Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7901f39e-c07f-3b6b-b41a-95477156131f.roa
File: 7901f39e-c07f-3b6b-b41a-95477156131f.roa (raw, json)
Hash identifier: cnsXipT9hKt9mhstW9B2ii6/G4Cre2ZedcNf09sjkdM=
Subject key identifier: E3:A5:7D:52:CC:76:09:CD:30:D3:D4:00:09:7B:78:23:71:44:EC:38
Certificate issuer: /CN=7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f
Certificate serial: 010D0C9F432858494CC945B3AD15F26777565C80
Authority key identifier: 58:3E:E9:C4:0D:90:D1:B2:B5:1F:30:DF:0D:0E:F3:BD:3D:61:CD:A2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7901f39e-c07f-3b6b-b41a-95477156131f.roa
Signing time: Tue 25 Mar 2025 01:00:40 +0000
ROA not before: Tue 25 Mar 2025 01:00:40 +0000
ROA not after: Mon 23 Jun 2025 01:00:40 +0000
asID: 19905
IP address blocks: 216.144.128.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 13 Apr 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4c:c9:45:b3:ad:15:f2:67:77:56:5c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f
Validity
Not Before: Mar 25 01:00:40 2025 GMT
Not After : Jun 23 01:00:40 2025 GMT
Subject: CN=27ba7d12-17c8-43bb-a37c-aab45ddbf470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3e:cd:aa:3d:96:1a:85:80:e5:93:bb:f3:37:
a4:f2:d5:30:97:76:f2:d0:68:c4:02:5e:22:c2:e0:
4d:b4:cc:6d:e4:1e:47:49:3c:23:09:94:7e:82:7a:
09:29:88:34:6f:95:3b:42:af:2c:7e:cd:be:8c:a3:
55:e9:06:b6:44:90:23:c4:d0:e4:82:51:5d:f7:4a:
c4:1d:c9:a2:bc:6f:97:e4:e8:96:66:39:18:01:bf:
c2:2c:42:cd:32:c5:bf:6d:cf:37:02:39:56:64:d2:
53:e3:d6:a0:ed:76:6c:d3:8c:91:d3:67:17:4b:7d:
8e:a6:d0:ba:c6:40:bf:5b:be:dd:4b:e2:b2:8b:71:
e2:4f:2d:ee:ea:12:49:2d:de:f7:b7:0c:d1:79:18:
06:89:e7:d9:44:40:ad:28:70:8e:ea:f9:f3:5d:4e:
9a:ee:38:f5:6a:31:e5:54:98:5a:88:e6:5a:21:1d:
8f:15:a8:67:8a:13:43:86:3b:84:d7:bc:59:c0:32:
72:f9:5e:7d:fc:b8:bb:9c:02:69:92:5c:0f:5c:d4:
ff:fd:03:e4:47:d8:d0:55:6c:86:d8:fe:fa:92:54:
1e:e8:06:c9:d4:9d:eb:cc:86:55:9f:a4:f4:75:a5:
83:65:0b:21:af:8d:03:0d:df:9c:8e:b2:34:02:c1:
0e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A5:7D:52:CC:76:09:CD:30:D3:D4:00:09:7B:78:23:71:44:EC:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7901f39e-c07f-3b6b-b41a-95477156131f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.crl
X509v3 Authority Key Identifier:
keyid:58:3E:E9:C4:0D:90:D1:B2:B5:1F:30:DF:0D:0E:F3:BD:3D:61:CD:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer
sbgp-ipAddrBlock: critical
IPv4:
216.144.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:91:ac:be:af:82:93:58:ab:87:31:76:5f:79:76:6d:f6:c1:
d3:60:0b:83:7e:5c:23:64:5e:91:b3:89:9c:f9:2a:96:49:20:
80:dd:85:d6:86:50:da:50:59:e0:35:c0:23:a5:b8:a2:64:47:
09:b9:a1:6d:a5:a7:ad:a2:de:ea:41:02:b6:dc:e9:47:c7:23:
09:fe:79:71:c2:b2:c2:9d:5a:0d:80:f5:02:f9:31:25:3e:a0:
6f:a7:be:eb:95:6e:d3:eb:46:dc:28:19:d0:7c:74:03:00:07:
2a:27:7e:cb:dd:fa:5c:6c:dc:94:91:bd:be:a7:a7:e5:08:02:
d5:0b:c1:8b:ed:ce:a9:32:a4:99:31:d6:f1:39:e4:d3:d7:9f:
13:42:62:da:35:07:94:cb:eb:0b:1f:74:27:19:4d:dc:d3:ca:
ac:d6:9e:a8:76:e3:c8:d4:c4:60:99:0c:62:67:3b:d0:d0:f2:
c1:1b:4e:52:d7:dd:ba:36:3e:0a:8b:ab:32:a5:66:d6:b4:7f:
54:c4:56:cf:e5:ec:49:7e:e7:78:62:cf:be:2a:00:f9:17:81:
18:7c:e7:5b:d4:38:6c:19:dd:24:bb:3a:d2:81:f5:31:e8:b0:
64:73:0a:69:12:0f:0e:a9:21:7b:ff:11:cf:dc:85:49:37:0b:
81:5d:0b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:53:58 2025 by rpki-client