Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ce029dcb-bb98-4569-a98c-6f77af488b38/89ee2d13-6c49-3175-8eba-61bc2a010a2a.roa
File: 89ee2d13-6c49-3175-8eba-61bc2a010a2a.roa (raw, json)
Hash identifier: 2RHeEbjbCKgQORjMOrRin119yx/5hz+Qe+nsXie5V2M=
Subject key identifier: E6:4D:6D:58:1B:D7:02:29:61:65:C8:0A:C3:11:E2:9C:DD:C2:98:F7
Certificate issuer: /CN=ce029dcb-bb98-4569-a98c-6f77af488b38
Certificate serial: 010D0C9F43285848E59BC656A9D29B876D687980
Authority key identifier: C3:59:13:02:13:BC:6B:94:3D:09:71:76:E1:DB:8E:A7:37:96:DF:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ce029dcb-bb98-4569-a98c-6f77af488b38.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ce029dcb-bb98-4569-a98c-6f77af488b38/89ee2d13-6c49-3175-8eba-61bc2a010a2a.roa
Signing time: Sun 16 Feb 2025 02:00:40 +0000
ROA not before: Sun 16 Feb 2025 02:00:40 +0000
ROA not after: Sat 17 May 2025 01:00:40 +0000
asID: 14618
IP address blocks: 192.149.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ce029dcb-bb98-4569-a98c-6f77af488b38/ce029dcb-bb98-4569-a98c-6f77af488b38.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ce029dcb-bb98-4569-a98c-6f77af488b38/ce029dcb-bb98-4569-a98c-6f77af488b38.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ce029dcb-bb98-4569-a98c-6f77af488b38.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e5:9b:c6:56:a9:d2:9b:87:6d:68:79:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce029dcb-bb98-4569-a98c-6f77af488b38
Validity
Not Before: Feb 16 02:00:40 2025 GMT
Not After : May 17 01:00:40 2025 GMT
Subject: CN=915383b8-0e57-42ce-b194-21112b9239dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:0e:b7:2d:b6:2b:a9:5c:e1:eb:79:0f:15:42:
ec:b2:a9:10:74:c3:80:b9:96:db:d9:18:40:c6:02:
8b:04:e6:42:94:a4:5d:d3:44:58:41:40:1b:9e:a1:
38:ea:ae:63:01:b2:30:65:c3:ab:9f:fe:da:3e:58:
fd:2e:fb:6a:ea:57:bb:fd:a5:7c:50:91:e6:c8:19:
43:5e:60:75:79:64:49:23:85:9e:07:37:57:56:f4:
5a:70:5a:d3:1a:56:fd:f4:9a:d6:34:9e:f1:dc:e6:
12:91:4a:ac:a1:37:4c:67:de:e9:f0:44:94:74:1f:
b6:ff:50:2a:4e:c6:f5:70:22:cf:15:65:c8:f2:d0:
92:a5:99:7b:dc:12:e1:84:d9:81:a1:68:9b:08:d5:
c4:00:bc:2f:02:b1:0d:d2:3f:9e:62:b6:a5:45:16:
69:c8:46:be:f7:56:fe:89:8e:ee:19:de:f0:d8:80:
4b:37:2a:76:44:d6:f4:f2:6f:89:40:7f:5f:2d:56:
2a:c6:6d:3e:57:7e:32:57:10:12:a2:6f:51:0d:bc:
24:23:65:23:bb:c9:4b:45:54:67:07:27:3b:01:3c:
7f:2e:10:25:98:2f:8d:7a:cf:12:d3:f9:0e:20:4e:
87:ae:cf:f4:ec:d8:cc:1c:76:bd:8e:61:8b:a6:d5:
13:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:4D:6D:58:1B:D7:02:29:61:65:C8:0A:C3:11:E2:9C:DD:C2:98:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ce029dcb-bb98-4569-a98c-6f77af488b38/89ee2d13-6c49-3175-8eba-61bc2a010a2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ce029dcb-bb98-4569-a98c-6f77af488b38/ce029dcb-bb98-4569-a98c-6f77af488b38.crl
X509v3 Authority Key Identifier:
keyid:C3:59:13:02:13:BC:6B:94:3D:09:71:76:E1:DB:8E:A7:37:96:DF:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ce029dcb-bb98-4569-a98c-6f77af488b38.cer
sbgp-ipAddrBlock: critical
IPv4:
192.149.210.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:88:fe:54:9e:14:23:57:7a:f9:d6:d8:9c:e2:35:b0:36:83:
1e:35:8e:89:b9:3f:2d:7b:67:d2:7b:10:6e:e0:23:da:2f:3b:
26:04:ac:33:e9:fd:2a:d0:31:c5:0d:7e:bc:57:c5:27:71:d0:
7f:3f:5d:f4:09:ac:37:d4:5c:25:9b:a5:54:b8:35:76:94:35:
44:5a:fc:ea:89:74:bf:3a:79:ea:20:39:1e:4b:5c:67:40:c5:
5e:58:76:88:a6:be:93:fb:2b:14:a4:67:aa:ec:a2:ef:3d:34:
80:1d:01:ca:77:d3:73:72:98:ef:09:20:b4:f6:01:a8:30:0d:
c9:f7:fc:d5:b8:c0:4e:d4:50:78:ab:6b:95:ad:3c:ab:8b:b5:
b0:56:ec:bb:dc:13:de:cf:b9:4a:8f:9b:bc:04:54:d8:38:68:
53:4b:8b:f2:d5:d7:60:d9:5b:b6:e3:ed:04:ca:8b:cf:08:f4:
f0:b4:f4:f3:37:d9:62:c7:b1:7e:73:6c:53:cc:17:45:2d:7c:
30:a3:5d:ec:e1:6a:31:c2:bc:46:d7:31:0e:24:1b:f0:14:85:
81:aa:02:e8:93:88:a0:31:34:05:1c:c3:e3:26:3d:04:f9:5f:
0a:4b:79:df:58:7d:fa:70:0a:9c:2e:a5:1f:75:c4:24:bd:d8:
12:2c:e9:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:14:04 2025 by rpki-client