Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f47bcdd9-c361-3ba6-8c2e-f11f72a1c91e.roa
File: f47bcdd9-c361-3ba6-8c2e-f11f72a1c91e.roa (raw, json)
Hash identifier: YXrrr3TPjBdTwRwAb6YwH4x7TUJptfu7+dDAot2mQHA=
Subject key identifier: 9D:02:02:35:5E:03:0B:E8:D3:83:A6:AA:1D:61:81:B1:EE:60:BA:E8
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848E2D18608621A189FEE23A9B0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f47bcdd9-c361-3ba6-8c2e-f11f72a1c91e.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 20115
IP address blocks: 71.11.16.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 09 Apr 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:86:08:62:1a:18:9f:ee:23:a9:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=d3dfcd89-8806-4004-90d9-f8da3be45d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3e:6b:d2:9a:9e:89:b8:f7:76:9a:90:20:17:
a5:71:de:58:21:48:0b:4e:e9:cc:3d:00:bc:57:8a:
2e:be:ac:12:3c:b8:8e:5c:e5:21:9d:cb:13:b8:73:
2a:1f:d5:ee:c8:d4:82:b5:c1:23:d5:5a:08:1c:2a:
dc:89:75:d0:44:15:0b:1d:14:44:0c:5d:cd:e8:6b:
2d:e0:2f:4b:3f:cf:60:ca:2a:5a:90:a0:84:15:60:
01:df:e2:35:47:d1:6f:31:82:cb:f7:c0:15:77:38:
3b:71:7e:4d:c6:fb:80:80:ee:20:0c:db:6b:50:4a:
42:9c:48:d4:70:26:c2:2e:b7:b5:06:6f:cf:2e:08:
f1:2a:f4:30:e6:45:40:c7:87:d3:a3:1b:b0:f2:7d:
a4:55:0a:5c:c7:a4:90:5e:88:1c:ee:ab:55:98:e2:
85:65:7d:e0:d5:f8:12:32:b1:1d:30:cf:0f:e8:93:
72:cf:71:18:60:26:c3:ed:2f:d2:88:ce:f5:05:fe:
a6:6c:0a:e9:9d:84:2a:c8:d8:5e:43:58:83:cb:44:
4c:fd:b3:7f:43:6d:3e:a2:53:9a:f2:0e:22:ed:6a:
f8:cb:1c:be:58:de:16:75:ad:4e:d3:0b:86:e6:af:
f9:82:b1:e1:3c:2b:78:50:79:38:c6:17:59:44:27:
f6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:02:02:35:5E:03:0B:E8:D3:83:A6:AA:1D:61:81:B1:EE:60:BA:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f47bcdd9-c361-3ba6-8c2e-f11f72a1c91e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.11.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:1a:22:7c:08:1e:a8:29:ba:70:38:54:7d:17:6e:8c:23:92:
e6:3f:fc:7e:34:85:d3:6c:19:00:56:a0:e1:41:53:da:0f:4c:
a0:10:0d:90:aa:ba:1f:8f:cc:62:24:aa:3d:f3:c2:42:66:ee:
2a:6d:4b:c4:3c:80:c5:55:a2:a3:ec:70:c6:c0:22:a8:ad:4e:
1f:c5:6c:35:5a:a8:a8:4b:d7:82:3d:51:37:1c:ec:2a:b0:21:
08:a6:30:53:04:e5:46:07:3a:cb:8d:9c:b0:10:fa:b7:94:82:
b5:8a:57:7a:9d:51:88:23:a0:ca:78:57:32:7b:f6:54:14:84:
43:b5:b6:6a:3d:21:eb:0d:6a:e5:57:ce:b7:e5:02:89:94:39:
0c:84:52:d5:3b:ce:36:2f:4f:cb:87:0e:de:9a:a7:12:63:c8:
68:a3:2b:4f:f4:21:63:95:0b:ac:25:6f:12:c9:b3:0d:cb:21:
30:da:f4:85:f3:3b:f6:16:9f:22:0d:2b:ec:7b:1c:d2:12:41:
c2:01:56:05:44:be:ea:60:27:11:bd:d0:6b:4a:a8:b0:98:f6:
1e:61:e3:ad:d4:6d:6f:d8:a0:34:28:e5:92:14:67:ec:4f:7f:
0e:f6:12:df:f8:02:f5:bc:54:36:76:6b:cc:d0:bd:64:cb:44:
b1:d9:22:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:41:12 2025 by rpki-client