Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/84112744-e979-3151-afdd-e00f78cf013d.roa
File: 84112744-e979-3151-afdd-e00f78cf013d.roa (raw, json)
Hash identifier: HPni+KANTKcuOOVoqkvdrRuuL48DA+UQqX6uYgcTiJk=
Subject key identifier: 2A:83:C0:4C:E8:89:0C:BE:D9:BE:5B:7B:FC:15:59:5A:17:B4:71:BB
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D2112049C2EC3496D6A1C900
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/84112744-e979-3151-afdd-e00f78cf013d.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 7029
IP address blocks: 76.160.0.0/15 maxlen: 15
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:20:49:c2:ec:34:96:d6:a1:c9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=2464ad8e-b9a6-4386-be1c-be19354f41f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ad:7b:f8:77:0c:49:2e:45:97:32:14:61:ea:
0b:c7:9b:d3:40:51:33:90:83:46:cb:a2:98:3f:ae:
c2:8f:21:d5:da:95:74:a7:65:7e:7f:8c:5a:e9:6e:
8a:66:f6:05:31:fa:3f:1c:1a:b4:c0:f5:0d:00:dd:
ae:05:58:66:24:ea:01:36:11:5f:d7:d6:37:37:7e:
4f:50:b9:a1:71:b8:15:21:f5:fa:86:07:29:92:62:
1b:0d:36:85:23:ec:9f:6d:d5:1e:a3:b8:24:0f:88:
6b:01:1a:32:b7:70:70:ba:ef:04:60:63:f9:f8:d9:
2a:9b:cc:c7:86:96:1a:a0:5d:bb:7d:f5:93:b6:02:
c9:68:6e:ee:23:ea:24:cb:81:ca:a5:3c:f6:2d:e1:
e2:29:5b:08:68:d9:ba:33:81:49:5e:58:7c:1f:ec:
13:33:67:39:f8:bf:1d:49:29:ec:0a:0c:1f:bf:ee:
df:32:3b:48:1c:e4:35:cf:16:f2:02:82:a4:2d:83:
ae:7c:71:3f:83:d8:fa:41:04:92:33:fb:e6:dc:d2:
44:e7:6f:35:ae:03:af:18:16:0c:bf:79:16:d2:ce:
db:06:49:ad:c1:6b:3c:d5:01:61:2d:2b:60:96:e2:
66:ed:30:95:42:d4:a8:f5:a3:12:4e:7d:72:1c:24:
f0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:83:C0:4C:E8:89:0C:BE:D9:BE:5B:7B:FC:15:59:5A:17:B4:71:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/84112744-e979-3151-afdd-e00f78cf013d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
76.160.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:07:5e:37:7f:25:28:53:55:92:e9:90:14:ff:1d:0d:4e:fe:
b1:25:c4:63:34:6a:bd:38:39:e3:0d:ae:fd:78:23:f8:15:97:
99:df:37:af:ae:c0:5d:ce:28:10:60:b3:cd:48:60:ef:fb:1f:
06:e3:6a:49:34:54:fa:1d:aa:a9:41:48:e3:59:2a:bd:6f:74:
c7:ba:28:fa:1a:cd:af:9b:fa:07:89:8f:77:ea:e0:bf:8e:38:
ce:80:fd:dd:e7:19:b3:41:c4:9a:ff:48:4a:68:33:b4:7c:36:
d9:14:d9:9a:28:45:16:88:3d:76:70:3c:63:01:3f:61:29:9b:
16:dc:2a:0a:f7:f6:d0:4c:b1:a4:55:b6:dc:82:93:ee:ec:ec:
a7:dc:a7:95:f8:89:a6:09:29:da:ce:9f:e1:fb:da:be:db:57:
30:ee:32:8a:7f:74:9a:1a:4f:d4:61:1f:8c:bd:62:0d:93:38:
ba:29:a1:68:b0:80:8f:64:6b:72:f0:78:0f:5c:a9:c6:7a:99:
47:a7:c2:4d:bc:0b:84:f5:f0:54:21:dc:e8:1b:a1:37:72:9d:
3e:e7:0e:27:c5:7f:78:7e:3d:02:5b:7a:03:c5:0b:fc:08:de:
4c:76:c7:40:48:51:ab:a1:d4:5a:5e:1d:65:8f:c3:a4:c8:fe:
8a:88:7b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 22:37:56 2025 by rpki-client