Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e256b423-1306-3786-9a55-46b4dcbcddf4.roa
File: e256b423-1306-3786-9a55-46b4dcbcddf4.roa (raw, json)
Hash identifier: FsOjuayZHH3BcqGIrKuU1t+cYqRiZUzDq64ckowbXqc=
Subject key identifier: 4A:B6:A0:7E:B2:34:E5:CA:45:ED:F0:0E:CC:C5:58:E2:BB:E7:8E:BD
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848BBBB999DCDB86EC82B662540
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e256b423-1306-3786-9a55-46b4dcbcddf4.roa
Signing time: Sat 01 Feb 2025 02:00:39 +0000
ROA not before: Sat 01 Feb 2025 02:00:39 +0000
ROA not after: Fri 02 May 2025 01:00:39 +0000
asID: 16625
IP address blocks: 23.213.216.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bb:bb:99:9d:cd:b8:6e:c8:2b:66:25:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 1 02:00:39 2025 GMT
Not After : May 2 01:00:39 2025 GMT
Subject: CN=d02f834e-70aa-4140-bf1e-68a96bf0ed01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b6:3c:76:42:9c:c4:b0:6d:2a:ae:76:f1:d6:
fe:de:02:e8:b1:90:bc:1e:97:c5:c9:61:16:8d:43:
e1:8f:65:c5:c0:5d:85:65:54:cf:28:a6:4f:40:05:
f0:6b:47:a2:d5:0a:1a:81:0f:60:2e:e3:a0:b5:14:
4a:73:36:8c:8e:c0:f7:a3:32:86:98:b0:19:82:dc:
d5:2e:7b:e5:17:4d:98:04:01:94:4a:3c:9f:88:3a:
73:13:63:3b:01:5d:37:35:a3:e8:d0:c0:d3:53:72:
0f:21:d9:8a:07:2b:6f:02:9c:75:f8:23:16:65:02:
4d:7a:23:c3:d7:a3:e4:fd:de:c3:a4:95:75:ed:6f:
79:2b:0a:83:a6:68:cd:25:c0:11:ff:34:ab:9d:e6:
45:df:96:92:f2:7f:2d:6a:90:b9:bc:68:6a:d4:2c:
cd:31:59:79:f6:03:83:dc:d3:c3:c6:30:a1:35:4f:
32:f4:f1:27:86:10:9b:29:12:cc:a2:0a:73:1e:3f:
72:e7:d8:25:86:83:58:c3:f7:8e:75:15:9d:eb:0e:
ca:3a:5e:a1:23:a9:53:6f:84:15:5f:f0:da:79:75:
6d:8f:ff:35:10:ee:4b:f9:94:ed:ec:60:e8:8a:84:
67:2e:fa:35:7d:ae:97:94:86:b6:1b:f2:39:99:84:
a8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B6:A0:7E:B2:34:E5:CA:45:ED:F0:0E:CC:C5:58:E2:BB:E7:8E:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e256b423-1306-3786-9a55-46b4dcbcddf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.213.216.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:32:99:c9:43:e4:da:04:95:42:63:b2:2d:3f:4c:1e:5f:2a:
00:05:d0:05:7d:3a:9d:c8:44:44:c5:19:09:a5:ca:a1:ba:b6:
ae:51:aa:65:cf:66:60:fe:af:ab:e4:42:fe:e5:12:0e:8d:63:
be:91:ab:2e:a1:e5:1c:c8:35:4b:58:f2:87:e2:a6:8b:52:0b:
85:06:19:0a:f8:ce:e7:e3:b2:63:61:9f:a8:9c:1a:50:a8:d1:
77:87:7a:4d:41:7f:97:59:17:58:51:c1:2c:a5:01:3b:2a:56:
d4:be:08:b1:f0:b6:ee:86:94:4e:cb:9a:44:a7:29:5e:11:1b:
7e:28:76:05:b7:52:17:f7:3f:70:b1:d7:9d:56:69:78:5f:96:
9d:0e:0c:7e:e0:c6:a9:00:bc:3d:1e:3c:7e:83:ef:c0:51:5a:
c2:97:24:24:7c:3e:21:ca:19:03:9b:7b:63:a0:04:b4:84:8c:
92:c9:74:cc:28:12:97:ae:b6:c6:6f:5b:2b:39:e5:57:43:a5:
27:d8:ca:aa:b9:53:05:55:57:c0:76:ed:31:84:b2:b5:50:10:
a0:ae:8c:63:d1:c6:2b:98:0b:61:62:54:b3:2a:c4:35:7a:fd:
2f:a8:b2:92:75:d1:95:9d:3b:98:94:35:1a:25:91:53:89:1d:
52:a9:cb:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:31:50 2025 by rpki-client