Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/738625c3-3912-3bfa-a763-9902bf2e6b9c.roa
File: 738625c3-3912-3bfa-a763-9902bf2e6b9c.roa (raw, json)
Hash identifier: Nuz1fsgWEaAbAf86wt0/pphKloTkMEQcz0V+wQ598RY=
Subject key identifier: 96:C6:96:DA:87:94:83:5E:2E:99:ED:56:0C:AA:BF:B1:ED:EA:38:B1
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858497279C07F260D68FBDC84CA40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/738625c3-3912-3bfa-a763-9902bf2e6b9c.roa
Signing time: Mon 07 Apr 2025 13:00:59 +0000
ROA not before: Mon 07 Apr 2025 13:00:59 +0000
ROA not after: Sun 06 Jul 2025 13:00:59 +0000
asID: 20940
IP address blocks: 23.203.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:72:79:c0:7f:26:0d:68:fb:dc:84:ca:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Apr 7 13:00:59 2025 GMT
Not After : Jul 6 13:00:59 2025 GMT
Subject: CN=9675ed75-a1e9-46d6-9296-887f87b5904d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:36:63:d1:3f:32:68:3d:2e:21:31:de:b7:0b:
0d:fc:17:03:82:85:73:3d:50:b1:bb:20:85:bc:ea:
a0:43:a8:4c:94:2e:a8:77:72:9e:6d:73:4e:d4:cd:
62:57:90:d3:df:73:2f:95:9c:68:b5:75:c8:77:44:
ee:57:8d:83:5c:93:a4:01:64:ad:76:6d:ed:10:1b:
ae:f8:5d:42:2c:3c:86:3e:cc:84:60:8e:6e:3e:53:
7a:14:21:9a:1b:b0:cb:e0:c3:f2:0b:1f:b0:11:29:
50:1c:34:72:7e:fa:67:45:c7:85:8f:cf:dc:ca:a2:
5d:36:9c:30:d2:4a:ba:68:59:ea:bb:85:27:7e:7d:
db:4b:22:d3:5b:9b:6d:57:a1:36:6a:05:a9:aa:2f:
1d:09:17:f0:78:83:a5:cd:22:c4:ee:d2:2e:6c:a6:
2a:c9:bc:96:b2:84:e8:bd:62:54:46:17:2a:34:be:
84:ba:ad:4a:59:88:c3:1f:67:01:3a:ca:e5:c5:42:
54:6f:47:32:07:44:5e:ce:37:7c:d5:2e:58:71:56:
33:33:d3:85:d7:98:1e:f9:61:fc:47:bc:51:3f:b7:
ce:f6:64:ba:52:e2:3f:37:be:9c:6b:5f:a7:b7:42:
9f:a4:cc:bd:b7:b4:11:75:97:f6:69:21:30:1f:aa:
4f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C6:96:DA:87:94:83:5E:2E:99:ED:56:0C:AA:BF:B1:ED:EA:38:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/738625c3-3912-3bfa-a763-9902bf2e6b9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.203.149.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:12:cf:d1:9a:b9:7d:91:72:b3:01:4d:86:5f:63:cf:7c:34:
f7:6a:df:b2:8f:9c:18:d4:04:39:40:ad:70:97:84:17:03:cc:
f9:f4:b3:c7:c1:e1:56:01:ea:af:89:4e:f8:b8:c5:2a:cf:52:
10:6c:28:62:92:63:76:a4:be:26:88:a0:5a:53:26:15:ba:fb:
a0:80:a8:b7:a6:0a:62:a7:05:91:73:b9:23:a8:12:a2:90:8b:
ef:95:89:ed:72:a9:7e:6e:ab:b4:5f:82:66:00:81:ac:d1:b0:
03:11:14:9f:c0:bc:cc:aa:54:d6:36:cc:8f:4c:6a:52:bb:12:
44:34:3d:2e:97:76:02:b4:91:14:c3:97:0f:7a:5f:02:b6:fe:
44:9e:0d:59:0c:16:d2:8c:22:34:9e:a8:a7:08:ca:88:0f:47:
9c:a4:c6:75:f7:02:7e:57:70:9c:ef:43:02:be:a9:aa:31:f3:
bf:08:9a:e6:a8:5b:39:b0:ef:b6:ad:82:3c:91:15:71:b6:64:
2e:72:8d:bb:52:d9:91:1b:85:6a:9e:70:37:5c:53:90:79:89:
e1:9b:cf:86:c8:ed:5a:b4:39:d6:95:b2:a1:22:a0:d9:70:ce:
0e:9a:5d:91:2e:2a:fd:64:73:0b:9d:73:74:ab:33:d6:47:1c:
a8:26:f5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:05:45 2025 by rpki-client