Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d0fe9fdb-2b41-3cd2-be6c-33cc4d4c2764.roa
File: d0fe9fdb-2b41-3cd2-be6c-33cc4d4c2764.roa (raw, json)
Hash identifier: trgAZUjqP75kX6F77ghFPFScW/brlx5Zae0KXFAS5dw=
Subject key identifier: D3:5F:02:43:78:67:5E:64:51:0D:E4:CD:B9:AE:E5:94:7B:26:70:39
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848E2D166408CC7EDE1CEC00440
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d0fe9fdb-2b41-3cd2-be6c-33cc4d4c2764.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 20115
IP address blocks: 66.168.96.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 09 Apr 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:66:40:8c:c7:ed:e1:ce:c0:04:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=32ffe4b3-aebb-4543-8d67-2bd27c4586f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3e:93:ef:9f:61:2a:56:1e:a6:1e:e0:19:01:
14:b3:0a:da:51:fb:e5:16:85:e6:06:81:70:66:5b:
89:f6:bc:35:96:6d:bc:40:dd:07:88:f0:c2:1e:17:
d0:46:e8:fe:51:d6:05:e2:83:ce:13:8f:87:8a:29:
9a:c1:c6:cd:9a:ba:61:db:10:39:01:7a:ed:af:6b:
bb:7b:37:51:c9:43:ad:d4:f9:91:6e:f9:ec:4c:87:
30:7a:55:ff:4e:d8:6f:e5:4e:b3:44:6a:a7:c1:a8:
02:78:d7:2d:dd:51:93:f0:9f:71:e8:3b:0d:c4:af:
64:b4:5a:41:f2:a7:af:83:80:98:87:b8:d5:77:d4:
55:62:f2:9e:70:00:07:d7:fe:bd:36:6a:db:b3:7b:
ba:21:6c:dd:f3:65:df:bc:6f:e1:0d:43:2c:25:c2:
83:f2:65:2b:71:b9:95:0e:fe:12:b3:60:4a:98:c0:
68:12:18:ad:f6:b6:2b:ca:a2:b6:ce:75:c3:50:f7:
08:c7:60:78:fd:e1:f8:d2:f4:89:b3:f7:5b:1c:80:
8a:f9:4a:c3:89:63:08:c3:1c:3d:59:d1:90:42:55:
73:47:fb:2e:15:9e:e4:05:d2:01:a2:69:fa:a8:d2:
85:83:d5:18:2c:f6:e1:59:5f:18:33:5f:1f:86:80:
97:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:5F:02:43:78:67:5E:64:51:0D:E4:CD:B9:AE:E5:94:7B:26:70:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d0fe9fdb-2b41-3cd2-be6c-33cc4d4c2764.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
66.168.96.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:bf:58:c2:8e:70:84:e1:b9:9b:5b:9a:c3:88:63:c8:8d:55:
e1:f9:c5:59:9f:ae:07:ca:c6:a5:19:5a:5a:4f:3c:27:6f:36:
cb:9a:7d:96:22:79:6c:d5:6a:8a:26:e5:83:32:77:17:8c:ba:
0b:d9:58:49:89:95:b2:78:48:e3:f5:26:ba:bd:2f:1b:aa:39:
df:e6:03:25:9e:2f:d3:43:76:91:31:ae:ad:4d:81:c8:1a:fb:
33:ad:fc:5e:76:90:04:a0:f2:58:96:79:54:6f:f0:76:9d:89:
24:38:32:97:a5:a0:37:de:89:69:e6:1e:31:39:b7:76:8c:f9:
56:42:19:73:93:51:f2:44:a3:ae:d3:61:5d:7e:39:44:50:0c:
88:47:8c:d2:96:5d:63:29:48:ba:7e:97:f3:97:8c:b9:bf:32:
6e:ff:f4:23:20:7d:04:29:bb:8c:4e:49:de:a3:a5:df:5d:8b:
7c:9a:22:d1:8a:2f:1f:67:f3:e2:6b:da:8b:f5:19:be:a9:0f:
2e:10:fb:01:4e:68:7e:87:24:aa:76:23:5b:84:64:c5:d8:82:
b6:34:67:10:83:26:52:54:ee:f1:89:9a:70:0b:7c:97:80:2f:
e8:98:3c:21:26:b3:45:d1:aa:9b:91:8c:3e:e3:44:a4:51:b9:
b0:6d:41:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 19:07:31 2025 by rpki-client