Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2d6f68e2-ec00-3459-a53e-7ad919136068.roa
File: 2d6f68e2-ec00-3459-a53e-7ad919136068.roa (raw, json)
Hash identifier: 5ByqkIbEJ2ENFYHGyGyWwX/NM/knGEhz1PmXGWeOP6c=
Subject key identifier: E7:B5:0E:A8:08:F3:C5:24:AB:DB:3C:3E:BB:17:0D:4D:74:B6:0C:2E
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F4328584917DC2C6D2786B0C307FA1D80
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2d6f68e2-ec00-3459-a53e-7ad919136068.roa
Signing time: Thu 06 Mar 2025 02:00:39 +0000
ROA not before: Thu 06 Mar 2025 02:00:39 +0000
ROA not after: Wed 04 Jun 2025 01:00:39 +0000
asID: 16509
IP address blocks: 130.137.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 09 Apr 2025 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:17:dc:2c:6d:27:86:b0:c3:07:fa:1d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Mar 6 02:00:39 2025 GMT
Not After : Jun 4 01:00:39 2025 GMT
Subject: CN=296dc896-378a-4392-b07a-6e163389f8c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4c:c6:c5:df:6e:3c:46:33:98:30:df:8f:54:
39:43:18:1a:e5:de:f3:c3:e6:75:d7:d0:b9:5b:cd:
61:11:15:3e:57:56:a3:fb:a3:97:30:70:9b:bf:1a:
f1:1c:e5:4e:4c:2d:9c:ba:61:06:4c:6d:69:20:30:
d3:e8:6f:a9:6f:7e:fa:ad:09:db:16:79:d8:eb:bd:
5f:6a:57:b4:93:63:0d:ff:19:84:85:bb:5d:59:99:
07:78:39:8d:5f:8c:af:4a:54:dd:20:8e:4f:7a:f3:
2a:88:14:b9:7b:2d:69:17:1c:d8:f6:e0:ed:da:2f:
70:db:30:d7:53:f4:5d:89:5a:4e:06:5e:57:0a:09:
72:1e:92:b5:27:d2:23:94:7d:1f:70:3f:a3:dd:61:
fa:f0:77:75:79:f9:34:0b:9c:ba:f7:7e:12:f3:75:
3c:f0:63:f3:a6:f9:fa:0e:1c:1e:79:59:fd:7b:2e:
cb:c8:81:4c:42:79:b9:d3:5d:52:6e:97:e2:60:31:
88:cb:05:c3:0b:76:35:0c:f7:74:56:af:8a:fd:2e:
f9:a6:0f:a7:06:ff:ce:93:cb:eb:1e:74:89:bb:41:
66:e7:20:8e:49:b9:e4:ff:ce:ce:3c:8d:bd:e7:cd:
9d:fb:ec:6a:42:10:3a:7e:4b:f6:d3:ad:05:14:4f:
8d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B5:0E:A8:08:F3:C5:24:AB:DB:3C:3E:BB:17:0D:4D:74:B6:0C:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2d6f68e2-ec00-3459-a53e-7ad919136068.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.204.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:6a:35:90:b5:ce:96:ec:f3:3b:ed:79:ab:6e:6d:55:ea:df:
bd:75:88:00:5f:1b:62:f7:16:62:47:af:d0:89:0e:f5:ff:46:
b4:70:c1:66:ab:9a:f6:20:0a:ae:11:4d:e5:0b:9e:a6:32:a4:
79:68:d7:58:04:c7:cb:9c:97:5b:04:52:24:5f:32:80:3f:49:
22:fe:5c:f7:9e:b8:41:ef:e0:46:06:a7:1d:f0:a5:d7:01:9d:
1d:03:35:f2:6f:2e:9f:1d:ac:51:09:53:7a:c8:d3:33:19:a1:
c4:97:3f:d0:db:54:29:27:2a:ed:ef:a5:53:f5:4b:03:3b:6e:
b0:2c:56:7b:db:43:7d:32:29:93:9e:cb:e8:bb:52:f7:3a:89:
ca:f2:a6:ed:53:46:51:11:08:9a:be:8a:1b:0d:d7:65:f8:93:
b8:98:80:32:3d:47:cd:d9:4d:8d:be:25:1f:dc:cd:ea:63:dc:
dd:cc:3f:6f:78:5f:d0:7e:3a:36:01:38:3b:5d:20:0d:4f:34:
30:67:09:65:83:09:4b:d7:3b:6e:9d:77:ff:73:8a:af:f5:71:
b6:06:0f:62:51:b3:58:36:9f:50:b5:bd:8a:4c:12:72:63:6d:
4c:0a:4f:ee:3e:3d:ce:f7:57:25:36:a5:e2:55:70:0d:35:cf:
13:b6:2d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 19:56:56 2025 by rpki-client