Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a92da870-be06-471e-89b6-f5063eb7350b/67327c68-e5d6-3627-85b7-1a55250b5551.roa
File: 67327c68-e5d6-3627-85b7-1a55250b5551.roa (raw, json)
Hash identifier: ecVQIDVy6Walv5wjNAKGq8HP2mCEg2SvnCkHYqvV0Rc=
Subject key identifier: D4:21:F8:E9:36:2B:F5:39:3F:6D:0B:16:AC:12:D9:5E:D6:54:DD:72
Certificate issuer: /CN=a92da870-be06-471e-89b6-f5063eb7350b
Certificate serial: 010D0C9F4328584957F40BC1AFA327BBEBD20EF8
Authority key identifier: A7:74:2E:49:15:B9:70:2F:E8:B7:60:50:ED:7A:A4:DD:14:A3:74:A6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a92da870-be06-471e-89b6-f5063eb7350b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a92da870-be06-471e-89b6-f5063eb7350b/67327c68-e5d6-3627-85b7-1a55250b5551.roa
Signing time: Sat 29 Mar 2025 01:00:39 +0000
ROA not before: Sat 29 Mar 2025 01:00:39 +0000
ROA not after: Fri 27 Jun 2025 01:00:39 +0000
asID: 397050
IP address blocks: 168.149.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a92da870-be06-471e-89b6-f5063eb7350b/a92da870-be06-471e-89b6-f5063eb7350b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a92da870-be06-471e-89b6-f5063eb7350b/a92da870-be06-471e-89b6-f5063eb7350b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a92da870-be06-471e-89b6-f5063eb7350b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:57:f4:0b:c1:af:a3:27:bb:eb:d2:0e:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a92da870-be06-471e-89b6-f5063eb7350b
Validity
Not Before: Mar 29 01:00:39 2025 GMT
Not After : Jun 27 01:00:39 2025 GMT
Subject: CN=688b8a9e-819a-450f-ad61-f399e59234d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7c:73:6b:1f:99:98:6f:eb:af:a0:7d:b6:92:
33:20:48:9a:5b:9b:c9:f1:56:24:96:f0:e4:21:8f:
3a:34:cd:cd:01:b4:e4:10:8e:24:64:e0:23:e8:e4:
17:64:94:26:0f:97:58:cd:47:c0:e3:bb:06:7f:86:
96:4a:f5:36:a6:95:97:26:9a:68:c4:f7:39:22:44:
67:66:71:23:cd:0a:8f:40:0b:13:64:38:d1:cd:4d:
d2:0c:0f:e4:3e:78:0e:3f:35:ef:a4:be:b8:8c:24:
65:70:58:90:18:6f:64:e5:44:ee:8a:13:2d:5b:24:
14:3d:3e:d9:e6:39:43:08:5f:61:10:d5:5d:be:3c:
2d:4c:bd:39:60:8b:1c:14:d6:8f:73:9f:5b:51:a2:
f4:0d:6a:db:d2:64:4c:bf:36:b5:44:f4:89:fd:e6:
41:f1:0d:f5:f8:f7:9a:21:fc:5e:00:09:61:d3:de:
e2:fa:39:cc:bf:6f:13:82:48:0e:1e:23:d4:4f:36:
06:dd:8e:41:31:99:e9:aa:b1:06:f0:89:56:90:d0:
37:af:d0:36:2e:cf:6a:44:78:80:4d:2c:ac:e5:a0:
79:f5:88:ae:92:b5:62:70:3f:d8:82:cc:2b:af:e1:
07:f6:94:12:1f:fc:ad:32:5a:fb:df:0c:0f:d0:73:
92:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:21:F8:E9:36:2B:F5:39:3F:6D:0B:16:AC:12:D9:5E:D6:54:DD:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a92da870-be06-471e-89b6-f5063eb7350b/67327c68-e5d6-3627-85b7-1a55250b5551.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a92da870-be06-471e-89b6-f5063eb7350b/a92da870-be06-471e-89b6-f5063eb7350b.crl
X509v3 Authority Key Identifier:
keyid:A7:74:2E:49:15:B9:70:2F:E8:B7:60:50:ED:7A:A4:DD:14:A3:74:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a92da870-be06-471e-89b6-f5063eb7350b.cer
sbgp-ipAddrBlock: critical
IPv4:
168.149.192.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:29:ac:b7:6b:10:88:42:c7:74:a6:cb:7c:a8:28:b8:16:0c:
b6:6c:32:5a:ef:52:9d:3f:07:f0:31:27:e0:a4:8e:6d:71:8c:
fd:58:42:c6:b6:e5:e2:1f:08:7b:09:2b:50:99:ce:4f:da:12:
7f:6c:27:e0:2d:85:75:39:be:c0:3d:91:c8:d7:ba:f0:81:74:
55:e6:ee:0d:25:42:98:09:88:5b:3d:dd:55:d7:de:47:c3:34:
11:f4:8f:76:c0:1c:52:cd:15:73:a4:11:30:16:cc:c4:7f:0f:
28:9a:57:21:74:cf:3d:cd:39:ee:09:ac:bc:b1:a8:f5:df:e9:
d6:c7:be:66:bd:77:94:9f:df:ec:5a:5b:6e:02:d0:1d:c2:fe:
b5:74:b5:c9:f4:cb:5b:f8:83:e6:0b:22:6d:3c:c2:4e:53:3f:
11:8a:f1:7e:64:24:cb:a8:d7:45:89:14:e8:f8:52:a0:26:62:
55:20:4a:6c:c9:aa:53:da:66:6b:e4:ef:f5:7f:a3:5b:c7:04:
a2:dc:c7:71:b2:e6:10:5e:d2:45:32:29:4c:ce:8e:ee:f8:d4:
f6:bf:c8:1f:7e:22:fd:ef:96:a6:2a:27:db:4c:ca:63:69:bf:
66:49:0b:86:4c:d9:00:a6:c2:6a:1e:cd:46:8a:2e:d0:1a:bf:
c5:10:ef:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:29:52 2025 by rpki-client