Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/870fde2a-7d11-346d-9a74-4c067817eebd.roa
File: 870fde2a-7d11-346d-9a74-4c067817eebd.roa (raw, json)
Hash identifier: C0GJo1dDDM35VrzWq79h818ZwXOKbG4yIdSriP2IDwg=
Subject key identifier: 3A:17:72:50:C8:A7:24:CC:8A:CC:2D:13:5A:84:BA:C6:61:FF:21:F1
Certificate issuer: /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial: 010D0C9F43285848FD56BE5CE00425AFA46BB580
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/870fde2a-7d11-346d-9a74-4c067817eebd.roa
Signing time: Mon 24 Feb 2025 14:00:52 +0000
ROA not before: Mon 24 Feb 2025 14:00:52 +0000
ROA not after: Sun 25 May 2025 13:00:52 +0000
asID: 6461
IP address blocks: 64.124.0.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:56:be:5c:e0:04:25:af:a4:6b:b5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Validity
Not Before: Feb 24 14:00:52 2025 GMT
Not After : May 25 13:00:52 2025 GMT
Subject: CN=dbaa8c55-a893-41b3-8308-7d9f4594ee45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ba:2f:e8:38:05:1f:9d:26:0c:1f:29:8d:2e:
ee:da:16:dc:73:ca:77:2c:0d:17:1b:98:14:23:68:
43:58:3c:e8:6c:17:92:31:d2:aa:98:31:22:ab:42:
75:30:90:aa:c6:7e:6b:40:65:19:af:b3:a8:5a:de:
97:7d:e5:07:a6:d5:50:34:65:3c:d6:3f:f4:50:02:
0b:7d:8b:38:7d:86:79:da:6c:32:bb:51:e2:ad:4c:
05:7b:14:10:9a:4b:50:87:19:0a:25:d5:07:30:61:
b8:ae:49:2f:37:27:77:1b:8f:7c:b4:75:53:7e:af:
d0:0b:f1:ee:8a:df:44:2a:f4:5c:26:11:22:94:77:
0a:8d:4a:e6:65:bf:39:39:16:02:6a:d4:b8:e7:44:
50:9b:f6:97:0b:4c:63:24:d0:df:a0:e4:d6:6b:13:
70:81:da:f4:dd:e6:a1:f2:94:a2:25:38:13:a1:dc:
88:e4:5a:43:7b:71:ba:ec:01:41:c7:89:80:06:87:
10:0c:a8:20:c4:5c:59:5d:75:21:67:ff:41:5f:4a:
85:43:5a:3d:98:79:1a:52:26:35:8c:52:bf:26:2a:
8b:3d:85:8a:79:de:b7:b5:da:ff:3e:a2:7a:1a:41:
80:d5:bf:1a:d4:c3:f1:6d:e6:bf:48:c8:20:21:43:
59:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:17:72:50:C8:A7:24:CC:8A:CC:2D:13:5A:84:BA:C6:61:FF:21:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/870fde2a-7d11-346d-9a74-4c067817eebd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
X509v3 Authority Key Identifier:
keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
sbgp-ipAddrBlock: critical
IPv4:
64.124.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:95:ea:1d:9a:32:0a:08:88:e6:13:ee:90:24:93:e1:0f:90:
d5:f9:a3:c2:62:2a:de:8c:aa:b0:f5:37:12:44:ce:9a:08:0a:
0e:18:fe:23:b6:81:82:4f:4a:d6:24:25:e9:ab:cc:9a:ab:85:
b2:0c:7a:0f:ce:61:c1:02:67:b1:27:62:34:75:02:91:2c:f7:
6d:b1:2d:30:17:98:5f:17:5a:80:a1:85:b7:5a:21:ff:08:47:
77:68:ff:fe:be:97:ba:09:4b:ce:b8:07:1e:f9:3a:8f:80:44:
8c:4e:5a:dd:29:1d:6b:c4:72:3b:15:af:83:96:91:72:73:36:
83:87:61:11:e7:a6:be:e1:59:79:32:c7:19:55:9b:f3:a0:f6:
05:80:3f:2f:f6:a0:bf:da:e9:8c:d3:f9:0b:aa:0f:d1:6b:4d:
07:b9:07:76:3c:24:e8:95:37:37:dd:c7:56:e0:36:6b:e1:fc:
26:f8:c9:ce:43:5a:14:6d:18:0b:07:a6:b1:a9:16:96:3d:4c:
b2:f1:d4:5e:1a:c5:4f:c7:e5:69:47:6c:c8:e0:61:de:28:f9:
22:97:66:1d:ce:07:ff:33:97:37:1d:af:7e:c8:a0:bc:72:56:
a4:16:64:33:e8:5d:07:d1:0c:2f:60:e9:fd:ba:4e:48:a4:35:
30:ec:d3:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 04:48:54 2025 by rpki-client