Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f792f12-1623-3844-84f5-b583a713bde6.roa
File: 4f792f12-1623-3844-84f5-b583a713bde6.roa (raw, json)
Hash identifier: hyotHnGMlmSQAokqIN5MyGYxr2mT4omlzHKLFHv8k3c=
Subject key identifier: CC:DA:93:3E:EF:25:0D:2B:75:76:5E:7E:1A:1C:00:5F:7B:B0:6C:5F
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285849244E9BEB3C668723293B3F00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f792f12-1623-3844-84f5-b583a713bde6.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.3.102.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:9b:eb:3c:66:87:23:29:3b:3f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=a9d8b5a2-16f5-4a8d-b76f-cc2509f114df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c7:00:08:60:0e:ac:82:9d:10:d2:d3:9c:76:
ed:0f:7d:5f:23:34:13:88:af:67:c9:0b:76:c1:0e:
87:21:5c:10:86:3c:f0:6e:e8:cf:e0:c4:e7:a6:63:
2b:c0:33:3a:d5:cf:d1:53:fa:84:89:f5:03:84:af:
cf:e9:ff:62:c2:36:7c:9f:74:05:e8:f5:86:f4:2a:
64:e0:04:9d:e6:bb:b5:36:cb:c7:ff:ce:6b:50:69:
1b:c4:9b:95:7a:d2:f5:ac:62:4e:d7:f3:5a:bf:1b:
a7:87:20:ec:63:66:45:aa:0b:b3:d3:3e:d9:8f:77:
f8:69:1a:60:20:17:a7:02:71:c5:55:01:a5:c6:32:
7c:4f:5f:ba:3e:db:88:a5:64:9a:55:0d:96:3e:e4:
c2:c0:4a:6a:42:30:ab:e2:82:2c:0c:fb:cb:ae:61:
cb:a2:d1:b3:ee:fa:01:a0:a4:2f:78:e9:f6:ab:17:
f9:03:a2:d1:f0:81:3a:47:77:36:48:75:72:21:5d:
4c:5e:90:8e:30:8b:89:bc:e0:14:a4:f3:3b:70:13:
49:35:e2:95:9b:aa:31:76:4d:9a:e8:c8:7f:2d:cc:
9b:0d:32:3a:1e:61:ce:cf:4a:79:44:88:f4:06:a8:
98:c6:f9:c9:4e:87:72:0a:26:97:a5:e3:16:ad:90:
b4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:DA:93:3E:EF:25:0D:2B:75:76:5E:7E:1A:1C:00:5F:7B:B0:6C:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f792f12-1623-3844-84f5-b583a713bde6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.3.102.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:b3:bb:06:e8:76:fe:d7:44:21:58:e2:76:f4:f0:31:a3:7b:
67:76:22:2d:ed:d1:f9:b5:4c:d9:9c:df:9c:b5:e7:f4:01:7e:
b2:09:ad:2d:57:94:1d:71:2f:c1:2d:73:76:e4:84:84:4f:29:
60:94:09:1a:bf:5d:d8:e6:2b:a1:76:a5:35:75:14:8b:fc:57:
98:2f:f3:fc:90:ad:18:c7:9e:f1:d8:5f:f2:fe:2c:96:4d:e9:
8c:68:ea:61:7a:1f:79:53:a3:5b:69:5e:e9:33:f9:1d:51:38:
fb:e8:f0:31:bb:4c:6d:a4:75:2f:36:81:8f:c3:bd:fc:d9:7b:
71:d0:a6:cf:18:93:f8:a5:2d:4e:be:69:b5:2b:9e:af:f7:0e:
01:06:fc:5e:64:8b:82:ea:24:7a:ca:bb:c3:e8:f0:1d:f9:16:
d7:fb:bc:27:14:04:e9:45:9c:59:e7:d4:c9:3e:12:f9:c2:22:
2a:0d:36:69:3b:1a:e0:e8:61:ac:50:2d:30:65:57:9e:04:89:
42:ca:22:fc:e4:08:a8:07:6c:d6:04:44:63:c6:67:ca:2c:fb:
a1:e1:8d:e1:b3:92:2e:a1:4e:a4:fd:1b:90:86:ec:31:e0:03:
e5:56:45:57:6a:3c:2e:30:de:17:6c:2a:37:b0:cf:24:1c:88:
ab:57:fc:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:31:42 2025 by rpki-client