Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b363d1d8-0b2c-3b45-80c9-e5db03b424f4.roa
File: b363d1d8-0b2c-3b45-80c9-e5db03b424f4.roa (raw, json)
Hash identifier: S/QXtjq4JJ6ukQiRic6OxAtZ2ub+HTMOpu1gv85iGeg=
Subject key identifier: 65:FF:4A:B5:11:18:56:02:57:76:06:6A:88:A0:B1:32:94:31:9A:94
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848DEA13155ED3032C98E2E0A00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b363d1d8-0b2c-3b45-80c9-e5db03b424f4.roa
Signing time: Thu 13 Feb 2025 14:00:50 +0000
ROA not before: Thu 13 Feb 2025 14:00:50 +0000
ROA not after: Wed 14 May 2025 13:00:50 +0000
asID: 15169
IP address blocks: 108.177.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 07 Apr 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:de:a1:31:55:ed:30:32:c9:8e:2e:0a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 13 14:00:50 2025 GMT
Not After : May 14 13:00:50 2025 GMT
Subject: CN=02472efe-df27-4869-85c3-b0e3d503f464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:1b:17:85:c2:d8:e5:5d:72:3b:fe:4d:0f:ee:
a9:69:23:da:87:a8:69:07:e3:10:10:a4:f0:d7:c8:
d3:39:83:00:5c:b5:01:a1:95:7b:c6:8f:ce:00:30:
2d:f7:e4:27:e8:bb:ba:2e:4d:dd:09:68:8c:94:10:
ab:6c:f9:49:d7:56:5b:d7:6b:73:a1:d2:a4:fe:ae:
43:1a:09:b4:44:b7:f8:47:2a:62:ae:8e:83:12:fa:
2e:11:23:e2:03:c4:d0:cc:45:d5:5d:29:36:a5:7f:
8c:f6:cb:23:df:b2:18:e9:25:85:a1:5b:27:e1:4a:
61:3e:38:a0:e0:fa:b0:8e:af:6f:b9:8c:7b:cc:97:
32:4c:6a:b1:1b:50:49:0d:c1:f6:59:db:e8:cb:6f:
3d:86:72:16:37:77:c5:0c:fc:18:e2:1c:85:bb:f6:
84:7c:bc:26:b8:b5:ae:28:c7:28:a7:26:c6:8d:c9:
83:eb:e4:07:35:8d:79:85:4e:d5:25:e0:46:9d:95:
c4:68:86:05:d0:c1:64:00:3f:54:9a:0f:c0:1f:4e:
25:96:f0:77:ae:25:5e:31:68:7e:d7:87:4c:a2:f3:
f8:6d:b4:fe:38:37:07:e3:ec:2a:41:8f:e5:c4:e6:
fb:27:c5:2c:77:ed:98:82:0b:28:46:4b:5f:08:54:
ad:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:FF:4A:B5:11:18:56:02:57:76:06:6A:88:A0:B1:32:94:31:9A:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b363d1d8-0b2c-3b45-80c9-e5db03b424f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
108.177.115.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:6a:19:50:2a:7f:7c:a4:f6:c8:19:03:f3:4b:ef:4c:1c:5f:
53:8e:eb:1a:3e:4d:87:18:4d:d1:d5:08:df:a8:84:4b:aa:4b:
8e:b3:4a:e1:09:19:e4:14:de:c6:ff:62:af:f4:a3:df:ec:3b:
35:2e:60:86:76:a3:a0:cf:28:b4:dc:71:cf:e2:3e:7e:84:e1:
21:95:08:37:3d:b2:99:fc:b5:c9:a3:a5:94:93:24:97:56:5b:
ca:9f:b6:f7:18:23:15:45:26:6c:11:32:c2:ec:2f:b0:22:ce:
e0:e9:0e:a7:52:22:49:bb:cd:04:a9:f7:00:d4:c4:37:59:27:
5f:6a:ea:77:ee:5f:57:29:f8:ce:4c:00:c8:7a:63:3f:0e:fe:
26:6e:47:ab:5b:6f:cc:7f:46:9d:7a:3a:da:9f:ec:ce:42:5d:
27:1d:0d:38:a4:a3:90:7d:d9:5f:b6:92:0a:07:28:4c:25:36:
99:a9:9d:79:d0:17:df:61:5c:af:01:51:07:ae:7a:c1:43:af:
9d:11:f8:72:9d:55:93:fc:48:2c:1e:bb:3a:c0:26:f2:b6:af:
66:a5:2f:fd:58:ec:e4:cd:b0:05:6e:7d:75:75:1f:76:b9:c1:
a7:c1:d7:7e:75:4e:ec:ca:03:26:04:e9:5c:8f:a3:fd:69:bd:
00:b1:88:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:43:10 2025 by rpki-client