Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/9bb519e3-aeba-3d7d-a107-c01ea2741f89.roa
File: 9bb519e3-aeba-3d7d-a107-c01ea2741f89.roa (raw, json)
Hash identifier: 5BWxAlR2fzB9CbxJ5DE4+GOvYeSMu56NIZg1nMtPShs=
Subject key identifier: ED:49:04:B5:8D:AF:46:8F:9D:CB:95:36:38:86:A9:28:9C:FE:57:84
Certificate issuer: /CN=c6bc2da7-5b3b-4ff6-8bc2-59c42c901086
Certificate serial: 010D0C9F43285848D21140FE84DBDAD16EB5C400
Authority key identifier: 9D:66:1F:9F:23:E7:C7:B2:21:F2:E8:33:6C:7B:CE:AB:65:97:31:F2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/9bb519e3-aeba-3d7d-a107-c01ea2741f89.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 18615
IP address blocks: 74.116.20.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:40:fe:84:db:da:d1:6e:b5:c4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6bc2da7-5b3b-4ff6-8bc2-59c42c901086
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=04638e5b-12d3-40c6-9d1d-c96b02462689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:20:7e:b3:32:ce:75:09:00:e8:39:37:56:b7:
0d:87:50:1e:ee:7c:3f:11:fa:88:ab:d0:4c:70:c4:
2e:89:86:f2:30:78:c7:47:50:00:d7:cd:8e:8a:94:
9a:2d:20:b1:f1:13:5f:55:c9:e2:1e:39:7c:70:de:
7a:65:ad:78:48:41:cb:8b:4d:ab:3b:7f:bc:8b:4b:
d3:dd:6e:76:d6:5b:5c:44:a9:aa:52:32:45:6a:ae:
9a:67:1c:ca:bc:6a:4b:9e:20:6b:8f:62:11:39:c9:
0b:19:97:ec:71:39:85:10:db:f9:3e:4f:6d:15:2c:
94:2a:f0:91:9c:07:d0:38:c9:a0:7c:1f:8a:96:5e:
2a:3b:34:53:59:70:f8:7e:a3:8b:d3:85:aa:ec:71:
29:2e:83:49:b1:41:ee:fa:2e:5e:b5:5b:ef:f9:06:
de:44:bf:74:2c:c0:aa:81:12:82:34:9d:e8:a9:d8:
7c:d6:e1:7a:00:75:52:a9:fa:37:45:b8:7a:8f:48:
62:be:06:a5:e6:d5:d6:9c:c5:35:cf:ba:bd:81:dd:
ee:dc:cc:bd:72:1d:d1:74:d3:29:a6:2c:a8:aa:c1:
6e:38:f6:a6:c4:ba:34:b6:36:4f:7c:9e:47:5c:97:
a8:da:7b:4e:ba:0c:6d:1c:b3:72:7b:81:a9:06:10:
e6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:49:04:B5:8D:AF:46:8F:9D:CB:95:36:38:86:A9:28:9C:FE:57:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/9bb519e3-aeba-3d7d-a107-c01ea2741f89.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.crl
X509v3 Authority Key Identifier:
keyid:9D:66:1F:9F:23:E7:C7:B2:21:F2:E8:33:6C:7B:CE:AB:65:97:31:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.cer
sbgp-ipAddrBlock: critical
IPv4:
74.116.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:a4:33:fb:a5:42:00:54:07:fa:e4:71:d5:99:c1:2b:f2:ed:
5a:2e:fc:b1:2e:94:91:bc:6c:7f:f1:9f:4f:8e:37:99:c2:7d:
75:c1:ea:3e:80:d7:b6:01:95:f6:5e:b2:7c:c5:19:56:ef:3d:
6c:51:7e:90:29:06:82:3a:b4:27:19:35:3b:17:78:c7:20:5b:
83:92:ef:07:c3:7c:9c:c3:e2:a5:ce:e6:e3:3d:dc:fd:bc:a2:
52:c2:fb:19:0d:cc:ae:c8:d1:4e:3a:78:71:20:0d:9f:44:ab:
ae:46:af:63:3d:f2:17:ce:c2:b6:b9:2c:ae:ee:1c:57:0f:37:
53:16:37:75:00:2f:d4:c7:25:48:4e:fc:81:ff:10:a4:24:e4:
65:34:4a:9a:61:8a:30:2e:f3:8f:53:22:18:aa:85:a2:6c:b4:
b4:ac:cd:3a:64:25:09:15:e2:cf:db:71:49:38:0e:cf:cd:8d:
be:70:bc:bd:b7:4e:d4:95:3b:d9:7d:88:34:31:f2:f9:0d:83:
23:08:6b:80:ed:6a:fa:d2:ce:aa:47:b0:ec:f3:8a:8e:20:08:
7f:99:ec:e6:21:f1:c3:79:ea:82:2c:88:92:1d:e3:d7:02:ae:
a8:7a:8d:e8:5f:0c:b8:06:70:a2:68:71:67:be:4c:c4:4e:5a:
1e:83:a8:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:32:06 2025 by rpki-client