Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/7347d9b0-6745-3701-a6a7-fb5c632a56ee.roa
File: 7347d9b0-6745-3701-a6a7-fb5c632a56ee.roa (raw, json)
Hash identifier: oQ+6MZvEWzqG0AHRenVsQ6TouBhkF8dAB+Vne/3Wfss=
Subject key identifier: 6C:21:A9:60:36:62:D8:57:D5:43:60:8F:6A:C0:56:D9:CF:D1:97:C7
Certificate issuer: /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial: 010D0C9F43285848F22C703499668CCE82F78700
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/7347d9b0-6745-3701-a6a7-fb5c632a56ee.roa
Signing time: Thu 20 Feb 2025 14:00:52 +0000
ROA not before: Thu 20 Feb 2025 14:00:52 +0000
ROA not after: Wed 21 May 2025 13:00:52 +0000
asID: 17025
IP address blocks: 64.124.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:2c:70:34:99:66:8c:ce:82:f7:87:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Validity
Not Before: Feb 20 14:00:52 2025 GMT
Not After : May 21 13:00:52 2025 GMT
Subject: CN=5f057d0b-deb1-4900-a64b-62205e4588a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7e:1b:31:60:b3:c1:38:fd:ef:bd:41:28:ae:
e8:40:12:aa:88:5b:37:8e:c2:4f:49:d3:4b:42:64:
34:3b:e2:17:20:e8:00:72:5b:2c:ef:c5:2a:8e:6c:
b2:77:8a:44:52:57:dd:b6:4d:40:0d:5e:c0:a7:36:
c0:05:b4:57:de:a1:11:4b:7c:b2:9d:ae:fb:e1:98:
79:c5:89:91:b8:61:c4:0e:98:16:fb:3c:bf:24:cb:
26:c7:86:aa:70:cc:88:02:11:f1:35:b8:da:42:f4:
ed:de:67:f9:01:04:a1:94:b9:1f:06:ae:c5:e8:ad:
dd:1a:d6:9c:f6:74:bb:f8:ea:38:7c:02:2f:70:3a:
16:2e:17:38:5b:30:2e:72:67:06:1b:66:92:6c:06:
d9:d1:6c:e5:df:d1:2b:76:a6:c9:8c:54:bd:a3:04:
bd:20:81:5a:a0:fb:f7:ea:6f:f8:82:f0:a5:31:31:
e9:33:d9:ab:9f:99:1e:0f:ee:f7:ff:44:92:1b:83:
6b:c4:f6:c7:9a:9e:a2:74:4b:fe:41:fb:47:d7:4e:
3a:42:08:53:e8:c1:4a:d4:da:06:2a:7f:10:1e:fa:
7f:58:e7:1d:25:7a:11:0a:39:35:86:2a:48:0d:01:
63:2d:8d:41:39:0b:28:b9:61:41:3f:09:6a:86:d5:
7e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:21:A9:60:36:62:D8:57:D5:43:60:8F:6A:C0:56:D9:CF:D1:97:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/7347d9b0-6745-3701-a6a7-fb5c632a56ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
X509v3 Authority Key Identifier:
keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
sbgp-ipAddrBlock: critical
IPv4:
64.124.166.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:95:78:30:69:73:ed:05:dd:5d:31:3f:5c:ab:c6:1c:12:a3:
e7:1e:73:74:39:3b:62:a7:7f:0f:d9:00:6d:18:59:f4:01:42:
af:3e:e4:1a:8d:0f:0f:42:37:91:33:3f:b7:79:eb:fd:e1:59:
38:97:ee:97:2e:8f:73:5b:3c:97:85:5e:a2:e4:c5:b5:a4:42:
84:94:4c:51:9f:c4:03:66:44:d6:3c:0b:c1:bf:a3:b7:e6:84:
4d:e9:97:25:03:3a:88:de:a6:0b:c4:5a:86:ff:a3:c0:43:b6:
a4:2b:6f:5d:23:8d:7c:ea:e1:9a:7f:bf:d0:4b:f9:97:25:b5:
a1:73:d0:f2:18:df:2d:4d:09:d4:59:3d:90:17:c8:fc:f4:2c:
59:c9:9f:02:95:3a:61:f5:ea:10:de:ee:6e:e9:c6:6d:af:a1:
0b:55:b6:7a:a7:08:c4:8b:21:f4:44:64:e2:45:c9:6e:50:e0:
ed:31:95:cb:fb:e0:9a:ac:14:71:8d:a6:18:62:ab:1c:d9:65:
67:9a:68:d9:18:88:33:55:b9:a2:8e:1c:2d:d4:17:72:8e:02:
38:ae:8e:df:7d:5f:19:43:1a:1c:eb:b2:57:a7:ee:af:33:fb:
6c:97:13:e8:79:ba:42:8d:2c:30:7c:28:78:b6:bc:9b:04:0a:
26:0f:fb:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 10:23:27 2025 by rpki-client