Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/cb33f4ca-7864-3f1e-854d-1cec059ee046.roa
File: cb33f4ca-7864-3f1e-854d-1cec059ee046.roa (raw, json)
Hash identifier: a/JAs5w9OnqAJD38PDtsSjhwq393CmLLUNxK6moUIz4=
Subject key identifier: 88:42:05:4B:C7:21:0A:4F:23:04:23:33:F2:AC:85:32:5A:73:14:67
Certificate issuer: /CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4
Certificate serial: 010D0C9F4328584902EC18CB854380832C176C80
Authority key identifier: 98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/cb33f4ca-7864-3f1e-854d-1cec059ee046.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 25899
IP address blocks: 67.210.192.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 16 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:18:cb:85:43:80:83:2c:17:6c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=b0500aca-0924-4598-a518-7b269e2ed996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8d:80:81:84:e2:05:99:d9:f5:78:0a:87:09:
b9:70:71:d5:da:6b:60:42:26:0a:dc:68:31:17:cc:
3f:2a:d4:09:76:fc:22:c7:ba:ee:6c:c9:84:53:f3:
02:bf:1f:c4:28:25:be:d5:0b:6f:db:bb:79:b0:f8:
0d:58:ef:ac:6a:79:da:8d:41:8f:80:cb:a3:5d:69:
ef:3d:59:90:9b:7f:dc:af:4d:df:66:ee:8f:cb:60:
b3:48:a9:23:30:c3:b4:db:b9:1c:58:9a:c4:47:5e:
ef:30:0e:0f:13:49:c6:ba:9d:2f:68:3a:11:ca:bc:
fb:9a:4d:8d:bf:6f:ea:a9:86:48:0c:c3:9d:52:23:
89:2d:eb:c3:e9:fe:6c:c2:fc:f9:e9:41:0f:0c:f0:
62:ce:7c:c3:37:25:1a:71:5b:c2:89:9a:ef:6e:95:
bf:f1:12:34:e8:53:e3:93:57:77:c2:c6:10:ab:bd:
c8:69:db:62:84:d0:57:55:d8:43:7a:7b:b7:e3:a1:
af:b5:31:be:9f:d0:bf:21:54:7b:4c:4b:58:61:c3:
40:75:af:d6:28:b8:89:c0:63:c8:9c:4a:3a:fb:3d:
39:bc:43:f1:34:87:04:7a:ce:2a:d3:56:0c:64:82:
2e:b7:5c:1f:0e:6d:fd:5b:bb:62:79:c9:15:14:ec:
91:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:42:05:4B:C7:21:0A:4F:23:04:23:33:F2:AC:85:32:5A:73:14:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/cb33f4ca-7864-3f1e-854d-1cec059ee046.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl
X509v3 Authority Key Identifier:
keyid:98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
67.210.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:83:a4:1d:72:0c:cc:21:c4:fe:ab:0d:6d:13:dc:3d:d2:db:
f1:1d:39:c0:28:44:aa:df:b7:bc:be:b6:7b:a4:18:47:3a:4c:
1e:5c:f0:a0:56:3e:ec:c2:0c:7a:4b:f9:85:84:91:e3:c7:4d:
ec:5c:45:86:b6:ff:d7:a0:95:62:db:4d:a7:36:2e:0e:10:48:
0f:1a:69:a6:62:6f:18:4c:20:7d:89:25:4e:39:b9:a2:f3:ba:
55:43:0b:46:5d:27:6f:92:2c:fb:40:b4:ee:e4:f7:c7:e2:d4:
e4:af:cb:e8:4b:3e:68:02:cf:70:2f:0b:17:e3:3d:10:59:4e:
86:15:df:85:d1:a5:47:32:19:07:2d:27:45:b1:be:9f:25:86:
2f:a6:ff:03:85:cf:a3:46:5a:49:40:5b:db:c0:a4:8f:65:bd:
90:5d:3f:2f:c4:b4:9e:61:5d:5c:c2:d8:c9:62:cd:5c:d8:f2:
64:65:65:65:f6:bb:1c:0b:2d:ab:32:68:9d:f6:2d:61:f2:e9:
a8:b6:de:81:b7:d3:4c:3b:19:37:f7:41:98:6a:53:68:c7:b9:
19:ca:d6:75:79:7a:93:6b:8f:2f:a4:f3:40:09:10:bf:7b:63:
aa:cf:fa:b5:1b:b8:a8:23:bb:a8:8f:6a:41:8e:33:f6:59:a6:
fb:37:a5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:36:58 2025 by rpki-client