Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/9bdc6be7-4cb3-3f30-81ad-12792f25bc1c.roa
File: 9bdc6be7-4cb3-3f30-81ad-12792f25bc1c.roa (raw, json)
Hash identifier: AGNn1RQHAvC0HXS0pqs6tY5yaSp8lWgIwt5s1IgTcIM=
Subject key identifier: 74:F7:15:C9:66:55:97:9D:84:B9:FC:0A:7B:38:FA:E4:F0:9A:AC:E9
Certificate issuer: /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial: 010D0C9F432858495C243F0728620EEA8A942B80
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/9bdc6be7-4cb3-3f30-81ad-12792f25bc1c.roa
Signing time: Sun 30 Mar 2025 13:01:02 +0000
ROA not before: Sun 30 Mar 2025 13:01:02 +0000
ROA not after: Sat 28 Jun 2025 13:01:02 +0000
asID: 21734
IP address blocks: 64.124.221.0/24 maxlen: 24
128.177.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5c:24:3f:07:28:62:0e:ea:8a:94:2b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Validity
Not Before: Mar 30 13:01:02 2025 GMT
Not After : Jun 28 13:01:02 2025 GMT
Subject: CN=5d968023-00c5-4604-b06f-8370dfdd931b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c1:7f:a3:4a:5b:37:35:2b:72:18:ef:ea:17:
18:cf:ea:2c:b5:0f:5b:88:98:f5:68:51:74:47:3b:
41:31:8b:05:f9:2a:75:c2:12:be:49:d4:46:95:80:
b3:47:ea:4d:20:c8:a6:b9:b3:df:7f:19:0e:43:77:
2a:5f:5b:9e:ac:63:bf:07:fa:5f:e2:3c:1a:7e:d1:
f7:10:6f:54:6f:f4:97:5c:51:d1:d6:b1:80:b3:dd:
97:10:9a:eb:41:52:ca:7b:c1:1f:85:70:8b:36:a8:
ec:4a:b5:d5:a4:c4:0e:21:74:b2:10:dc:ed:e2:db:
37:28:fc:0a:68:db:f3:b8:01:0f:4b:bb:a1:da:e8:
71:d9:4d:42:b5:f6:33:04:87:de:80:cb:6f:3f:ad:
4e:04:c5:88:f1:ee:c7:94:f9:27:a2:0e:53:42:68:
f0:20:aa:85:f0:9e:22:5d:ff:19:36:43:28:a0:37:
f3:2c:b9:77:c2:14:f5:7a:f2:0f:b4:71:b1:88:6e:
d9:1a:69:60:a2:e6:fb:1d:06:cc:7c:d1:75:37:14:
01:8f:eb:c0:4c:13:c9:43:23:dc:e3:14:63:1d:de:
08:70:87:21:e4:a4:98:a4:3e:2c:a1:bf:42:35:19:
58:10:0a:75:5e:e7:66:cd:47:93:a9:09:cb:0d:03:
1d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F7:15:C9:66:55:97:9D:84:B9:FC:0A:7B:38:FA:E4:F0:9A:AC:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/9bdc6be7-4cb3-3f30-81ad-12792f25bc1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
X509v3 Authority Key Identifier:
keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
sbgp-ipAddrBlock: critical
IPv4:
64.124.221.0/24
128.177.160.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:a1:9d:7b:d3:1b:27:83:a7:63:ce:69:5d:6a:3d:50:74:b9:
df:5c:b1:af:2f:72:94:11:d8:8c:9d:08:f2:a1:fb:e0:a2:bd:
66:c2:b9:2c:1a:5a:56:9c:99:98:9b:d8:72:36:1a:e7:34:c2:
bc:96:86:92:3e:59:e1:46:d9:b5:4e:71:4a:f5:a9:6c:5b:69:
a9:f4:d2:c1:a5:1d:b9:46:4e:b3:86:ea:89:68:d9:49:da:ac:
77:76:82:82:98:66:51:50:89:9e:4a:d6:de:98:0e:70:a7:dc:
75:df:9c:2c:e8:41:96:df:44:1f:d7:fc:1c:7f:79:4f:cc:07:
d6:e0:de:75:b7:3f:fe:cd:d8:03:b7:2d:96:2d:6c:b6:15:ef:
23:e8:dc:b8:15:a0:6b:85:84:a1:d2:6c:50:77:4d:6d:61:ba:
92:aa:a7:00:fb:51:c3:a6:12:79:87:f4:9f:32:6c:30:ac:dd:
24:b3:02:27:24:53:c5:c1:1c:30:64:f7:b2:c2:df:f4:c8:35:
94:a5:7f:5b:3a:15:33:81:10:0b:e5:d3:c8:03:8b:fb:1c:a8:
55:44:2c:29:07:bf:9f:38:a3:f4:35:3b:8f:78:6f:68:5b:2f:
18:ba:9d:d0:2e:22:f4:3e:82:ed:b2:77:5f:07:a5:29:57:ef:
bb:36:f1:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 19:56:59 2025 by rpki-client