Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/94acd883-c297-357e-9871-cdf706385cd5.roa
File: 94acd883-c297-357e-9871-cdf706385cd5.roa (raw, json)
Hash identifier: wPRjrIrlzTsXQMKNhsOotmrgnSOm+IWxkAy/9A+Ita0=
Subject key identifier: AD:F5:8F:C7:60:16:DA:57:A0:14:0D:67:0C:2E:E9:1A:63:6D:BC:1A
Certificate issuer: /CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
Certificate serial: 010D0C9F432858495ABEC8E10A4FFC2393300B80
Authority key identifier: E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/94acd883-c297-357e-9871-cdf706385cd5.roa
Signing time: Sun 30 Mar 2025 01:00:47 +0000
ROA not before: Sun 30 Mar 2025 01:00:47 +0000
ROA not after: Sat 28 Jun 2025 01:00:47 +0000
asID: 7992
IP address blocks: 216.121.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5a:be:c8:e1:0a:4f:fc:23:93:30:0b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
Validity
Not Before: Mar 30 01:00:47 2025 GMT
Not After : Jun 28 01:00:47 2025 GMT
Subject: CN=9e5d24bc-e5c0-49fb-95e0-2c8371ce6d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:47:d9:6b:39:18:85:ae:c4:fd:34:24:17:e0:
9d:35:b9:95:0c:d7:f8:fd:1b:fa:8e:41:1f:a5:e8:
d9:93:72:d3:99:61:83:16:62:6a:21:f9:4d:0b:fd:
0c:70:78:00:17:59:97:eb:b0:18:b1:4e:7c:22:23:
ca:22:d4:ad:06:9a:fe:1f:69:22:04:ff:58:35:34:
55:34:07:e6:b6:87:65:45:9b:6d:2d:a2:87:3d:40:
cf:ea:58:30:5e:c6:7b:90:96:da:33:6a:b0:12:9d:
cf:91:48:48:d0:25:f1:f7:d8:a0:38:18:54:96:16:
87:d6:31:78:f9:c5:c5:0f:2a:62:f2:18:c7:49:41:
3f:05:44:50:a6:ca:b1:49:78:0c:6d:a3:03:70:6b:
86:dc:e5:56:88:49:12:6b:5c:88:9c:d7:bd:02:27:
0f:b2:d6:ca:b4:3e:19:e8:69:ca:fe:6a:e4:5d:b1:
d4:fc:ee:96:8a:1f:7f:1a:d2:91:cc:77:69:81:81:
be:cb:6e:6a:bf:64:fe:5c:e6:f4:20:2b:6d:f9:a9:
fa:c6:1e:ad:28:92:1b:2c:cc:0a:c7:a5:bd:af:be:
f3:c3:87:dc:64:15:b9:b9:98:1c:53:a0:47:e3:94:
9b:88:a6:23:93:98:82:50:e5:44:28:fa:0e:48:00:
d4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:F5:8F:C7:60:16:DA:57:A0:14:0D:67:0C:2E:E9:1A:63:6D:BC:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/94acd883-c297-357e-9871-cdf706385cd5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl
X509v3 Authority Key Identifier:
keyid:E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
sbgp-ipAddrBlock: critical
IPv4:
216.121.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:c5:35:d8:6f:30:d3:aa:29:7b:1c:47:9b:c3:62:43:02:ff:
4e:48:bb:95:97:13:3d:ab:5e:22:36:51:9e:62:24:2e:b8:e2:
bc:1f:c3:e1:e4:c3:49:b4:d3:18:7c:6c:0a:fd:82:14:f4:3c:
31:a0:37:ea:e4:78:6e:8a:76:84:2d:c2:ed:0f:0c:98:5f:e6:
62:3a:ea:89:af:14:85:52:b9:3c:bb:80:b7:3d:24:4e:59:6f:
e8:a8:cb:a6:1a:e3:5d:03:8f:65:96:00:13:55:6b:91:d4:86:
62:87:e0:c2:06:1b:b1:e8:68:5f:d7:34:86:9d:eb:21:48:28:
f1:7d:ce:49:b3:a7:a5:7b:80:fe:69:b6:81:a0:6c:3a:db:fd:
86:aa:88:ac:ee:1f:d8:a4:88:7b:e7:52:4c:ed:f4:04:2a:c1:
4d:67:4b:5f:7c:e9:e3:01:7d:db:88:d3:c2:4f:a4:48:13:f3:
84:d3:45:c3:82:0d:dc:aa:f7:50:fa:84:b9:f8:e7:ff:88:c6:
01:c2:22:b0:9f:53:aa:83:41:e7:9f:75:7b:9f:1d:05:d1:da:
98:0d:60:e9:08:76:83:bc:98:fd:48:b1:6b:cb:df:da:00:4d:
df:13:58:99:f7:07:16:bf:92:21:86:62:1b:45:e7:b6:be:80:
7b:39:3c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:55:12 2025 by rpki-client