Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/abeb276b-390d-319e-8b39-73e7483a65f9.roa
File: abeb276b-390d-319e-8b39-73e7483a65f9.roa (raw, json)
Hash identifier: kZRm87kKDQ9fgJ4gRIGKYbMEwowiJSWp8TL317BB+d8=
Subject key identifier: 8E:AB:AB:55:05:74:2B:E2:91:3F:56:C3:0F:D6:3B:80:71:F5:BD:E3
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858491D71688034565372F01B8E20
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/abeb276b-390d-319e-8b39-73e7483a65f9.roa
Signing time: Sat 08 Mar 2025 02:00:39 +0000
ROA not before: Sat 08 Mar 2025 02:00:39 +0000
ROA not after: Fri 06 Jun 2025 01:00:39 +0000
asID: 7029
IP address blocks: 71.29.184.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1d:71:68:80:34:56:53:72:f0:1b:8e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 8 02:00:39 2025 GMT
Not After : Jun 6 01:00:39 2025 GMT
Subject: CN=a077b7c7-8e6d-4e70-bdf6-27c078cfcb2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ff:ad:29:91:fc:e9:bb:a8:bc:84:67:50:a1:
c6:00:ed:92:8c:f0:99:3c:fd:fa:fd:b6:09:97:a9:
41:95:1b:56:55:6d:fa:85:c8:d4:cd:0c:d5:7f:c1:
c0:d9:cc:93:02:ee:0c:63:9c:a0:89:8e:85:4e:b5:
d0:3d:0a:52:2e:f1:9a:73:cc:14:f1:d2:04:58:19:
ec:79:9a:f3:ff:44:97:36:eb:cd:d1:4f:e7:0d:02:
66:a7:d3:40:61:80:5e:b9:9d:f8:85:e4:b4:f3:d1:
f9:bc:08:47:29:09:fc:5a:4f:5e:d3:2f:41:52:63:
73:1f:be:df:bc:9a:a1:a0:15:77:58:5b:ac:8a:4a:
ab:b6:97:d1:0c:ba:b0:63:8c:8c:83:af:0f:88:28:
87:0e:39:ab:3f:3a:fd:95:32:1d:f4:07:80:4c:62:
b3:1d:79:f0:d2:f7:d4:7a:98:7b:38:04:97:0f:b7:
12:c6:ae:34:a6:98:e1:78:e6:8e:df:b1:98:54:4a:
76:f9:2c:69:f7:1d:b6:3b:18:7d:fb:4b:06:03:4a:
0e:76:95:03:70:e0:a8:b9:1b:2a:71:74:61:7a:51:
36:95:ec:09:6e:47:48:fc:3e:4f:f1:e0:cd:52:25:
d0:4f:15:0b:78:8a:91:20:ea:43:07:7b:c3:ef:f4:
0c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:AB:AB:55:05:74:2B:E2:91:3F:56:C3:0F:D6:3B:80:71:F5:BD:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/abeb276b-390d-319e-8b39-73e7483a65f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.29.184.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:6b:e5:10:51:82:ce:77:15:54:0e:5c:d0:af:e1:3d:fa:06:
ec:63:39:20:31:ce:0a:21:26:61:d5:34:31:95:87:8c:50:ec:
5f:bc:f5:38:02:f0:8e:2c:de:af:b1:48:8d:43:7f:c4:30:18:
e5:f7:f3:7b:fe:97:50:c7:f2:00:85:3c:9e:a2:b3:78:c5:5d:
11:74:28:91:6d:b4:4d:a7:d7:62:59:ae:92:48:3a:38:88:97:
8d:d6:37:88:90:e9:03:64:b6:74:f1:b5:8f:ab:a2:74:be:3d:
8b:c1:50:ad:5f:16:39:72:46:eb:ee:2c:ec:85:08:79:9b:20:
c3:2d:90:f8:37:1f:34:aa:74:44:1d:4a:bf:23:e6:64:6d:4c:
0d:a0:e3:a3:26:98:21:25:d5:5e:f7:e8:92:bd:d2:29:11:db:
45:b6:9d:5e:b3:38:de:15:ac:62:4f:71:11:e7:6b:8c:55:44:
b9:91:be:90:bb:0a:61:98:cc:16:aa:a5:80:57:9b:fc:4b:af:
23:52:8d:57:e1:db:0c:6d:63:0c:30:af:b1:dc:b8:3a:e6:75:
76:60:fd:e2:3e:fd:79:fc:dd:df:fb:6a:04:60:f0:6b:79:35:
15:bd:5d:71:a0:0e:35:4c:54:a7:ee:b6:65:51:1e:6e:8e:49:
2b:5d:15:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:31:41 2025 by rpki-client