Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b38aba09-012f-3d09-87cf-93c71f23adb3.roa
File: b38aba09-012f-3d09-87cf-93c71f23adb3.roa (raw, json)
Hash identifier: FEpKc6uaHPgI44vzgJYRRZ5MDsd3NVkQkJhTu2rKRxs=
Subject key identifier: 9D:2B:D4:0A:5B:E8:D9:8A:76:4A:59:58:CE:44:05:24:50:17:F1:E1
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858496A19B999EE7A489700742700
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b38aba09-012f-3d09-87cf-93c71f23adb3.roa
Signing time: Fri 04 Apr 2025 13:00:59 +0000
ROA not before: Fri 04 Apr 2025 13:00:59 +0000
ROA not after: Thu 03 Jul 2025 13:00:59 +0000
asID: 7029
IP address blocks: 173.185.128.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6a:19:b9:99:ee:7a:48:97:00:74:27:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Apr 4 13:00:59 2025 GMT
Not After : Jul 3 13:00:59 2025 GMT
Subject: CN=e5872162-542f-4405-a6d3-6b4e5bcfc880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:3b:a3:7c:84:5e:1a:ac:6c:dd:ba:c0:8d:37:
ab:5c:ed:c3:df:e7:58:b8:40:9c:a9:68:cf:17:c8:
04:7f:bf:9a:04:8f:d9:00:45:3a:4f:9b:1f:f1:16:
04:f4:29:16:28:e6:f7:19:08:be:e3:1e:b7:2a:d1:
4d:60:bc:94:14:56:a8:1e:e1:4f:c5:f1:9a:71:16:
4d:57:d5:15:38:be:97:26:1e:e3:43:cd:85:35:20:
3f:ed:2c:24:e0:a2:23:43:f0:4a:28:3d:6b:71:91:
4c:f9:6a:9b:f2:b2:5b:99:38:1a:8f:d6:5c:29:6a:
6c:40:17:7c:c9:df:fb:20:80:39:81:11:d8:29:42:
b7:91:a5:60:a9:29:fc:79:41:67:78:35:bf:84:cd:
b1:bf:e5:67:6b:e8:93:aa:88:de:11:26:76:3d:84:
32:27:3f:31:8b:a0:ab:63:ba:94:a1:4d:d2:aa:5e:
6c:a0:de:3d:23:04:2d:00:27:d6:44:81:26:5c:80:
1d:fb:24:26:72:c3:1c:c2:90:44:61:d2:3c:9b:0d:
93:ae:55:71:05:5b:2b:80:5e:69:44:61:59:3f:57:
a3:49:fc:75:16:1e:0c:42:dc:25:fb:39:80:f7:a9:
43:c7:2e:29:09:ae:4d:b3:93:53:e5:d4:2a:61:e8:
bc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:2B:D4:0A:5B:E8:D9:8A:76:4A:59:58:CE:44:05:24:50:17:F1:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b38aba09-012f-3d09-87cf-93c71f23adb3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.185.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:18:83:04:bc:19:af:cb:4e:fc:89:41:9b:89:1c:51:be:b2:
73:21:11:01:23:5e:1f:1b:5b:22:19:c5:06:ef:a4:30:02:73:
a6:ea:bc:88:72:ed:3d:5e:e2:c8:17:1b:f2:5d:a9:b5:19:50:
1d:13:30:fa:7d:c6:58:f0:fb:16:8f:17:60:80:9e:3f:7e:c2:
da:c6:08:c0:11:30:50:4e:a8:6c:01:e6:0a:05:d7:60:d4:6b:
57:e3:5a:3b:97:3a:d3:86:96:ab:54:96:22:2e:d3:40:27:ed:
e0:71:81:0c:d6:87:41:b1:2e:e2:72:3c:7c:6c:07:91:17:58:
1a:44:84:a4:fe:27:9e:0c:ba:6a:7a:c9:16:a4:4d:50:bb:f0:
27:32:6b:40:6e:b5:83:3f:fb:ab:51:4c:b9:7e:cf:6a:b9:2f:
da:42:7f:50:de:a1:74:74:a2:0f:ad:19:50:27:b6:9e:13:6d:
18:d7:4f:28:48:ee:af:05:f0:8d:8e:23:4d:47:4d:7a:2f:97:
61:22:3d:39:c5:d1:b8:d7:ff:cc:73:65:e1:6c:b6:fb:30:2c:
96:71:03:27:3e:89:17:18:77:b1:ad:ba:ed:3c:88:1e:a1:d5:
45:e7:c6:e9:ab:58:d8:6a:90:45:96:7a:28:d9:b8:85:58:5a:
f9:41:db:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:47:48 2025 by rpki-client