Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7cd7301d-8874-31f5-bc17-74bd6043da2a.roa
File: 7cd7301d-8874-31f5-bc17-74bd6043da2a.roa (raw, json)
Hash identifier: OjblA9pTEVOxASv4JW1NCoOa1Khdn5do3EE98/RBb/o=
Subject key identifier: 08:F5:D5:DA:7C:AB:EA:51:C0:60:F0:04:26:CC:28:2C:EB:91:0D:B3
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D211202A542F2645F2641580
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7cd7301d-8874-31f5-bc17-74bd6043da2a.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 7029
IP address blocks: 75.117.220.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:20:2a:54:2f:26:45:f2:64:15:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=75322bf8-e2f4-471d-8bbe-8abc697767f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b6:c1:e4:33:f9:d3:3d:75:89:bf:8d:14:e4:
27:c7:5d:7b:f2:2c:a3:e4:1b:42:6a:14:27:74:53:
9e:47:a3:8a:6c:07:c4:eb:db:c7:f2:7e:54:d7:7f:
ac:ec:ca:89:1d:9f:b9:29:11:29:70:d3:4a:4d:78:
a6:6a:c9:f1:c7:eb:1e:a8:f3:1f:81:28:87:b5:f4:
59:1e:eb:de:37:bf:c4:f0:5a:7d:50:b6:11:65:f3:
2c:b7:14:59:84:d5:36:f3:90:c7:a7:7a:c9:fe:d6:
34:c9:06:58:19:e6:4c:c8:65:ef:7c:64:88:1d:2c:
77:8a:44:05:d0:04:1f:94:0d:41:7b:79:45:fb:b5:
55:6f:98:a7:f6:d8:01:0b:ac:e1:67:2b:a5:54:6d:
49:48:18:92:09:d6:98:13:8f:68:55:ba:ac:47:b0:
24:67:9b:30:4d:06:a5:6c:a3:c3:ed:1c:55:93:07:
96:8d:f2:65:f0:00:6e:aa:3e:98:f5:e2:e2:e4:20:
75:09:26:19:b2:92:9c:6d:47:68:27:eb:c2:3a:dd:
5b:85:4e:44:6b:43:4b:fb:2a:10:d8:12:c8:08:00:
32:66:a3:74:dd:f9:5e:c1:36:24:30:53:ee:d4:23:
61:65:70:47:5e:10:0f:86:f6:38:a1:18:92:cf:ef:
aa:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F5:D5:DA:7C:AB:EA:51:C0:60:F0:04:26:CC:28:2C:EB:91:0D:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7cd7301d-8874-31f5-bc17-74bd6043da2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
75.117.220.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:ff:72:8d:b1:28:5b:48:95:a3:63:ed:1d:81:6f:56:18:f2:
20:56:51:f2:6c:8b:37:fd:f8:fc:75:5f:80:cd:dc:a1:96:a7:
b4:68:55:6f:a2:7a:65:8e:d8:59:4a:03:63:c6:95:15:e8:0f:
d5:ea:f8:66:4f:40:49:a8:eb:a4:4e:26:66:e6:33:6e:9c:a3:
c5:ff:a1:78:76:e9:55:89:8e:86:35:47:45:a4:44:e5:ef:3a:
28:7e:f1:9a:38:f4:5a:8e:21:63:00:e5:62:e6:24:10:33:0c:
b7:62:fc:2b:62:28:c0:5e:ec:2f:de:9f:61:a3:65:61:96:5d:
e5:cd:aa:c0:b4:43:e6:55:c5:17:f5:01:d2:ce:b6:78:37:a2:
25:78:fd:5e:4f:33:0d:ff:f4:72:a9:58:d8:46:60:e2:e1:d8:
f1:32:98:1f:ab:91:09:e9:03:c2:51:98:7b:cb:53:5e:96:50:
d8:91:59:ef:6c:e9:76:e2:7a:12:55:5a:a1:7a:26:97:f7:fb:
68:c1:19:a7:8b:e0:b1:d1:c6:de:08:d0:df:32:39:14:b2:d8:
cc:bc:7f:e9:81:dc:91:18:6e:87:dd:76:f6:07:40:5e:94:13:
0a:c0:6d:95:48:6a:9f:e8:fc:54:be:e4:28:9d:aa:ef:1a:36:
82:07:77:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:49:50 2025 by rpki-client