Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/762ccf37-8de8-37bd-9ce9-b4a4dbe1ccf5.roa
File: 762ccf37-8de8-37bd-9ce9-b4a4dbe1ccf5.roa (raw, json)
Hash identifier: oLAu9sR7vtvDE1i4pWpO/evbxg1n1wBV4yASbEbTZqc=
Subject key identifier: 38:13:C9:52:DA:82:AD:12:7F:32:81:1F:1F:39:56:5D:AF:49:B3:06
Certificate issuer: /CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380
Certificate serial: 010D0C9F432858493C0926424417B05DB9272A80
Authority key identifier: EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/762ccf37-8de8-37bd-9ce9-b4a4dbe1ccf5.roa
Signing time: Wed 19 Mar 2025 01:00:40 +0000
ROA not before: Wed 19 Mar 2025 01:00:40 +0000
ROA not after: Tue 17 Jun 2025 01:00:40 +0000
asID: 14618
IP address blocks: 164.55.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3c:09:26:42:44:17:b0:5d:b9:27:2a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380
Validity
Not Before: Mar 19 01:00:40 2025 GMT
Not After : Jun 17 01:00:40 2025 GMT
Subject: CN=595bd83a-c966-4312-8cc9-60eafff2994f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4d:ab:9e:51:50:c6:74:d6:8a:4d:43:a8:a8:
93:20:0f:ae:26:f7:cb:7e:f2:43:9f:8d:09:5e:50:
d0:b8:69:10:47:f8:20:2a:bb:e4:14:78:8c:49:4f:
49:68:61:18:1b:c6:ae:e5:5f:14:b6:f6:5f:6e:db:
93:05:a5:af:82:86:2b:df:dd:ed:3a:39:b3:43:9e:
37:20:4c:d2:93:04:12:dc:8d:5c:8c:2f:85:36:e2:
44:0e:9b:89:c7:48:ff:c3:be:c0:a1:09:df:74:27:
89:a6:73:cd:01:6b:ad:dc:d4:c8:c9:5f:aa:64:ef:
ef:d1:9e:39:b5:54:07:ed:da:1f:b5:a4:16:36:28:
b5:cc:40:b5:9b:90:dd:b2:78:ec:d8:e9:93:36:a5:
1d:a3:59:bb:33:b7:db:09:0e:b3:08:c1:15:a5:53:
5e:a3:28:e6:a0:9e:09:ba:c5:1e:75:70:ca:20:9c:
91:08:f9:60:2d:c1:fd:1a:10:31:c9:37:d3:77:2b:
c6:4a:bb:a4:9b:e8:87:ea:db:52:8f:83:79:59:14:
e3:d8:8c:68:1a:10:92:0f:21:d5:2a:26:bd:72:72:
3b:74:76:93:14:7b:c9:4f:cf:06:d0:d6:5c:fd:e0:
33:20:6f:5c:e2:46:10:23:5e:97:e8:2f:83:84:ea:
5d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:13:C9:52:DA:82:AD:12:7F:32:81:1F:1F:39:56:5D:AF:49:B3:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/762ccf37-8de8-37bd-9ce9-b4a4dbe1ccf5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl
X509v3 Authority Key Identifier:
keyid:EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer
sbgp-ipAddrBlock: critical
IPv4:
164.55.244.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:d5:3f:5b:58:4a:df:77:20:5a:21:2d:83:81:6e:6d:39:84:
68:96:c2:a7:64:3c:35:96:02:43:fc:4e:1e:a0:12:e1:74:fa:
bd:5a:ee:51:04:36:0e:6b:16:19:31:ec:df:f3:89:80:bb:4d:
65:da:a8:e9:57:5f:eb:00:31:b6:4b:bf:e8:12:c4:a7:3d:33:
be:43:fd:22:5a:08:b8:07:52:7f:f3:2b:e2:0c:6d:21:8f:a9:
f6:ff:c7:30:e6:9c:16:ee:41:ab:08:8e:8c:d8:2b:e8:88:97:
52:62:39:50:27:41:ce:83:64:65:84:e7:16:3b:9a:0a:a2:64:
c0:a5:5a:23:c7:20:3b:cc:d9:d7:8b:4c:3c:9d:7e:d0:41:1a:
b2:71:04:6a:b2:e6:4e:63:5e:6a:0d:e5:08:2a:28:25:e8:ce:
b2:45:53:a8:be:e6:6c:df:92:41:bd:45:c0:b7:17:4a:32:02:
8a:3f:b1:12:40:56:d3:ad:a0:f0:9c:3d:c1:d7:08:cf:6d:07:
87:1b:af:8c:54:78:3f:20:e3:65:aa:05:e9:2e:3f:a1:11:c3:
7f:61:e2:3a:28:3d:59:f6:37:4d:90:bc:b3:c4:e2:b4:08:d5:
66:59:de:85:d2:9d:2e:81:fe:a0:5c:b8:26:ce:b8:41:c0:6a:
9e:ba:2a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:13:14 2025 by rpki-client