Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/73ae0f9c-50fb-3cdb-ba14-2e200cedf620.roa
File: 73ae0f9c-50fb-3cdb-ba14-2e200cedf620.roa (raw, json)
Hash identifier: rQ+4hLbaCqr8k4q/o24UCvTm6UAzQAQdD0d1eZx+TEA=
Subject key identifier: 5C:5D:67:D9:06:36:6B:12:45:A3:09:89:94:B4:08:72:47:96:6B:02
Certificate issuer: /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial: 010D0C9F432858490062122715FD1AF222740800
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/73ae0f9c-50fb-3cdb-ba14-2e200cedf620.roa
Signing time: Tue 25 Feb 2025 16:11:26 +0000
ROA not before: Tue 25 Feb 2025 16:11:26 +0000
ROA not after: Mon 26 May 2025 15:11:26 +0000
asID: 20227
IP address blocks: 173.241.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 16 Mar 2025 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:00:62:12:27:15:fd:1a:f2:22:74:08:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Validity
Not Before: Feb 25 16:11:26 2025 GMT
Not After : May 26 15:11:26 2025 GMT
Subject: CN=dde1ccd8-bcfa-436e-9327-597c610f6bdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:77:73:51:41:ee:62:7b:44:9d:8e:b3:d0:61:
66:00:ed:e6:47:b2:c0:2f:23:32:a9:e7:74:38:7b:
26:4f:7c:16:86:81:73:92:11:a9:3f:ee:32:1e:94:
d0:21:ca:87:f8:c7:0e:ec:7c:7b:a5:89:5d:63:6a:
33:df:c8:6b:68:36:16:52:c0:f7:89:6c:cb:42:9a:
ae:88:9c:07:d7:b3:f2:ef:46:af:a2:50:e1:25:6c:
42:20:19:42:17:0e:c0:ce:58:53:73:ad:91:b7:e2:
78:82:0e:13:f1:9c:42:db:37:46:ce:ad:e0:0f:e2:
9e:fb:46:b2:ae:19:63:14:a6:ad:af:0e:ab:08:b1:
20:b4:c0:cc:2d:ec:0b:e8:57:e5:f2:c2:bc:46:54:
47:2a:83:8c:f7:b9:15:f6:6d:f8:e9:30:57:58:48:
5f:23:ce:96:0c:b9:11:73:e4:e0:98:87:20:75:10:
e9:98:87:bb:d3:d0:8a:c2:aa:37:72:72:c5:70:d7:
a4:6b:b2:10:e5:92:df:01:92:f6:26:7e:c6:8d:62:
91:ab:d4:08:ef:e4:2b:72:fa:db:be:2a:4e:29:2c:
83:81:07:97:43:ff:4c:12:26:7e:77:e7:e6:8c:80:
13:45:47:b9:64:4d:54:71:53:2e:85:19:b0:2c:f8:
8b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:5D:67:D9:06:36:6B:12:45:A3:09:89:94:B4:08:72:47:96:6B:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/73ae0f9c-50fb-3cdb-ba14-2e200cedf620.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
X509v3 Authority Key Identifier:
keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
sbgp-ipAddrBlock: critical
IPv4:
173.241.221.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
be:a7:99:1c:66:98:ec:71:8b:55:64:60:bc:ec:4f:6c:66:0f:
c6:a5:75:94:bc:e9:91:58:a7:de:b5:4f:2d:b5:ab:2d:74:aa:
3a:a3:a8:62:02:78:da:55:53:06:dd:df:56:e7:17:f1:6d:87:
32:b2:6e:fe:9e:38:99:27:59:c8:77:55:a5:e3:41:d3:4c:86:
3a:aa:54:8e:bb:f5:bd:b0:27:1a:a2:cb:42:7f:0c:be:38:af:
9b:37:e7:7f:e7:bf:a9:b8:03:08:bc:58:57:8f:5b:75:18:79:
4b:ec:20:17:a8:4e:58:1d:3d:ac:10:83:d4:03:c1:f6:a4:a2:
3f:d3:96:b5:86:56:b7:1f:0c:b1:d2:ce:93:8f:ab:95:a6:10:
b0:dd:27:eb:9b:da:fc:ce:9b:cf:c4:e0:b7:d2:fa:65:a2:ab:
e9:be:dd:96:c4:a5:6d:5f:a1:a5:15:12:17:ed:fe:d8:70:62:
b7:8e:b5:16:bd:b8:cc:bb:8b:99:3d:03:d8:3b:29:dc:3a:f1:
68:8f:05:d3:8e:8c:4d:5b:12:15:d3:6a:b8:7c:f3:5c:ae:c2:
03:f8:a5:d1:69:d1:56:3f:78:36:10:2a:fb:49:e1:d6:f2:be:
61:0d:92:29:e7:e7:61:f4:d5:d5:52:b7:af:91:68:b0:9d:6e:
25:18:4a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 15 02:40:53 2025 by rpki-client