:b4:c8:bb:94:3b:81:b8:84:
fe:1b:b1:a2:2b:91:32:b5:59:c1:39:f3:25:8e:f7:f3:bf:ad:
68:d0:27:a2:1b:62:47:cd:38:53:dc:97:94:2e:83:f8:72:a6:
e2:2d:12:06:25:f9:22:52:46:b3:35:13:c1:da:89:23:3e:02:
8d:21:f6:93:a1:16:5b:f0:f8:51:a0:80:69:a8:43:0a:80:bf:
cf:3d:d4:4e:29:09:77:72:2e:8f:7a:7a:3c:3e:91:45:38:4f:
1b:b8:3d:f4:4c:66:1d:01:4a:14:24:5f:07:58:4c:e7:44:a1:
61:78:c6:ae:7f:78:35:2c:ef:da:9b:88:1a:0b:68:d0:47:c8:
49:be:8d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:33:52 2025 by rpki-client