Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cbccf28d-f2c6-3fa8-b034-0d7e1a994285.roa
File: cbccf28d-f2c6-3fa8-b034-0d7e1a994285.roa (raw, json)
Hash identifier: FzBfV3po17zpj14bLj8yvSGosTs/06PtF+3u5sfVKaQ=
Subject key identifier: 7B:98:43:EE:5B:2B:68:C9:6E:2F:EE:76:DC:EA:96:0B:F7:90:FD:0E
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584921342FDCF3850742FF555440
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cbccf28d-f2c6-3fa8-b034-0d7e1a994285.roa
Signing time: Sun 09 Mar 2025 10:20:39 +0000
ROA not before: Sun 09 Mar 2025 10:20:39 +0000
ROA not after: Sat 07 Jun 2025 10:20:39 +0000
asID: 36522
IP address blocks: 76.70.216.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:2f:dc:f3:85:07:42:ff:55:54:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:20:39 2025 GMT
Not After : Jun 7 10:20:39 2025 GMT
Subject: CN=84b6d80b-5eb2-47e6-8405-d04ff8ea9450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:06:34:8b:40:8a:e8:27:90:4b:f2:f7:68:6f:
dd:74:fb:0b:1b:f8:8b:52:14:a7:6c:15:63:8e:93:
ee:7d:2c:4e:c4:f2:45:d9:e3:c9:7a:ce:75:e3:8b:
2d:8f:81:ec:cc:a8:34:18:58:77:0b:7e:2c:6e:3b:
1c:13:ec:36:37:7a:d2:ee:25:17:2c:a1:d6:22:15:
59:3d:13:b1:b2:46:da:78:77:d3:da:6c:4e:fa:6b:
1a:7b:e6:2b:21:04:75:de:63:95:b1:7f:4a:28:27:
f4:10:89:e2:20:19:3b:ba:00:eb:96:64:62:64:f7:
69:b7:b5:b1:3c:8f:9d:c4:98:52:e9:0d:95:5a:b5:
0d:0c:94:f8:02:06:b6:68:1c:b7:5a:81:69:8d:53:
b6:08:6b:7a:90:a5:7a:ab:7e:51:62:35:90:67:ea:
fe:76:34:51:cc:d4:e8:72:8e:3e:18:31:5a:bf:6f:
7d:1a:71:29:82:2c:f4:dd:8a:55:da:e4:55:45:9e:
fd:8c:17:2b:9a:69:3a:8a:c2:e2:99:2c:d1:1d:d1:
2b:8c:a2:a4:7c:ce:73:a9:8e:f5:89:2e:d6:92:77:
d6:ad:30:b2:15:36:54:24:fc:9c:ec:72:83:60:86:
06:7a:6d:2b:2a:d0:44:54:31:6a:98:75:17:24:52:
68:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:98:43:EE:5B:2B:68:C9:6E:2F:EE:76:DC:EA:96:0B:F7:90:FD:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cbccf28d-f2c6-3fa8-b034-0d7e1a994285.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
76.70.216.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:46:9d:3c:1b:ec:b8:58:8b:0b:e3:ee:5f:b1:41:89:ca:df:
fd:eb:5c:42:bf:69:23:b1:18:6f:92:9e:c3:9e:01:d5:7a:22:
84:b1:49:84:90:13:d3:8f:5b:b7:3d:f0:ec:94:0f:e4:4c:0e:
aa:45:c6:29:d1:b7:ae:f1:f8:0b:a7:9d:39:cc:05:ef:16:f2:
47:31:e2:a5:b0:8b:65:2c:56:24:63:36:38:88:e1:6a:41:af:
a4:ee:30:4d:d2:21:9d:1f:5d:e8:c3:31:63:1b:18:dc:ac:f7:
69:51:07:03:d1:38:32:d9:af:77:ea:bf:1c:42:6c:aa:3d:a1:
62:fb:c2:ec:6b:40:03:d6:63:55:a8:4e:9d:a4:b7:54:e9:e1:
06:ef:ee:0c:4d:47:a5:12:62:ed:55:11:62:ee:e7:26:a4:ba:
da:25:fc:46:90:f4:26:94:ea:58:ad:37:c4:ba:78:8c:3b:90:
95:ff:f3:1f:b6:08:3c:5c:43:7b:74:77:ff:eb:f1:1e:72:d9:
54:88:2e:51:e8:43:8d:ac:9a:08:d0:eb:7d:0b:e5:c2:95:c8:
8b:35:ac:f6:dc:2f:1f:ac:35:fb:ab:18:f5:02:58:70:3f:9b:
d5:1c:7c:49:b1:1e:53:a9:67:08:b5:64:9d:f0:d7:ae:b2:0f:
41:4b:78:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 12:49:41 2025 by rpki-client