Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3454a476-0091-3626-aca7-01c8ce27057a.roa
File: 3454a476-0091-3626-aca7-01c8ce27057a.roa (raw, json)
Hash identifier: cdVYNB6DXSwpguQYhQ/pHEJC8lF5zDdTEmMD72DXL54=
Subject key identifier: DF:AB:CA:A7:DD:7E:CC:76:02:45:3B:70:EA:AF:33:CB:5A:F9:8C:41
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285848FD01987B7AF2E3658979D080
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3454a476-0091-3626-aca7-01c8ce27057a.roa
Signing time: Mon 24 Feb 2025 11:09:37 +0000
ROA not before: Mon 24 Feb 2025 11:09:37 +0000
ROA not after: Sun 25 May 2025 10:09:37 +0000
asID: 30036
IP address blocks: 72.255.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:01:98:7b:7a:f2:e3:65:89:79:d0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 24 11:09:37 2025 GMT
Not After : May 25 10:09:37 2025 GMT
Subject: CN=755df947-7088-4a93-a87c-2692671e1580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7d:87:57:0e:61:3d:44:95:1e:9e:3c:9e:25:
ea:31:cd:bd:1c:c0:9b:71:3c:64:74:0d:8a:54:41:
64:52:e4:cd:bf:e5:b3:c8:32:69:de:9d:0d:ee:d6:
f5:c2:d5:81:d6:1e:c5:e0:8e:98:71:47:51:f1:5e:
3d:b1:01:18:e8:ba:0f:ff:32:e5:7a:03:0a:21:71:
4c:96:a4:bc:aa:04:e4:f8:a3:ed:a8:a2:fe:32:5e:
1b:fc:46:ff:1e:bf:03:70:3b:da:12:1a:58:2a:b8:
d7:43:4e:51:27:96:13:6b:c8:e0:34:68:f4:8c:bd:
51:72:8d:cf:b0:f9:73:77:8f:0e:40:5b:d0:0d:2a:
d2:52:b4:89:f3:13:52:ed:93:d5:ec:ec:80:40:62:
4d:9e:6a:54:1b:fb:02:54:2c:b9:b9:0c:0d:65:d4:
75:41:23:7c:75:a7:a1:0c:ce:30:d0:df:b5:68:91:
75:68:da:b5:fd:19:3e:d6:b8:b2:ca:51:25:03:79:
16:09:0f:9e:4d:74:9f:bd:d9:bc:18:94:21:bf:de:
36:49:c3:2c:17:a0:9f:64:79:ac:dc:65:2b:30:b7:
d9:90:82:99:aa:5f:32:69:a3:af:06:3b:a7:93:3f:
51:15:55:21:12:33:87:7d:8f:2e:80:eb:b9:50:f1:
13:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:AB:CA:A7:DD:7E:CC:76:02:45:3B:70:EA:AF:33:CB:5A:F9:8C:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3454a476-0091-3626-aca7-01c8ce27057a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
72.255.94.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:20:8b:5c:63:21:ef:77:2c:2a:ce:20:d6:20:68:cf:b2:c7:
b9:9e:bc:04:8e:03:f8:6e:d4:47:fa:35:68:de:3e:83:45:e2:
81:85:e6:9c:04:0b:eb:df:86:06:cf:7a:7b:48:5e:62:0c:bf:
16:14:fb:b1:32:e9:a4:29:b3:2e:8b:3d:7d:b9:95:0f:46:07:
87:47:99:ac:33:2e:c6:62:bd:f0:f1:88:01:ad:bc:02:4f:0f:
eb:dd:53:cc:48:66:04:71:09:4f:52:3d:6f:f4:8f:47:7c:96:
70:bf:1f:52:08:4b:c7:fc:78:5a:ac:dc:c4:0a:4c:5d:9f:4b:
f0:c2:1b:3f:e4:b9:75:e5:66:b6:d3:86:fc:db:a7:7e:72:f8:
2a:8a:c3:70:82:54:ce:eb:79:8e:33:ba:a5:e5:02:6a:b0:0d:
d5:a7:c2:2b:3f:15:33:66:eb:91:34:df:26:e4:4d:e6:bf:ae:
50:83:a2:f9:23:ec:f0:38:5e:4e:7d:30:d9:50:98:5d:8a:3e:
d3:50:d8:17:94:b4:8a:b9:67:e9:26:bb:e2:32:23:f4:3b:fe:
6a:e4:66:13:03:31:6a:20:e1:9a:73:f5:e0:62:30:16:b2:cf:
4b:00:36:36:41:8a:81:7f:56:ea:70:ad:95:1e:a0:14:2d:e1:
4d:eb:e4:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 09:33:29 2025 by rpki-client