Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/68367c0e-2805-31ce-80f3-525cef84629e.roa
File: 68367c0e-2805-31ce-80f3-525cef84629e.roa (raw, json)
Hash identifier: gMAXy37x3KTzXEzb9oNC8nz6MWYyZPjckIbTGYLu5C4=
Subject key identifier: 3E:CE:67:58:B4:96:DD:62:E1:C6:0F:44:CB:3C:2D:03:16:F8:76:83
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C557AB576B515525A19F0A80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/68367c0e-2805-31ce-80f3-525cef84629e.roa
Signing time: Tue 04 Feb 2025 12:37:46 +0000
ROA not before: Tue 04 Feb 2025 12:37:46 +0000
ROA not after: Mon 05 May 2025 11:37:46 +0000
asID: 30036
IP address blocks: 173.19.92.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:57:ab:57:6b:51:55:25:a1:9f:0a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 12:37:46 2025 GMT
Not After : May 5 11:37:46 2025 GMT
Subject: CN=05ae4de3-72e6-4b40-ba6c-4a7d8aed62dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9b:39:61:bc:38:67:d4:1a:ea:87:d0:61:5e:
aa:96:78:59:2e:12:25:fe:cc:e7:cc:8f:c8:40:08:
81:77:df:bc:a8:bc:bc:df:e3:96:63:b7:45:ec:03:
7d:42:c1:a8:0c:90:5b:71:2c:e4:ab:99:dd:2c:e4:
85:7d:56:0b:fe:4d:30:81:6f:0a:94:76:b4:9d:43:
e5:42:dc:85:fa:82:ea:4d:ca:36:d9:33:d5:5c:eb:
05:cb:4b:00:86:de:ee:3b:5a:e4:37:84:1d:d3:cb:
e0:5a:7a:69:15:24:30:40:a7:48:07:99:2b:0c:e7:
70:65:50:07:9d:5e:79:51:29:80:6c:38:99:4f:36:
8a:43:f5:78:07:05:a5:92:2b:3d:9a:af:2d:19:3c:
dd:d9:96:dc:1b:49:03:85:d6:8e:4c:b3:66:54:18:
8d:c7:71:66:c8:45:71:6d:6f:83:62:d3:66:28:d6:
49:dc:49:93:23:7e:b5:e3:42:5a:01:c1:d1:32:4c:
bb:9e:b5:22:ae:26:e9:46:05:ab:90:11:dd:a6:60:
bd:e5:f1:3c:45:ed:45:a5:85:4f:11:64:5a:b0:d3:
3f:2a:97:be:12:a3:08:22:45:47:88:6c:66:fc:0d:
54:26:b4:a0:03:31:93:b2:44:7e:ef:9f:32:37:29:
6d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:CE:67:58:B4:96:DD:62:E1:C6:0F:44:CB:3C:2D:03:16:F8:76:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/68367c0e-2805-31ce-80f3-525cef84629e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.19.92.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:3b:59:7d:0c:12:8f:0c:f0:90:63:65:25:41:5c:af:49:09:
0b:ff:d9:7d:1c:97:e1:61:d7:42:23:1d:25:0b:08:3b:87:0c:
43:58:84:68:40:c9:63:3e:3d:1c:da:a9:ef:03:86:11:5e:86:
70:92:ee:b0:8d:ec:79:f3:01:2c:4a:61:e9:24:6a:44:88:0b:
97:50:5f:74:8b:74:09:af:08:ad:39:25:43:fe:58:5c:5a:f0:
07:68:06:8b:4e:dd:84:61:6b:db:fa:a6:62:ef:06:6a:29:3e:
10:02:34:45:dc:fb:79:f3:a1:f0:cb:ab:58:27:f4:77:e8:2a:
c8:c0:ca:8f:8a:a9:39:de:c5:7b:4b:b5:b7:ac:e9:b7:4b:fd:
0d:74:da:9e:d8:38:ad:40:fa:c3:82:9f:01:29:89:f5:a6:ef:
ca:35:32:52:4b:cf:c9:ed:f6:e4:c6:31:8a:86:e8:cb:40:d5:
c8:44:5a:1f:72:15:23:2a:ed:95:ab:95:91:b0:ef:d7:48:d4:
2d:cb:93:85:83:43:e7:7b:15:a2:92:f8:47:e6:fc:dc:10:7b:
ff:98:6c:04:5c:87:78:ad:1e:75:a5:2d:13:bc:56:e8:d7:71:
07:32:40:14:b4:54:24:24:61:99:73:34:ab:da:32:ae:e9:1d:
e4:dc:06:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 11:15:47 2025 by rpki-client