Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/68be00ea-7a09-3ea0-bba4-85633fdc7cc6.roa
File: 68be00ea-7a09-3ea0-bba4-85633fdc7cc6.roa (raw, json)
Hash identifier: Uss6iVNKF9ThAxVdgCbF+oW6Bs9bzpqScgNEBopoESM=
Subject key identifier: 64:CF:F6:98:81:04:2E:F9:D9:38:F3:B0:AA:5F:85:0A:ED:55:8B:22
Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial: 010D0C9F43285848FD56C5F78B1ED5DC3ACD1420
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/68be00ea-7a09-3ea0-bba4-85633fdc7cc6.roa
Signing time: Mon 24 Feb 2025 14:00:52 +0000
ROA not before: Mon 24 Feb 2025 14:00:52 +0000
ROA not after: Sun 25 May 2025 13:00:52 +0000
asID: 16696
IP address blocks: 67.221.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:56:c5:f7:8b:1e:d5:dc:3a:cd:14:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Validity
Not Before: Feb 24 14:00:52 2025 GMT
Not After : May 25 13:00:52 2025 GMT
Subject: CN=273647b4-3329-48dc-bcb7-1bbd4c00a355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d0:7d:9b:4c:94:8f:0c:38:fd:80:e5:df:46:
df:00:5a:93:47:bb:9a:2e:07:01:0b:08:ba:07:6a:
87:d3:d2:16:17:13:e5:01:7c:6c:9a:3c:bf:49:6d:
cf:75:f4:3a:53:6e:f8:52:22:97:85:d9:cb:8c:de:
47:16:82:58:40:72:16:0f:32:df:b6:55:41:c3:53:
cb:27:31:78:cf:5f:b4:da:df:5b:85:e8:1c:69:b4:
31:d5:f8:1e:7b:73:1a:30:fe:dc:b7:29:a2:f4:3a:
74:c1:7c:68:2b:f3:c3:d6:2d:51:47:50:2a:20:68:
b2:d5:b6:89:e9:e4:02:35:dc:0d:0e:d5:54:01:5f:
38:9d:82:cd:a8:46:65:7d:9f:cd:24:a3:27:00:87:
b8:59:c9:6d:70:24:e1:09:d7:60:8c:8b:be:42:d3:
1d:32:7f:fd:91:44:f9:18:8b:54:f6:30:38:ad:92:
54:16:ab:9c:2d:af:42:0e:2c:f8:0d:fc:47:72:2c:
0e:bb:5e:02:e5:33:95:f0:94:33:51:ff:0d:41:f7:
78:70:ae:06:73:a1:2c:b9:f9:37:e0:14:44:3f:fc:
de:ce:30:4b:d6:cb:af:b7:ab:91:06:70:3d:83:eb:
08:13:26:7a:0b:ae:58:d8:e9:5f:78:20:8c:d1:fe:
ce:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:CF:F6:98:81:04:2E:F9:D9:38:F3:B0:AA:5F:85:0A:ED:55:8B:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/68be00ea-7a09-3ea0-bba4-85633fdc7cc6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
X509v3 Authority Key Identifier:
keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
sbgp-ipAddrBlock: critical
IPv4:
67.221.158.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:4e:00:c7:a5:2b:b5:65:37:86:96:19:84:28:82:b4:67:78:
ad:95:ee:ca:aa:6a:b9:4c:cc:73:b9:de:31:28:2a:14:6f:e2:
bc:9e:30:e1:e3:4f:6b:f4:f8:12:e6:b9:e4:8b:ea:ff:60:70:
4d:36:d6:7b:1b:55:a9:6a:6c:3d:0d:17:1e:57:22:3b:3a:2c:
ae:be:7f:1b:48:ee:b2:31:9f:a1:d0:12:4c:20:40:1c:c9:f1:
0e:d9:9f:1d:a5:eb:ff:81:47:5b:1b:09:43:02:fb:0c:52:a2:
96:f5:31:a1:51:bc:8b:f9:41:e8:a3:87:29:1f:30:98:af:9a:
d1:ee:2b:c6:4d:12:bc:82:99:d4:8b:f7:a8:75:93:28:83:bc:
d6:a8:cb:c3:46:6c:1b:5d:fd:d8:6b:92:fe:5a:46:30:af:d7:
04:a0:50:ea:f9:57:47:d4:e0:9d:2f:1f:67:95:1d:97:ec:12:
f7:56:07:72:55:f8:df:47:0c:58:b9:f4:41:14:01:d8:7e:1b:
23:ae:68:1b:89:33:5e:5d:8d:60:ee:23:d0:1a:1d:08:c4:fb:
04:90:73:01:36:bf:5e:92:dc:e7:f1:e0:dd:02:38:bb:7c:bf:
bd:e4:d3:b3:2c:1c:dc:f3:96:86:a1:4d:bc:2b:b5:04:ef:c2:
df:bb:2b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:14:04 2025 by rpki-client