Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7be5c446-80a2-311c-bf18-b76d734c3c2e.roa
File: 7be5c446-80a2-311c-bf18-b76d734c3c2e.roa (raw, json)
Hash identifier: zzDvYhrJdt7gzRSoP9xjjG97fQAKY9HAVz0efitDMKs=
Subject key identifier: 75:68:01:59:6D:62:D7:40:66:3E:6D:4C:06:B1:9C:93:D5:44:AB:3F
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584921343679EE39DDA579037800
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7be5c446-80a2-311c-bf18-b76d734c3c2e.roa
Signing time: Sun 09 Mar 2025 10:20:42 +0000
ROA not before: Sun 09 Mar 2025 10:20:42 +0000
ROA not after: Sat 07 Jun 2025 10:20:42 +0000
asID: 32678
IP address blocks: 174.90.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:36:79:ee:39:dd:a5:79:03:78:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:20:42 2025 GMT
Not After : Jun 7 10:20:42 2025 GMT
Subject: CN=99e8ae79-928b-402d-b55c-173ad08ca4e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:fc:3c:c0:d8:7f:af:1e:5d:fb:8a:98:2d:ee:
b5:28:0a:e7:95:c6:4c:5c:ae:41:03:2c:ad:72:71:
be:08:2a:d8:cc:33:23:b5:73:91:85:27:38:9a:96:
ed:48:34:67:1c:e8:af:35:cb:36:0f:06:00:1f:91:
c9:a4:4b:96:f9:a2:ee:f2:82:a9:8c:72:81:e9:7d:
19:92:70:49:87:bc:aa:3b:48:39:63:a7:f4:91:7b:
80:ae:7c:1a:0e:68:07:c0:bc:47:41:48:54:75:1e:
9b:36:6c:5b:a8:b5:f4:9b:d7:cc:ee:a3:1c:dd:85:
59:c7:31:3e:8f:da:d6:2d:2d:a7:bc:4e:94:7a:27:
93:c5:cd:5d:31:8e:c1:97:03:0d:92:7a:18:32:cc:
be:04:8d:cd:2e:06:5c:db:0f:d9:b9:b2:f6:e9:d1:
ad:14:39:c4:b9:9a:23:62:86:06:f5:ef:98:9e:f1:
23:a3:a5:10:7c:26:03:56:30:b0:fa:75:b0:73:0f:
1a:79:83:fe:57:f6:36:1e:ac:8b:59:3e:06:43:21:
a3:7d:8f:71:44:38:39:27:ca:65:8f:f1:ef:75:37:
31:ab:04:ac:c1:73:f5:97:0c:a0:27:07:05:56:e7:
f3:50:57:ec:57:cd:f4:f4:8a:25:b2:87:54:ab:82:
a1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:68:01:59:6D:62:D7:40:66:3E:6D:4C:06:B1:9C:93:D5:44:AB:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7be5c446-80a2-311c-bf18-b76d734c3c2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
174.90.32.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:62:0a:41:3e:73:17:4b:7e:2f:f7:b9:00:48:2a:8e:1a:67:
1b:dd:d4:2b:27:c6:5b:ae:a9:8e:82:29:81:f9:2f:52:27:0c:
61:3f:3e:0d:e7:cb:c4:32:a5:33:a2:dd:e9:78:20:15:23:48:
82:9f:b5:b6:83:6c:85:f7:93:d9:b4:aa:94:6e:f0:2b:bc:7f:
46:25:08:aa:1f:0b:74:27:79:4b:60:c6:0d:f5:42:fe:f9:a2:
ab:c4:b8:36:eb:58:ba:0f:63:b7:ac:e4:7d:23:13:67:c6:19:
6c:90:5a:66:cc:fa:41:8c:8e:9c:48:69:cd:cc:ba:1c:8b:93:
37:47:44:a3:e5:cf:36:5e:58:3e:89:fc:1f:3e:0a:c9:e6:bc:
df:3a:8f:d2:4e:1d:60:d8:e6:2c:28:47:60:d7:01:98:44:c8:
50:90:2e:5c:8e:22:91:49:9e:a9:98:08:10:cb:67:f1:cf:be:
19:6d:29:93:04:85:e5:c8:3e:fa:f8:d4:f0:6f:d4:6e:c7:94:
72:27:ef:cb:91:43:8d:17:40:79:f1:7c:b7:e1:83:e0:5a:e4:
fb:1b:69:76:93:57:6b:0c:61:f1:a2:13:4a:32:0d:9e:31:71:
bd:42:d8:e8:fa:fc:0d:d0:77:83:98:f9:c7:70:30:cc:37:0c:
c0:8b:44:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:01:25 2025 by rpki-client