Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0b212a95-6507-3efb-8707-78c34d59542a.roa
File: 0b212a95-6507-3efb-8707-78c34d59542a.roa (raw, json)
Hash identifier: 9R4SKYgD1iIez5W5ThZ3YnhBicAb2LorWQpvldzQrxU=
Subject key identifier: 68:2B:05:CD:81:DD:75:4B:EE:8B:A0:50:38:62:5F:C8:57:E8:C6:6B
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858496B7ED144088C1FDC7E613840
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0b212a95-6507-3efb-8707-78c34d59542a.roa
Signing time: Sat 05 Apr 2025 01:00:47 +0000
ROA not before: Sat 05 Apr 2025 01:00:47 +0000
ROA not after: Fri 04 Jul 2025 01:00:47 +0000
asID: 7029
IP address blocks: 173.185.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6b:7e:d1:44:08:8c:1f:dc:7e:61:38:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Apr 5 01:00:47 2025 GMT
Not After : Jul 4 01:00:47 2025 GMT
Subject: CN=55647512-d714-4a55-9c83-fbe69805daee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:22:15:4f:0b:dc:d6:f8:05:c3:64:5a:dd:22:
68:f1:26:87:e7:ac:79:96:b7:7e:78:ad:22:04:ea:
05:44:73:77:e7:f4:cf:4b:57:8d:44:15:5c:8c:89:
54:03:5e:84:5e:0c:20:c2:83:ac:52:22:fa:b1:24:
c5:1f:de:0e:15:85:70:a2:29:1d:b9:34:0d:2a:3d:
2a:99:17:70:07:4b:f1:65:80:1d:e9:a2:aa:4f:10:
cd:b1:0a:9a:95:b4:f0:e5:02:c4:14:8e:b5:a5:c9:
8e:a1:a2:45:65:5a:67:13:b1:d6:7c:7a:8a:b0:5f:
5d:af:6c:d3:01:61:87:8b:d9:d1:a8:2d:21:d3:92:
bb:eb:0a:9b:8c:33:fa:c5:fa:8d:1d:0f:5a:c5:5c:
03:e9:c4:a9:67:75:d7:d2:75:15:d1:24:fa:18:5f:
d4:f7:45:e8:e2:57:4f:5d:c3:93:1f:0d:fa:23:5b:
e3:fd:15:a7:64:dc:c8:4d:a8:ff:a0:55:83:8d:e4:
81:ab:79:c8:50:fa:fa:82:01:0b:ea:06:7c:1d:47:
29:8c:52:82:f4:2d:c5:be:71:1d:89:51:a2:46:70:
bd:99:8c:48:d7:fe:68:44:4d:05:a3:ee:f5:9e:a8:
59:86:4e:45:76:70:76:35:eb:0a:a9:87:1c:7b:43:
ab:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:2B:05:CD:81:DD:75:4B:EE:8B:A0:50:38:62:5F:C8:57:E8:C6:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0b212a95-6507-3efb-8707-78c34d59542a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.185.34.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:71:b7:89:8c:9a:86:21:60:5b:4d:b8:9c:f2:1e:ff:14:a4:
0e:6c:4d:83:21:ff:63:7e:7d:9c:b3:98:c9:35:c2:7d:95:7c:
68:11:da:fe:8c:2e:1c:d2:e2:98:95:a6:3a:d1:8f:d1:30:2b:
e9:a2:6c:df:f4:50:c6:32:67:13:6a:1c:5a:6a:84:f5:98:d6:
8a:33:a2:0b:a6:fb:17:5b:1c:99:08:e4:13:4e:6d:52:28:35:
6f:38:85:e3:c7:91:31:27:bb:81:b4:f2:ba:77:ac:1b:60:d1:
18:fb:69:e0:6e:bb:22:c5:49:6c:0b:0f:79:26:29:0a:82:32:
33:db:c1:f9:5e:d8:f0:4d:77:10:12:48:25:cc:8d:bc:40:0f:
c4:ba:3c:c5:41:39:84:08:23:35:bb:ec:34:dd:dd:aa:25:55:
ba:f8:78:9f:3e:c2:8c:5b:79:5a:9f:dd:8e:be:a8:b3:cb:57:
d3:92:34:ca:6c:34:a2:71:da:95:80:3d:13:89:c4:34:11:be:
7e:4c:aa:15:d3:d6:f3:58:05:11:25:4f:f9:b1:03:c5:52:a7:
c8:87:ef:2b:24:54:57:0a:6a:0d:28:cb:99:e9:be:8d:89:bc:
e6:78:e4:2a:5d:5f:b1:23:a0:50:38:5e:3c:51:38:73:06:79:
bf:a0:cc:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 12:22:18 2025 by rpki-client