Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ebd0b740-e71a-3ff5-8b3d-f13254f68d50.roa
File: ebd0b740-e71a-3ff5-8b3d-f13254f68d50.roa (raw, json)
Hash identifier: +FtkU+08BZsupAuAl7WIli8nBXSjMRMtDl3FGE/3JYA=
Subject key identifier: D8:48:49:64:86:25:C4:25:FC:91:05:0E:CC:FE:83:09:EE:BB:76:D0
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C5819E1D384810132213C180
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ebd0b740-e71a-3ff5-8b3d-f13254f68d50.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 72.173.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 17 Apr 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:9e:1d:38:48:10:13:22:13:c1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=76793483-7eca-437c-8219-b2a87f0159eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:99:97:7e:a1:e6:fd:be:95:30:16:e6:0d:52:
ba:d6:43:be:3f:d6:eb:c1:52:2d:88:9f:ef:ba:1e:
c0:24:5d:37:14:54:52:40:92:61:fc:2c:f6:d2:6d:
45:52:0d:8c:bc:4b:ed:36:a0:d2:77:03:96:97:92:
aa:18:0e:0c:7b:d7:75:ad:61:be:ee:94:6e:94:01:
4c:dc:75:f0:cc:ea:d9:fb:42:bf:7b:ac:6d:eb:bf:
b9:33:2a:18:c3:84:1a:56:77:db:0f:c2:aa:31:39:
93:2b:ab:87:a0:57:7d:3d:3d:d8:5c:26:db:7a:d3:
82:74:53:f6:23:25:2e:60:99:1c:5c:d8:00:69:b5:
52:c8:23:e9:82:ba:8c:41:07:01:21:b8:06:7c:63:
a5:75:70:74:49:65:e9:ae:32:ff:db:0f:32:72:44:
49:8f:19:26:14:37:56:20:14:8a:a5:48:73:43:b6:
72:dd:87:cd:b8:7c:95:98:4a:09:a6:f8:0a:e9:67:
1d:c3:2c:69:52:90:cf:55:9a:8c:78:7d:b4:9d:24:
c7:86:a4:6d:23:e9:85:e5:b5:fc:2f:b2:15:cf:c3:
3a:b5:f6:44:96:4b:17:46:b8:9a:b2:cd:3d:ad:6c:
2e:aa:54:14:0d:77:d0:c0:69:b8:9e:dc:ec:23:11:
81:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:48:49:64:86:25:C4:25:FC:91:05:0E:CC:FE:83:09:EE:BB:76:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ebd0b740-e71a-3ff5-8b3d-f13254f68d50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.64.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:5b:52:2b:b7:b5:46:9c:05:be:77:71:a5:bd:20:fe:1e:c2:
57:62:ad:5b:2f:37:10:b5:92:62:aa:04:f1:d5:25:f2:f9:96:
07:28:5b:57:d4:79:24:5b:cc:60:36:b6:e4:91:34:28:97:d4:
de:c2:b1:a9:17:b5:04:9d:09:a3:36:75:ed:eb:c3:f2:d8:b8:
8b:04:fe:bd:a7:41:84:4a:7c:bf:9f:fe:46:35:71:54:99:a4:
fd:20:37:2b:c7:6a:dc:65:7c:6d:0c:54:e5:1d:e2:1d:82:32:
2f:4a:e9:31:96:dc:bc:fb:ea:d5:3b:bc:44:7e:27:4d:c2:0e:
d3:b2:23:24:ee:56:c9:45:d4:a6:f7:b9:ac:ea:a8:c7:44:ff:
c5:26:7c:0e:ae:75:0b:01:8d:e7:00:cb:21:eb:d5:b8:0c:5f:
89:22:de:af:7a:4a:c1:f8:83:72:27:36:18:52:2c:45:88:71:
b3:64:ba:2d:0c:82:b6:1b:03:36:95:33:b1:9a:44:7a:0b:86:
83:8f:20:20:e2:28:2c:ab:ec:78:38:15:3b:30:57:75:bd:19:
c6:c0:f3:1f:f0:e8:04:59:2d:08:99:53:89:7f:9f:1d:d2:e9:
5d:f7:5f:10:cc:11:dc:e8:b4:42:c4:6c:8d:ed:4b:61:94:4e:
40:8a:75:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 01:12:39 2025 by rpki-client