Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4cce11ca-c7f8-343e-aa37-07768ce5cb0a.roa
File: 4cce11ca-c7f8-343e-aa37-07768ce5cb0a.roa (raw, json)
Hash identifier: W/vg1xubCRqnp5EuCjdohf00t7xzzVFPbyXb88FCSLA=
Subject key identifier: 0E:B5:47:8A:CB:CE:96:67:E6:2B:40:DF:66:D5:9D:00:F0:9D:98:5B
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285849071BF8257266274CF7FAA240
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4cce11ca-c7f8-343e-aa37-07768ce5cb0a.roa
Signing time: Fri 28 Feb 2025 02:00:39 +0000
ROA not before: Fri 28 Feb 2025 02:00:39 +0000
ROA not after: Thu 29 May 2025 01:00:39 +0000
asID: 13335
IP address blocks: 104.29.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:07:1b:f8:25:72:66:27:4c:f7:fa:a2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 02:00:39 2025 GMT
Not After : May 29 01:00:39 2025 GMT
Subject: CN=0754324d-599f-45d2-b087-8ec3a85b2e01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:49:32:94:b4:ad:79:d3:0d:6f:3c:9c:aa:cd:
87:69:29:8a:26:3e:70:c8:25:a6:e3:50:14:cd:fa:
8b:9b:a4:a3:4e:c6:a1:92:8d:d5:0c:76:ee:f1:8b:
04:1d:00:86:e6:e7:47:3e:68:ad:f2:33:35:67:77:
b9:7c:b6:2d:e7:e2:3e:2a:67:f4:a2:81:aa:bd:fa:
f5:2e:8d:90:23:a5:22:39:d9:06:f0:3b:a6:28:f6:
1d:5b:85:1b:a2:00:fe:14:a9:c8:eb:f4:97:6d:48:
cd:7a:d1:a0:ec:d9:a0:d2:3a:3e:d6:2f:3c:21:99:
c4:83:62:1a:d5:14:ae:66:9c:e1:4b:da:03:03:04:
1f:66:f8:2d:b7:2a:19:8b:c3:c4:1c:36:45:b2:c5:
c5:c6:4c:3e:1a:a2:34:e1:fe:52:e4:31:07:65:89:
8a:32:6e:80:f4:fa:97:1b:ab:fd:dd:be:84:6d:ee:
95:87:c8:03:66:9c:c4:d9:b7:79:82:04:44:09:0c:
48:4c:63:cd:49:0c:ab:fd:06:76:fe:9b:6c:df:e9:
b9:e2:3c:34:37:4b:7b:ae:a8:d2:bc:3a:37:9d:b7:
ec:0c:48:ea:cd:b2:a9:66:26:48:49:dd:4e:a9:b6:
5e:3c:d1:b1:49:5f:31:c5:23:e4:a2:2d:39:72:4c:
0e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B5:47:8A:CB:CE:96:67:E6:2B:40:DF:66:D5:9D:00:F0:9D:98:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4cce11ca-c7f8-343e-aa37-07768ce5cb0a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.29.72.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:13:fc:75:1d:32:4b:59:61:d5:76:6b:a4:35:ed:f9:59:c7:
0e:e3:4c:b1:3f:a7:a6:11:2c:fc:5f:b3:f6:68:13:7e:9a:17:
a5:5f:13:0c:de:27:63:9e:dc:bc:47:d0:4f:95:9a:d4:ee:53:
7e:4c:d3:0d:82:58:16:78:87:6d:dc:a4:ad:2a:2f:dc:07:77:
13:0a:9c:e2:51:46:91:4a:56:76:ba:14:84:a0:93:b1:f0:15:
38:a6:86:8f:04:bd:01:64:01:33:74:8c:e0:4c:0c:af:2c:f8:
e0:7e:fe:47:bd:e8:2f:27:42:33:ba:93:d1:ac:ec:5a:9b:1c:
dd:77:23:66:02:60:0b:e9:9c:ba:e4:9d:bb:73:4a:88:85:dc:
d7:6f:ec:a9:2d:b8:ea:03:0f:51:07:07:85:07:10:3d:32:38:
87:c6:38:f3:2b:59:2c:c7:af:8e:8a:e2:5e:d4:a9:40:a6:00:
33:e3:e9:9b:b1:e2:ad:bd:c7:ee:d5:42:02:0c:43:48:e4:6f:
55:e7:c8:7c:3b:30:cf:8a:f4:fd:ca:21:ec:88:54:c3:b2:b7:
bd:61:68:1d:32:d4:b0:8a:16:85:05:29:c3:84:13:a3:89:fa:
88:00:0d:c4:67:9a:7f:26:85:46:2b:f4:4e:b5:24:11:d5:1b:
ac:b3:b9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:50:08 2025 by rpki-client