Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5e80bcf6-b1a7-3f1d-ac5e-7c2041d15147.roa
File: 5e80bcf6-b1a7-3f1d-ac5e-7c2041d15147.roa (raw, json)
Hash identifier: TDAQd1vYyh/TSJdIBLPI3jrLgrvT6AsNOcucAIsb4gY=
Subject key identifier: F2:4B:EA:FD:82:62:C0:94:D0:41:93:33:74:AE:16:04:E6:E7:33:A6
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858489F306CEAD733DF054BD7EF00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5e80bcf6-b1a7-3f1d-ac5e-7c2041d15147.roa
Signing time: Tue 21 Jan 2025 20:37:59 +0000
ROA not before: Tue 21 Jan 2025 20:37:59 +0000
ROA not after: Mon 21 Apr 2025 19:37:59 +0000
asID: 7029
IP address blocks: 173.190.20.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9f:30:6c:ea:d7:33:df:05:4b:d7:ef:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jan 21 20:37:59 2025 GMT
Not After : Apr 21 19:37:59 2025 GMT
Subject: CN=a117f388-5a24-45e2-980b-08fac3861400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:52:64:af:1a:9b:ef:f3:cf:b0:00:08:82:47:
23:25:b2:30:fd:e3:d5:4f:54:d8:e8:f1:a7:ef:9f:
33:0f:88:80:8b:17:c0:19:97:2f:a9:1b:f4:7a:94:
48:1b:7c:b0:e6:be:e8:d1:f8:73:06:77:60:c6:8f:
3b:65:d8:e0:00:85:03:45:21:06:ac:aa:2e:26:34:
b2:7e:d7:1b:18:87:44:7f:23:8b:2d:39:a9:1f:86:
0e:d6:ab:d8:2c:72:9d:f1:fa:f4:75:ab:c6:a2:06:
c6:80:4c:ef:56:e5:5c:6c:eb:94:b5:f7:dc:7c:8c:
27:20:ac:54:1b:d2:52:31:4c:c4:20:78:53:66:92:
17:79:ab:43:36:dd:e6:57:27:36:e1:18:09:0d:f0:
b3:12:97:94:ec:c8:6a:62:00:c6:a7:2b:2b:46:68:
f6:5f:20:04:93:36:e2:2f:77:d0:f3:ba:d9:fd:d2:
8f:36:b5:af:a4:f6:a1:48:c5:9e:38:58:54:47:7e:
5c:e3:b4:2b:40:d3:d4:38:4b:bc:03:66:9c:4a:42:
83:97:d1:82:77:8b:56:d8:1e:5f:83:01:02:c0:66:
62:30:92:ad:24:67:52:ed:c4:bf:87:30:45:01:7b:
c8:8c:01:6a:e3:a3:78:7a:b4:fb:eb:be:e8:10:31:
ea:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:4B:EA:FD:82:62:C0:94:D0:41:93:33:74:AE:16:04:E6:E7:33:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5e80bcf6-b1a7-3f1d-ac5e-7c2041d15147.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.190.20.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:76:d7:41:d8:e5:0f:6d:0b:60:27:62:31:96:a7:dc:28:77:
5d:b3:5c:cf:74:1a:87:00:41:ee:81:06:0c:02:29:a2:3f:b8:
31:9a:5e:04:e7:7c:42:1f:ee:e7:44:c4:b5:f0:45:dd:cd:d5:
dd:84:85:4c:26:1e:81:26:63:e1:fa:ae:2a:ff:1d:42:46:d2:
58:5d:4a:49:d3:0e:6f:24:9d:65:54:68:ea:8a:78:61:7a:1f:
79:7f:0e:07:86:8a:61:12:c4:99:9a:41:e8:0c:25:60:85:3d:
1e:a1:1b:99:68:42:09:83:36:41:33:06:f7:43:06:b4:73:2a:
0a:1d:56:be:1f:23:9c:38:36:79:6e:f0:ad:72:7f:d6:5f:d6:
1e:bf:41:c5:e6:67:2f:c5:8c:84:b1:1c:71:7a:df:18:18:21:
10:7b:89:38:2f:a4:48:9f:7f:df:73:49:76:30:86:fe:93:48:
96:d9:02:da:19:55:a1:70:45:29:45:b3:87:0e:40:3d:49:b4:
66:53:7b:08:04:50:cc:34:1c:67:b2:0c:de:aa:1a:53:bc:91:
c9:66:46:95:f2:24:e7:78:b4:95:93:f1:52:f6:df:d8:ab:73:
4b:01:06:31:47:63:9a:a2:02:d6:3c:a9:0d:d3:74:01:26:5b:
7a:7b:89:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:47:52 2025 by rpki-client