Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b13cf454-1554-37dd-b832-ed3e46bcfb49.roa
File: b13cf454-1554-37dd-b832-ed3e46bcfb49.roa (raw, json)
Hash identifier: CMkEmiiOpalYVXhOthQF3PrqG+vdDxIQgkCJKcjpzZA=
Subject key identifier: 22:7F:C3:C6:B6:46:DE:60:5A:AB:F0:CC:F9:62:DB:C5:7C:9D:A3:78
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D21104F8A7DA8BC9DB8AE420
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b13cf454-1554-37dd-b832-ed3e46bcfb49.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 36117
IP address blocks: 66.153.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:04:f8:a7:da:8b:c9:db:8a:e4:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=eb69ccbb-2499-460d-9e30-2717601add82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:32:3b:1f:59:d7:88:8a:87:a9:fd:45:39:9c:
20:30:b2:77:d4:e2:a1:ef:e9:db:82:e5:62:c9:25:
06:9d:c6:be:5e:13:f6:95:57:29:63:82:e6:5a:d0:
ce:b0:28:9c:b9:12:07:80:37:36:5e:39:b3:75:2e:
79:be:35:f2:af:97:6f:28:0f:49:63:63:63:bd:9c:
40:fb:4f:e9:8f:25:b8:92:d4:3d:28:34:d7:8b:26:
83:3b:34:bd:31:8c:03:d3:ea:1a:d1:ed:bd:78:fe:
32:1f:a4:9d:58:90:2d:97:ab:29:2c:e7:b9:85:3a:
82:b1:9e:4b:e5:b7:cd:81:2f:1d:ee:44:75:e0:16:
e6:fa:ba:e2:10:fd:da:25:50:b1:bb:aa:e3:c3:ee:
cf:7f:3c:68:57:87:84:3a:5f:22:f4:85:f4:af:cf:
f8:ff:51:a8:8b:10:c8:74:a1:c9:07:74:12:b7:ef:
33:97:99:ed:6d:34:48:bf:ec:4e:48:f3:99:2f:89:
d8:a0:3e:34:be:b0:c4:64:03:a5:f4:d1:f7:68:97:
f5:07:24:55:c5:45:39:4a:48:bf:2f:49:4c:2c:7e:
94:c8:81:05:6e:c3:8d:e5:09:b8:de:bb:d3:a3:61:
86:41:2e:85:2f:9c:ab:a9:dc:4f:2f:86:e8:02:78:
45:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:7F:C3:C6:B6:46:DE:60:5A:AB:F0:CC:F9:62:DB:C5:7C:9D:A3:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b13cf454-1554-37dd-b832-ed3e46bcfb49.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
66.153.40.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:fb:7c:c5:cc:a8:8c:2a:8c:42:1a:e4:b0:03:90:33:17:2b:
11:28:80:ab:34:fb:67:71:f8:f1:95:20:63:99:b9:a9:2a:35:
53:eb:3d:ae:78:e3:32:8a:7f:dc:4a:d7:b5:62:b0:9f:f5:b2:
c5:e7:c0:72:44:7c:4a:e9:d7:8d:92:40:48:55:e8:33:11:d5:
95:9f:f4:e3:d1:93:d2:3c:88:32:e5:3e:2f:84:06:bc:44:8f:
f3:11:e1:fc:f8:aa:94:63:81:8e:ac:27:aa:fd:c4:5e:35:9b:
98:be:e0:61:d8:62:fa:8c:ae:36:64:64:d0:cb:98:60:0f:df:
80:09:d7:88:77:7d:ca:57:0a:34:9d:0e:86:21:83:00:d0:4e:
63:c5:4d:3d:4d:56:be:f1:24:4d:4e:30:71:26:26:e8:a0:96:
b3:f8:1c:c8:d5:11:3a:77:63:1b:d9:e1:41:fd:76:c5:4b:45:
70:94:27:7e:06:a9:03:2e:b0:a4:d1:4e:81:c2:ab:62:f9:0c:
04:aa:bc:45:4d:da:9a:e3:15:c5:80:f2:76:5f:8f:3f:56:06:
aa:90:44:5d:72:8f:d7:d0:c9:d9:99:bf:75:8a:3e:a4:dc:6d:
80:4c:6d:45:c6:41:5a:7b:58:12:b3:f5:38:5c:85:a4:8b:46:
2c:0b:4e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 22:04:51 2025 by rpki-client