Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0d42aca5-ae5c-34d6-8e24-7aad0f426f15.roa
File: 0d42aca5-ae5c-34d6-8e24-7aad0f426f15.roa (raw, json)
Hash identifier: 2dJNxRRnu4kkIsszrAG8dfM18v3+Lg19G/2rQwCyl+A=
Subject key identifier: D7:1E:0A:BF:BA:68:8F:50:D5:40:A8:1B:BB:71:59:CA:4F:7B:5C:AE
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D210FAC5EE793082057C8500
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0d42aca5-ae5c-34d6-8e24-7aad0f426f15.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 7029
IP address blocks: 216.106.176.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:10:fa:c5:ee:79:30:82:05:7c:85:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=b0829a34-fd53-42b2-85ca-e859f339d832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:77:a1:6e:a7:9d:64:67:1a:7a:ac:33:66:bc:
24:0a:c2:73:23:9f:98:09:d2:52:54:34:78:ac:ac:
1c:5f:ba:aa:10:a6:f6:e0:9e:42:ba:7c:e2:16:30:
b6:63:8b:75:70:89:9e:41:f9:01:3f:1f:d2:19:b8:
34:e7:6f:ea:86:cb:c4:20:07:93:ee:61:65:ec:5f:
30:c1:58:98:ca:fd:4d:1b:93:05:b7:53:ac:4e:72:
82:76:f2:ba:7f:02:e2:a8:da:9d:79:79:3e:44:26:
3a:f2:0f:87:b7:61:e1:df:e7:4f:82:6f:1c:f2:1e:
ad:ba:24:b9:c8:8a:93:bc:0e:2f:e3:fb:83:f4:6c:
57:e2:cc:6b:9d:fa:5c:89:0b:fd:a6:36:9a:19:57:
36:35:09:6f:eb:a9:1a:3e:56:bb:b5:67:bf:0d:0d:
95:16:c4:45:df:b4:f4:fa:da:c7:a5:33:b6:4b:3c:
3c:dd:dc:c8:06:67:10:e0:0b:b0:62:9c:5f:d8:91:
32:2b:10:8d:70:e7:f4:9c:ac:c7:cd:f0:45:ee:ca:
34:8a:ab:2d:66:1d:f0:61:03:6c:c1:45:f7:7c:e3:
89:61:3b:92:e8:34:92:a4:c6:13:d4:1e:0d:db:9c:
79:8a:e0:69:ca:96:0e:75:78:00:68:97:c6:4d:f9:
e1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:1E:0A:BF:BA:68:8F:50:D5:40:A8:1B:BB:71:59:CA:4F:7B:5C:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0d42aca5-ae5c-34d6-8e24-7aad0f426f15.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
216.106.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:af:8d:fa:ea:7b:6c:d7:19:a6:87:b6:65:dc:31:d9:9d:dc:
8f:c5:5c:f7:a0:6a:95:47:a9:94:2e:e4:1f:e2:04:fa:d4:fa:
5e:68:4d:ca:d6:05:12:f7:e0:f2:23:45:52:36:a1:f7:48:6e:
ba:b7:5b:6b:f5:5e:12:f6:c6:70:ad:53:54:e7:47:87:42:e4:
be:84:0d:f0:8c:e6:76:1a:c8:a5:3f:6c:e4:ea:c1:be:9e:2a:
8d:80:b3:50:5c:4a:e5:58:79:00:d0:69:3c:af:0e:71:2f:ac:
94:83:13:ac:70:3d:e0:27:d9:a7:d4:7d:58:5a:9c:b6:4a:a6:
06:aa:eb:0a:9b:f6:30:73:7b:be:9e:fb:79:9d:b4:91:e4:fe:
9a:a3:2c:48:73:df:ef:61:d1:3f:56:1f:cb:3d:2f:97:da:31:
fb:dc:a0:48:e9:5b:8f:3f:7c:d7:43:f7:9d:f8:d8:10:58:98:
1c:01:c4:7b:21:02:26:23:c4:07:92:74:69:b0:f8:47:db:b0:
e9:46:5f:bd:b3:75:db:a2:dc:10:7b:44:14:2c:3b:0c:ec:a4:
64:9c:bf:f5:f5:cd:ec:36:d8:64:96:d6:69:d1:6d:f1:46:53:
da:51:6a:b5:2a:ac:9d:80:94:d2:fe:6b:f1:b3:8c:c8:e0:89:
d8:c5:f9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 07:08:02 2025 by rpki-client