Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/dc2f06b2-21ba-3c29-8b9c-8f36fd001392.roa
File: dc2f06b2-21ba-3c29-8b9c-8f36fd001392.roa (raw, json)
Hash identifier: 9EPKcyIQawkAxvfZvMKw0iqNmbAYaH7inYUxM2EFORE=
Subject key identifier: 3C:72:12:21:FB:E3:7A:B3:4A:81:2F:D1:FD:1B:F6:40:60:1C:DC:CB
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F4328584968B4243A85F5CED9805D9CC0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/dc2f06b2-21ba-3c29-8b9c-8f36fd001392.roa
Signing time: Fri 04 Apr 2025 01:00:47 +0000
ROA not before: Fri 04 Apr 2025 01:00:47 +0000
ROA not after: Thu 03 Jul 2025 01:00:47 +0000
asID: 22677
IP address blocks: 97.86.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:68:b4:24:3a:85:f5:ce:d9:80:5d:9c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Apr 4 01:00:47 2025 GMT
Not After : Jul 3 01:00:47 2025 GMT
Subject: CN=67090bf2-ccbf-448a-9080-00c466bdfbfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:41:8e:0d:b2:4e:78:84:a0:7f:f5:c4:6c:d9:
74:a1:f4:0a:c2:f8:3b:42:36:b0:2d:1d:0e:01:c2:
ca:3f:14:d8:9e:8e:ec:78:c2:fd:a2:af:71:e3:0c:
fe:89:62:e3:24:c4:f4:89:41:85:b3:10:98:ea:6e:
9c:2b:d6:10:45:1f:99:fa:45:c8:ff:7b:34:20:6d:
22:d2:83:56:b6:0d:24:48:ce:ca:09:35:86:7d:fc:
3a:98:da:8f:98:05:94:25:cc:cc:5e:8e:70:28:04:
20:35:bc:d5:e0:d1:63:2c:a9:c2:18:c0:7a:f7:41:
09:1e:41:f0:a6:01:a1:73:dc:64:55:8c:4e:93:12:
98:95:8e:d4:0b:a9:07:1c:e2:ef:b4:4b:09:7b:2b:
fa:8a:58:42:dd:94:6c:71:d6:2d:aa:a2:d2:db:97:
44:88:8d:f1:07:d3:be:34:e7:7e:4f:c0:67:9b:f1:
15:c2:a2:2d:46:a6:e2:97:4f:9a:fa:5a:93:62:fd:
92:72:ee:88:1e:9c:92:ff:f5:a3:86:60:47:d4:78:
c2:70:4e:8e:e0:91:bc:36:fa:9c:7f:8c:6e:c3:c9:
19:6e:8b:6d:21:e1:c3:6c:c8:d2:a3:55:91:5d:f8:
dd:20:34:f9:3e:84:34:30:6b:2f:13:ea:55:57:41:
1b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:72:12:21:FB:E3:7A:B3:4A:81:2F:D1:FD:1B:F6:40:60:1C:DC:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/dc2f06b2-21ba-3c29-8b9c-8f36fd001392.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
97.86.174.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:57:bf:6f:ec:02:f1:98:0b:a0:13:b9:65:de:26:bf:f4:af:
6a:06:b5:0e:8a:8b:a0:40:da:58:19:2a:5b:3c:86:d9:08:58:
8f:ab:29:1b:86:48:ae:0d:ce:97:eb:f2:ab:08:1a:b0:bb:2b:
c1:06:53:16:d7:b9:cc:b1:23:1f:90:10:4b:9e:ba:69:a0:18:
12:1e:f4:61:66:b3:99:e4:03:78:1a:ab:ae:c7:5d:d3:8f:16:
b5:79:20:fb:16:bb:15:5d:4b:8a:e8:0d:77:aa:2e:e9:67:7f:
18:8a:3f:63:cb:83:5c:0c:2b:8b:60:9b:4c:6a:18:ee:46:5c:
b9:d6:2d:17:41:7e:7f:7e:90:1e:50:e8:df:25:86:33:a9:6c:
88:52:fe:c5:ae:d4:4b:61:a0:7e:61:a7:a3:f6:b9:89:be:8d:
31:1c:2d:76:e5:19:b1:40:32:46:85:59:ca:d6:70:ac:03:f8:
79:78:99:73:ef:54:01:6d:15:9f:be:50:82:34:ee:30:fd:c9:
84:ee:64:1a:19:38:af:95:99:11:c6:f7:b7:63:b7:25:6e:96:
34:99:b2:e6:07:ba:ef:8f:bb:a0:5f:b6:a0:78:98:2c:da:7c:
a5:d2:5f:70:5a:34:39:9a:23:34:92:ae:3a:b7:0c:02:f5:2e:
7b:21:b8:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:09:26 2025 by rpki-client