Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a8c1ad72-40c9-323d-aa66-1044f39fd0e2.roa
File: a8c1ad72-40c9-323d-aa66-1044f39fd0e2.roa (raw, json)
Hash identifier: cgBJe0Ikc3UobXyOZNAyp5MlCtdOmQwVmLaa8brlOfA=
Subject key identifier: 13:3C:99:43:0A:68:4B:76:CD:25:46:20:F1:5E:66:9F:63:F1:92:B9
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C58104EBF9A09E17D69E7380
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a8c1ad72-40c9-323d-aa66-1044f39fd0e2.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 70.41.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 17 Apr 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:04:eb:f9:a0:9e:17:d6:9e:73:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=36928b95-0f45-4413-bb71-95850e737930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b9:63:ea:ab:a0:1b:19:04:0a:26:9c:93:95:
d9:73:94:ec:94:c3:cf:57:40:fb:5d:cc:e0:42:b4:
1a:5c:bb:f5:06:be:81:e6:b1:33:a4:56:b9:e9:9d:
97:66:50:c8:d6:c9:99:55:09:6f:23:46:ad:14:7b:
c8:eb:64:0e:f8:16:3c:03:b2:ce:42:2c:d8:ac:f7:
f7:ea:99:53:a1:c9:98:af:1e:0c:1e:62:ed:66:30:
b9:61:3c:80:df:df:1f:b6:2a:24:67:ae:0f:e5:49:
4d:9e:06:15:cc:83:b4:ca:bc:66:fb:30:2c:df:80:
72:04:8b:c4:6e:c6:70:d0:1b:c3:ab:16:1e:93:ca:
fd:5a:bc:ed:d0:b0:19:79:fa:0a:c5:74:d4:e1:4e:
8b:38:79:3d:ab:a8:5b:87:08:ef:af:50:46:58:f5:
69:35:d9:ac:69:b9:55:20:d9:c1:87:45:e7:26:05:
75:93:79:d1:a6:58:e0:fe:b0:e6:28:a2:2f:3d:bb:
60:84:e1:42:58:da:5f:33:78:a0:92:87:58:60:75:
ff:84:37:2e:f2:74:d8:15:9a:9b:6f:38:cc:68:5e:
d9:9a:52:be:ff:6f:3a:bb:29:ed:a2:81:75:bb:41:
43:b8:b4:20:de:99:e9:58:1f:90:5f:08:cc:41:91:
0c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:3C:99:43:0A:68:4B:76:CD:25:46:20:F1:5E:66:9F:63:F1:92:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a8c1ad72-40c9-323d-aa66-1044f39fd0e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
70.41.73.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:d2:df:5b:c6:a1:d4:2b:7a:73:1e:09:79:58:10:a2:8c:49:
22:d9:88:d4:ab:f0:54:a2:95:cf:13:92:64:68:16:15:ac:b5:
b3:5b:a2:a5:23:d0:a8:f6:2a:05:15:2f:4d:d1:8c:14:fd:3a:
65:66:5e:2a:54:79:d4:37:e9:0c:66:c7:45:21:ca:77:27:33:
40:a6:9c:b9:8e:9c:77:76:23:de:90:7a:5c:d1:6a:b7:e0:1b:
2a:84:2a:52:be:4a:25:2a:68:6b:a5:4a:84:ea:d0:0e:d1:5e:
c8:29:f1:33:bb:60:6a:39:58:45:fb:78:9e:5c:80:57:82:9b:
2b:aa:49:20:38:8f:81:55:79:1d:3d:a0:95:e8:bd:e4:99:eb:
ee:fe:44:27:c2:85:a2:86:7e:52:60:0b:a1:68:16:54:0f:7f:
d9:4d:23:5b:d6:40:5a:63:93:e8:c4:4e:6d:f5:70:b5:88:d0:
8b:42:71:94:f8:03:c7:38:19:f8:c3:5c:d3:3f:8d:7f:27:13:
f3:60:ae:9d:27:cd:a4:bd:3c:0a:99:4f:9b:2e:fb:0b:0a:92:
de:bc:5e:6c:31:bb:c4:77:8c:8f:62:34:13:92:ce:29:0f:dc:
4d:a7:ff:84:0e:37:1d:10:41:71:7e:a6:d5:97:86:e3:93:61:
75:f1:a5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 04:59:52 2025 by rpki-client