Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/df151ca4-35aa-335f-b8b4-3fa8fa7c70fb.roa
File: df151ca4-35aa-335f-b8b4-3fa8fa7c70fb.roa (raw, json)
Hash identifier: ePXSEbv7EvR7RSe1z9uyGEpGyJ/BrLxU3KnU52Wzjt0=
Subject key identifier: 5E:47:27:68:0C:99:1F:0E:03:38:87:00:24:5E:41:02:EB:58:F0:2B
Certificate issuer: /CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
Certificate serial: 010D0C9F432858495ABEC86AD5D978B3A0850400
Authority key identifier: E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/df151ca4-35aa-335f-b8b4-3fa8fa7c70fb.roa
Signing time: Sun 30 Mar 2025 01:00:47 +0000
ROA not before: Sun 30 Mar 2025 01:00:47 +0000
ROA not after: Sat 28 Jun 2025 01:00:47 +0000
asID: 7992
IP address blocks: 192.69.236.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 13 Apr 2025 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5a:be:c8:6a:d5:d9:78:b3:a0:85:04:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
Validity
Not Before: Mar 30 01:00:47 2025 GMT
Not After : Jun 28 01:00:47 2025 GMT
Subject: CN=9cdd2bb8-9fff-42c7-94bd-f2753c7eaff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9d:28:a5:02:e9:d8:76:98:cf:ba:d1:b7:37:
96:ad:50:c5:6a:c5:e6:01:62:8c:37:cc:7c:d0:62:
ca:82:00:11:34:0c:c5:6d:9c:61:61:36:84:27:b2:
05:c0:4a:05:d0:04:4b:40:7b:7e:d7:28:19:19:a1:
a1:f0:06:e4:7d:ea:cf:ea:44:be:1a:e0:59:f2:15:
e3:aa:42:03:9b:05:7a:b6:62:22:f0:40:89:33:6c:
f5:61:3d:9f:34:ee:2c:a8:cb:9d:3c:de:a7:8b:00:
9e:34:22:09:ab:b1:7d:05:db:31:72:f2:b7:93:f0:
ca:e6:f0:ec:32:f9:6b:72:c3:6a:38:e0:53:4e:62:
b5:2e:2c:f6:c4:14:5c:f1:46:4f:07:2a:15:1b:c1:
20:8a:e0:15:6a:db:85:39:ba:47:29:b4:95:98:9b:
6a:1b:48:1c:73:e6:79:42:f8:e8:21:56:ee:ab:c1:
d1:aa:9e:64:f5:87:de:f8:d1:92:84:f4:25:6f:17:
57:5f:f9:e2:bc:e7:a7:67:23:77:07:bf:90:2e:66:
ee:5c:7f:74:c6:a8:97:f8:ec:3e:c9:5a:77:17:89:
46:33:22:24:11:5d:9f:36:c0:47:78:a3:ab:38:1f:
a8:fe:ed:f1:5d:9c:b2:56:59:44:3b:a5:27:a7:34:
c4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:47:27:68:0C:99:1F:0E:03:38:87:00:24:5E:41:02:EB:58:F0:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/df151ca4-35aa-335f-b8b4-3fa8fa7c70fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl
X509v3 Authority Key Identifier:
keyid:E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
sbgp-ipAddrBlock: critical
IPv4:
192.69.236.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:5a:93:05:fd:32:65:c4:84:cd:ae:ab:00:50:da:b1:d3:b2:
c0:e2:f8:9d:36:75:37:c4:df:42:82:17:9f:2c:91:51:82:75:
83:92:36:59:76:6f:0f:c2:ed:e1:b5:24:ac:06:0e:09:9b:cd:
46:7a:e5:b4:02:ba:e9:5b:51:d5:d8:87:75:20:28:dc:0b:57:
54:85:24:ad:cc:f0:17:aa:7e:fd:ca:11:c2:2a:9b:40:87:5b:
67:bd:31:d8:b8:bb:84:5f:e0:7e:40:1d:9f:1c:86:c8:b2:2b:
a2:35:be:b7:02:d4:38:9e:2f:b2:55:ca:c9:3d:a2:39:67:d9:
0f:4a:4f:1b:fa:cc:ac:b7:3f:df:37:b4:a4:a0:e2:27:99:ed:
9a:20:51:77:a9:a5:d0:d4:f4:15:41:64:6f:3a:76:a8:5e:fd:
47:ea:94:08:97:de:1d:93:7d:71:69:28:6d:ec:87:3d:39:f5:
9c:b4:61:4a:ff:b1:48:54:4a:1e:9a:e3:d0:f2:4b:94:bc:ad:
0a:df:d8:ad:80:ae:33:1a:5c:3a:37:60:f4:1c:fc:b2:ba:3b:
87:cc:31:78:54:c8:2e:8f:8e:80:e9:34:8b:22:98:03:c6:45:
4c:06:65:b8:4f:a3:19:40:44:df:c9:32:9b:69:6b:5c:9a:13:
15:a7:9a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:54:02 2025 by rpki-client