Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dfc6975f-aa79-3f8d-9a14-159954492a82.roa
File: dfc6975f-aa79-3f8d-9a14-159954492a82.roa (raw, json)
Hash identifier: 7R5m8CYvk5fOsGC1GiR31lyHA5j/iUMgXdW4NHvfOHI=
Subject key identifier: AD:11:57:FF:9B:34:A2:96:DA:B0:3D:59:D8:A0:93:28:C9:F7:0E:5F
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C581DD64CD3C8EEC717EC640
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dfc6975f-aa79-3f8d-9a14-159954492a82.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 172.243.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 17 Apr 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:dd:64:cd:3c:8e:ec:71:7e:c6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=1d74d0f9-72a6-491f-a01e-5e0cdd35bfae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:83:2c:bc:8d:5d:0a:2e:44:bd:bf:97:8d:a8:
af:1d:a0:63:c0:95:d0:bf:0d:28:bb:ab:0c:17:a8:
c4:80:71:42:e1:6a:a7:1b:8a:7f:79:c5:ac:3d:8f:
70:d2:c3:2d:ef:d2:6f:a3:38:3f:c4:0b:44:a7:3d:
b1:08:ac:73:9c:ba:98:3b:aa:0f:11:23:a6:dc:4d:
38:2b:5a:95:2e:d9:09:90:e1:2a:40:42:51:2f:29:
c4:93:d5:34:1f:19:ea:d0:88:59:89:af:b9:0e:6d:
77:a0:10:f8:bd:d4:a6:e4:78:b8:3b:fc:62:ed:d7:
e3:d0:b7:9a:14:3a:b8:57:d1:e4:75:d7:18:48:62:
b9:f0:4e:04:07:a6:b5:89:c2:7b:c3:f0:ff:e0:42:
2c:e3:7c:21:76:4b:65:27:d0:94:ef:6d:90:c3:55:
5c:6e:f9:15:e5:93:02:9d:52:5f:1b:87:aa:82:14:
63:0c:7f:00:e7:51:9e:29:1a:6d:ce:bf:7f:f3:16:
f4:56:51:a6:e0:1b:d4:43:23:d7:19:47:05:2f:c7:
e8:ad:f3:6c:ef:f4:5d:24:2f:82:cf:d2:e3:84:b3:
f8:cc:9a:cd:7a:3d:9c:dd:de:34:8e:7c:b8:7e:15:
ac:5e:53:c6:63:4f:f2:00:9b:4b:fa:8d:54:35:d2:
b9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:11:57:FF:9B:34:A2:96:DA:B0:3D:59:D8:A0:93:28:C9:F7:0E:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dfc6975f-aa79-3f8d-9a14-159954492a82.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.243.74.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d0:73:2e:e8:ac:27:9e:9d:6a:5c:3f:25:ae:19:3e:8d:57:dc:
91:58:d7:7c:c1:64:07:14:7f:3f:28:ba:3c:aa:89:1e:86:c4:
41:b9:70:49:2e:5e:03:7c:1d:c7:82:cd:aa:be:3a:37:05:8a:
78:cc:2a:a9:c9:2f:b9:bc:be:2f:2f:99:35:04:dc:6d:05:5a:
a5:db:c4:e7:0c:be:1f:64:f3:af:e6:50:d6:5f:65:bb:4f:d4:
78:7d:b9:b7:e3:60:89:e7:02:36:e7:d3:6c:49:81:d7:17:fa:
6e:e1:ce:ce:a5:b8:90:9a:20:10:34:2f:82:8f:e9:fb:ac:48:
8f:29:90:0c:0d:c2:f8:97:f0:40:a6:74:e7:8a:ba:0e:5f:83:
44:70:e3:8f:c0:e8:3a:19:26:83:4c:ab:20:0c:c3:cd:44:b3:
3b:9d:af:0a:3f:2f:9a:9c:7d:3a:75:06:08:ed:5e:51:f1:10:
80:c7:37:ae:bf:8d:8e:a3:42:0d:7b:ab:26:6a:9d:61:2c:08:
17:a8:99:ba:5a:34:95:af:13:92:7e:c4:81:0f:a6:e2:b7:45:
0c:5c:86:cb:6a:56:0e:11:6f:1c:6a:6a:94:3a:bd:94:70:f0:
56:a6:3e:93:08:16:5f:66:3c:0a:00:f5:c8:1b:d5:02:ea:0e:
ce:84:ee:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 18:25:40 2025 by rpki-client