Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6957121d-8962-482d-982c-d123ff337caa/4b3dfca5-1d7d-39fc-b59b-b96c99607808.roa
File: 4b3dfca5-1d7d-39fc-b59b-b96c99607808.roa (raw, json)
Hash identifier: DBNbwwzNEXb6oLxyPAWyEoC8Tf19LQ9vXTZ1ddRhMNQ=
Subject key identifier: 79:D0:72:01:14:57:77:F1:EA:5B:61:7A:5D:61:33:CE:12:37:E7:80
Certificate issuer: /CN=6957121d-8962-482d-982c-d123ff337caa
Certificate serial: 010D0C9F4328584973DEE4FB2641D4ADB823B380
Authority key identifier: ED:0E:1A:64:1D:03:68:5E:2B:34:E3:53:24:1E:E2:92:82:E3:E5:6C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6957121d-8962-482d-982c-d123ff337caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6957121d-8962-482d-982c-d123ff337caa/4b3dfca5-1d7d-39fc-b59b-b96c99607808.roa
Signing time: Tue 08 Apr 2025 01:00:47 +0000
ROA not before: Tue 08 Apr 2025 01:00:47 +0000
ROA not after: Mon 07 Jul 2025 01:00:47 +0000
asID: 16509
IP address blocks: 66.54.73.0/24 maxlen: 24
66.54.74.0/24 maxlen: 24
66.54.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6957121d-8962-482d-982c-d123ff337caa/6957121d-8962-482d-982c-d123ff337caa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6957121d-8962-482d-982c-d123ff337caa/6957121d-8962-482d-982c-d123ff337caa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6957121d-8962-482d-982c-d123ff337caa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Apr 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:73:de:e4:fb:26:41:d4:ad:b8:23:b3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6957121d-8962-482d-982c-d123ff337caa
Validity
Not Before: Apr 8 01:00:47 2025 GMT
Not After : Jul 7 01:00:47 2025 GMT
Subject: CN=96897f90-6df0-4605-9016-6d5b5fc3600c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1f:20:57:b0:2d:c1:10:e9:01:e5:35:3d:9f:
7a:7e:8b:1d:d6:c8:66:14:24:dd:87:73:b9:ff:ac:
60:8b:12:5d:0d:87:37:47:e0:d7:5f:d8:59:9a:6d:
33:5c:79:ef:13:01:73:69:ec:6a:63:e1:82:92:56:
05:42:5d:82:b5:39:d6:bb:13:e2:bc:14:ed:b5:48:
c9:cf:38:cd:29:d7:70:10:f9:1d:23:a1:a0:d7:51:
15:0c:5f:c7:96:79:2b:b0:a4:ec:9c:c2:8f:aa:b5:
f7:39:b0:98:eb:a7:11:17:d3:97:38:0d:fc:f6:44:
66:b8:80:96:7b:f8:a3:b8:d2:df:0e:2d:eb:31:c7:
9f:15:00:cd:73:0d:37:cd:00:e2:52:96:7f:1d:2c:
3f:48:6a:cc:7f:a8:a2:94:91:a3:f9:bb:e9:ca:a2:
0b:9e:9c:4c:84:7c:cb:9d:e2:e5:ba:c7:44:a6:62:
52:6d:1c:c4:28:9b:e9:89:c7:58:6e:4a:4d:f4:10:
cb:ba:53:1a:0e:f1:10:bb:b0:76:ea:c0:fb:be:79:
75:e0:24:06:82:88:be:5b:2e:36:b9:33:9d:00:ee:
db:cb:6b:ed:7a:68:90:d3:2d:b7:54:6e:dd:86:3a:
48:5c:50:e3:b4:ef:0c:58:40:7a:08:b0:a6:44:e9:
83:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D0:72:01:14:57:77:F1:EA:5B:61:7A:5D:61:33:CE:12:37:E7:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6957121d-8962-482d-982c-d123ff337caa/4b3dfca5-1d7d-39fc-b59b-b96c99607808.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6957121d-8962-482d-982c-d123ff337caa/6957121d-8962-482d-982c-d123ff337caa.crl
X509v3 Authority Key Identifier:
keyid:ED:0E:1A:64:1D:03:68:5E:2B:34:E3:53:24:1E:E2:92:82:E3:E5:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6957121d-8962-482d-982c-d123ff337caa.cer
sbgp-ipAddrBlock: critical
IPv4:
66.54.73.0-66.54.75.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:79:9b:48:c4:c6:ec:91:a3:4d:6c:9b:8a:ed:0a:a4:f3:a1:
4d:92:52:23:22:be:4e:bf:21:29:96:44:71:ca:fb:7b:fb:a9:
15:64:57:47:f0:ae:47:38:43:7a:c2:00:e7:57:ca:b7:64:b2:
ba:01:49:29:e7:16:01:40:48:0d:60:b0:9c:39:e2:1f:ee:03:
90:c5:1f:a8:b9:08:83:2c:e9:ec:24:58:04:f1:34:35:c6:e9:
52:e6:2b:20:d8:fd:0d:72:3f:1c:11:d5:42:89:56:07:f8:bd:
db:df:d4:a3:70:11:9d:67:5d:91:8e:12:85:0c:f8:3d:ce:6a:
e2:d9:01:a8:a9:4a:61:83:21:91:a7:63:99:97:78:03:1f:2d:
28:8e:07:7d:c9:92:fc:75:c2:63:82:f3:f1:9b:5d:2f:7f:de:
b2:2c:78:74:73:71:77:c8:42:ac:92:da:dc:f7:de:2a:07:93:
c0:c9:fa:a8:d7:9e:0e:95:d8:a6:3f:19:e7:f3:88:ca:c3:6a:
a1:6d:35:5e:ac:5c:89:3e:8f:8d:a7:17:66:b8:02:23:06:67:
0a:95:55:b0:b5:d4:6f:da:04:87:91:c6:ca:e5:75:a9:22:a9:
0e:97:6e:91:7e:4e:cc:46:8b:df:00:2e:ce:8c:c8:98:2b:57:
ea:d3:bf:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 09:52:26 2025 by rpki-client