Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/15e3eba3-f991-31c9-9ab6-28f5332ca396.roa
File: 15e3eba3-f991-31c9-9ab6-28f5332ca396.roa (raw, json)
Hash identifier: 6CRtA4LA9tW+PqyzJoChn33qgmDaKizPMIeiaDLSXkc=
Subject key identifier: 9D:5B:85:E7:31:61:16:90:97:42:54:8E:FA:22:90:74:2B:2A:F5:6A
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848DEA1269E596612A8ACD58000
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/15e3eba3-f991-31c9-9ab6-28f5332ca396.roa
Signing time: Thu 13 Feb 2025 14:00:50 +0000
ROA not before: Thu 13 Feb 2025 14:00:50 +0000
ROA not after: Wed 14 May 2025 13:00:50 +0000
asID: 15169
IP address blocks: 108.177.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 07 Apr 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:de:a1:26:9e:59:66:12:a8:ac:d5:80:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 13 14:00:50 2025 GMT
Not After : May 14 13:00:50 2025 GMT
Subject: CN=f7b4aaf0-c461-4966-9b0c-76a0d5284f99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:eb:6c:7d:c6:72:a3:79:9a:1e:05:01:e1:fb:
49:6a:9d:c4:cb:60:c8:ec:89:f1:ae:13:77:89:58:
d2:34:e8:45:57:6a:8d:b9:2d:3d:3e:18:05:54:ca:
41:ec:69:54:a4:f8:4f:f9:cd:97:97:c5:6c:32:ff:
4e:9d:e8:fe:0a:8a:f4:a4:13:f4:e7:df:17:10:52:
01:93:f1:6f:3e:7a:0f:29:02:93:29:ca:b3:36:d4:
08:53:af:e3:8f:37:84:38:fe:36:34:82:a7:12:31:
fe:a2:dc:49:49:de:02:e1:b3:48:bc:71:05:9d:5d:
84:89:ab:83:82:8f:14:59:20:5a:e7:90:97:11:2c:
27:b9:f9:f2:82:49:6b:37:6e:2c:53:ef:f6:c5:cd:
ea:9e:ab:25:5a:13:92:cd:81:f0:ab:b3:79:27:6f:
bf:6c:12:ba:26:69:34:9e:dd:6a:59:1d:ee:0e:06:
ec:ab:0c:6b:4b:56:6e:d0:72:5a:5c:e0:88:44:26:
6c:77:bc:cb:58:b8:3a:fe:66:74:d4:90:21:b8:69:
25:97:88:60:66:08:a6:f3:80:95:d6:b9:05:72:8c:
66:7a:c6:9f:be:84:ff:c4:c1:66:c0:9a:2a:85:8e:
cf:97:f2:36:40:56:fc:fd:85:23:1d:ab:40:8c:de:
61:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:5B:85:E7:31:61:16:90:97:42:54:8E:FA:22:90:74:2B:2A:F5:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/15e3eba3-f991-31c9-9ab6-28f5332ca396.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
108.177.116.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:63:9a:58:8a:2a:b7:ef:8f:b9:a5:22:ee:e0:a3:77:17:66:
66:bc:23:8b:f5:8a:d4:f6:ee:9e:76:2a:74:15:ca:a8:e6:88:
fb:27:65:91:d2:72:40:05:3a:c4:83:28:1e:ef:ce:92:bb:e1:
57:cf:eb:59:fb:aa:ba:e2:ff:93:23:7e:41:79:15:55:86:36:
5f:bc:e6:ba:7b:c1:90:4a:1c:e4:f9:34:33:5e:db:a1:41:c2:
ac:93:8b:b7:39:13:88:ed:f1:c0:56:72:e5:51:83:8b:d2:70:
ec:0f:35:84:0a:e6:a9:90:3e:38:65:0f:32:cc:ff:0e:b1:42:
58:ec:c5:b6:8f:6d:12:95:3f:65:2c:2c:76:cf:41:03:38:40:
9f:b6:b4:35:bd:44:9d:15:c9:2f:04:59:cb:e3:dc:93:85:b4:
1f:b4:15:1f:14:aa:e0:fe:8f:63:99:af:88:3d:c6:3e:7c:f4:
c9:4f:3d:0a:39:49:ee:09:9a:75:ac:e0:3b:07:9c:30:60:ff:
2a:6d:d7:42:3c:98:1d:30:56:93:7c:59:7b:04:3b:64:c5:22:
af:29:28:5e:bf:94:53:1b:25:83:4e:13:74:96:2d:ca:91:8b:
7b:30:6d:8f:e2:5b:7d:f5:3e:e8:86:cb:4e:2d:9e:88:7a:ef:
3e:1d:57:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:11:26 2025 by rpki-client