Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0ab95e96-8746-3429-afda-e3610724329f.roa
File: 0ab95e96-8746-3429-afda-e3610724329f.roa (raw, json)
Hash identifier: juUjXp/mfBaAggVY0lfQBPH21H52cUAHUQ2eSeIiQ9I=
Subject key identifier: 9D:4C:85:8D:80:E8:36:23:8B:F5:89:83:AD:0E:D6:20:42:2D:62:E9
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C5817FAD10A016B708FD7780
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0ab95e96-8746-3429-afda-e3610724329f.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 15169
IP address blocks: 173.194.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 07 Apr 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:7f:ad:10:a0:16:b7:08:fd:77:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=a218ef10-88bc-4969-afce-cdc507f8ca4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7b:1a:b4:3b:e2:b8:b5:b3:ed:3e:ef:91:a8:
68:79:d1:5b:c3:19:a9:4c:f1:8f:2f:16:c8:d0:87:
47:1b:16:58:90:4d:ed:bd:2c:1d:05:9e:2a:6d:7e:
5e:88:77:9f:64:1f:3a:28:28:9a:64:f2:af:c3:89:
ed:46:57:39:ad:9d:1b:1d:a5:8a:eb:55:12:9c:3a:
d4:9a:75:b4:b8:52:63:71:de:58:96:35:66:c0:c0:
82:92:b3:78:d8:d1:34:43:61:4f:5e:53:49:19:ad:
be:1a:21:7a:3b:18:86:e9:42:8f:24:e7:e0:d1:28:
b7:93:06:64:4f:62:b6:1f:1e:fb:2f:4a:98:47:4d:
9b:d4:82:e1:49:29:2e:1a:db:60:67:41:94:10:49:
0e:e7:db:57:5c:36:c0:fa:bf:13:ea:67:cf:ed:df:
cb:a8:e1:60:77:79:78:26:69:8c:88:8d:3f:8c:c7:
02:a3:8c:31:18:21:72:a0:f4:da:ad:24:41:7c:73:
01:bb:cf:64:67:ed:d6:91:1e:ef:e4:c6:03:e3:42:
af:58:6d:31:0f:30:be:38:4b:a3:68:02:10:3b:77:
bc:bc:eb:d3:f0:dc:63:e4:53:8f:94:62:1e:bb:4b:
48:03:14:42:f4:42:27:77:d9:95:09:50:ec:f8:38:
5a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:4C:85:8D:80:E8:36:23:8B:F5:89:83:AD:0E:D6:20:42:2D:62:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0ab95e96-8746-3429-afda-e3610724329f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
173.194.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:0a:2e:fe:e2:03:69:ad:62:86:c2:bc:7e:de:03:bb:e9:cb:
4f:aa:df:ea:3d:42:a5:08:8c:1f:62:c6:b2:0f:8e:4c:af:2e:
c4:46:68:01:3a:6a:8f:c7:3d:6e:33:e7:fa:5e:5b:b6:1b:29:
e5:35:61:59:b4:7f:87:c7:2a:5c:77:e7:75:b9:76:f6:55:b2:
f2:0c:4c:7a:18:1e:65:fb:67:20:13:1d:f8:21:11:64:09:69:
e2:50:bd:8b:d3:40:7d:64:df:cb:a0:d5:ed:d1:98:54:02:97:
a9:ff:01:0c:b4:a9:ff:02:26:24:e5:3c:80:b6:c1:62:ec:f0:
42:9e:8c:bc:19:d9:5a:97:7f:54:56:e3:5e:e4:f9:77:b3:0b:
af:1b:cc:55:b1:3a:ef:3a:12:10:a6:13:7c:85:74:83:56:c0:
b9:08:cc:0b:3c:37:45:6d:0f:86:77:ff:ce:d7:b7:40:41:fd:
a3:33:5b:a4:32:01:6b:11:e2:a1:74:f4:76:aa:e2:9f:c7:15:
da:30:75:eb:8c:ff:82:cc:01:30:2a:c9:ba:92:a9:6d:19:27:
d6:e5:1a:87:b0:63:a9:df:55:3c:3f:0b:e4:a9:5b:c5:4a:82:
04:19:6d:53:8e:f3:97:f8:30:df:1c:bd:e8:e3:cf:6b:d7:35:
dd:ad:43:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:28:23 2025 by rpki-client