Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8ab91de7-4a42-36ce-a345-7f003babee09.roa
File: 8ab91de7-4a42-36ce-a345-7f003babee09.roa (raw, json)
Hash identifier: 4jlGay5M5YU5kHroRpUxLGuFKFfhM2cyG8l5WebjVUI=
Subject key identifier: AE:42:E3:D5:FC:56:08:A1:08:57:08:A9:C7:37:91:66:98:FE:64:46
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848E2D1854EFE68C3B9BE4BE5A0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8ab91de7-4a42-36ce-a345-7f003babee09.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 20115
IP address blocks: 68.190.240.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:85:4e:fe:68:c3:b9:be:4b:e5:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=ecb1fb44-0651-4483-9c06-aecead17e771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a0:9f:a0:41:63:05:3d:c0:0f:df:63:07:e4:
10:4d:53:89:b6:f7:a5:ab:c0:2b:e0:e5:e7:0a:29:
9d:ce:49:e8:8b:9b:70:00:8a:cb:37:85:75:49:f7:
24:7a:09:9a:ba:48:2c:bc:1d:f7:ff:07:27:46:7b:
3d:6f:ca:01:b7:5c:92:63:89:63:e1:f5:37:32:ae:
af:01:c0:52:13:38:6c:5b:a6:66:f0:95:71:50:d9:
d1:5d:ae:43:e3:d8:fe:7d:67:94:4b:f9:b5:85:6e:
43:43:e6:40:b7:41:c4:dd:74:6b:7d:bc:31:2c:a4:
f7:b2:dc:53:d7:b9:65:37:da:4c:ff:a6:9b:20:85:
25:f8:79:1f:34:57:b4:d2:66:ce:9c:4c:ca:bf:2e:
73:5a:07:24:18:d5:0a:13:3d:2b:2e:79:56:d3:74:
12:bd:9e:f8:de:8a:ec:d5:25:9a:d0:28:3d:0f:53:
61:77:87:17:48:2d:3b:1b:42:01:85:56:46:2f:b9:
03:b1:b2:eb:0a:72:82:0c:5f:c0:3f:9b:85:68:a4:
bb:6b:d4:06:5b:13:84:1c:14:29:bf:9e:01:9a:43:
34:1a:57:50:23:09:82:a0:a0:b7:a3:b0:48:7f:c0:
ce:3d:0d:72:20:c1:55:6c:0b:53:ff:11:99:17:83:
ea:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:42:E3:D5:FC:56:08:A1:08:57:08:A9:C7:37:91:66:98:FE:64:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8ab91de7-4a42-36ce-a345-7f003babee09.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
68.190.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:2b:a5:36:a2:0a:f7:df:eb:40:a4:65:22:3d:7e:81:24:dc:
8d:3b:60:56:a4:4e:94:e7:dc:97:63:2f:f3:10:b5:65:f4:f9:
5a:1f:cc:de:a4:40:5e:9f:a6:12:fc:9f:02:f6:f7:8a:89:08:
68:b3:e6:eb:97:c3:6b:56:c6:12:0b:37:86:4a:b5:72:be:fa:
c7:bc:3b:e6:c2:3c:dc:75:96:8b:69:c3:2d:ad:82:bd:fe:80:
c2:9c:8b:ef:34:66:07:01:05:f1:10:ad:e9:18:15:ed:b2:bb:
f8:c9:0a:78:31:50:a3:de:60:8f:f3:a2:16:0f:53:f6:29:5d:
a3:bb:e3:05:1e:a4:47:bc:7b:da:a9:00:09:66:3c:6b:d4:6b:
6a:34:c4:fa:f8:bf:4f:b9:ab:1a:db:b2:0c:dc:ab:51:e4:3e:
13:a9:81:99:d9:98:3b:07:07:4e:39:ba:3f:d7:65:b3:9b:42:
f0:5a:49:6e:25:8a:bc:d5:d7:42:1e:94:58:b9:6d:71:8d:d1:
80:39:97:05:64:92:3c:84:5b:34:fc:78:74:ef:89:2e:90:88:
ce:5e:c8:7d:49:2e:af:20:6c:6f:79:8e:dc:3d:d7:2e:5e:24:
28:73:3b:fd:53:c3:b3:66:1b:37:18:8b:26:82:aa:c3:68:ff:
89:e1:25:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:49:43 2025 by rpki-client