Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/de52a646-8150-3baa-964a-af38db1002f1.roa
File: de52a646-8150-3baa-964a-af38db1002f1.roa (raw, json)
Hash identifier: Bb67ie2rpfPQx6/lZzmS8YBVA4sDV/rByxeNRdYmHZw=
Subject key identifier: 0D:C2:38:69:73:FD:04:3A:86:95:16:BC:BF:90:15:9C:5A:1A:C2:92
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285849568EBA072C4FDA5BB257DDE0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/de52a646-8150-3baa-964a-af38db1002f1.roa
Signing time: Fri 28 Mar 2025 13:00:51 +0000
ROA not before: Fri 28 Mar 2025 13:00:51 +0000
ROA not after: Thu 26 Jun 2025 13:00:51 +0000
asID: 7029
IP address blocks: 75.117.176.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:56:8e:ba:07:2c:4f:da:5b:b2:57:dd:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 28 13:00:51 2025 GMT
Not After : Jun 26 13:00:51 2025 GMT
Subject: CN=57c5b8b1-138b-414a-a656-faa0e284a1e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:81:62:81:90:f1:31:ab:18:53:ed:b6:73:9c:
72:97:e4:92:80:ad:a4:67:67:27:8f:85:5f:df:87:
c4:35:80:b2:4d:21:49:69:95:09:58:cf:ce:2e:bb:
30:c6:27:cb:ce:7f:ad:52:18:01:11:25:62:58:28:
1c:be:e7:ea:62:5d:2b:14:2d:de:64:61:ee:da:6a:
0c:65:93:0b:9c:7b:0e:62:5f:42:04:31:6f:ec:a4:
da:43:99:68:cf:cb:c0:82:51:0e:4e:c3:87:d1:7f:
45:ca:b6:44:2d:73:3f:3a:0f:34:40:6d:5d:9c:ff:
fb:56:75:ca:34:3e:9b:c6:17:ed:56:ef:25:ba:09:
b3:f4:18:90:87:c7:eb:f9:3e:c7:e4:5a:98:9b:f0:
fb:c0:d9:29:75:80:e8:88:57:f9:9c:75:e8:cc:6e:
a9:af:ed:fe:43:69:15:86:96:06:26:b6:64:32:e6:
71:71:c9:98:8a:c3:86:c3:0e:44:4e:51:cd:8b:28:
be:af:9d:ab:fb:e8:c5:50:fb:76:4a:5d:2b:de:9e:
6b:6b:5b:64:8d:5a:45:cd:07:5d:61:82:a8:9e:db:
c4:e4:18:70:b4:6c:3e:3d:84:ab:fe:18:a3:65:23:
57:17:55:80:dd:30:7c:32:1b:ac:11:7f:73:55:22:
75:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C2:38:69:73:FD:04:3A:86:95:16:BC:BF:90:15:9C:5A:1A:C2:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/de52a646-8150-3baa-964a-af38db1002f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
75.117.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:cc:23:bf:04:e7:fa:b1:d6:03:dd:60:13:c2:46:8c:51:10:
33:39:de:d6:b5:2d:18:db:2c:da:8f:7d:82:32:38:85:09:3d:
bb:7b:ac:6a:2d:d7:4b:4e:3e:f6:32:01:9f:72:89:70:87:08:
b2:95:be:9b:4d:01:5f:38:1d:1a:06:cf:53:91:a4:a0:d2:8c:
9a:8b:10:d0:de:f7:bc:fe:91:51:0f:47:2c:1c:b4:1f:b6:68:
1f:0f:96:c7:e3:57:63:b3:a8:76:02:f2:52:2c:3c:0c:77:b5:
ed:a0:e1:1f:49:f2:ca:1f:9b:b9:ef:70:a6:7c:f0:31:ba:11:
ef:78:67:02:9a:a9:f5:0f:92:b6:27:48:ba:ab:bf:a1:6d:02:
ce:9c:7c:3c:c0:f9:81:3a:33:c8:29:2b:39:07:86:3d:0a:15:
0f:d5:c0:8d:25:24:c2:57:ca:b0:6d:df:02:f1:3e:97:e3:39:
24:db:8b:11:3c:fd:f6:a2:48:63:c5:04:41:dd:df:fc:2a:6f:
cb:2d:14:16:1e:7f:24:1c:cd:9c:b4:3a:0c:53:41:87:5e:c9:
1f:34:43:3c:94:c0:a5:99:bf:7c:bf:0f:cd:da:be:30:f6:f5:
fb:b1:25:0b:54:9c:a9:63:2f:03:ae:e9:a8:bc:01:3f:94:71:
d7:aa:f3:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 13:56:52 2025 by rpki-client