Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/70b87c46-4f8e-49be-90ee-60fc32ee36ca/c4e77cc9-b642-381c-a023-73ef0a7e1fb0.roa
File: c4e77cc9-b642-381c-a023-73ef0a7e1fb0.roa (raw, json)
Hash identifier: znyBJctQ7XpHMRO/eNn8PUq6TEccB98lS3MRSrKo2mw=
Subject key identifier: 65:7D:7A:EB:B0:91:FE:DA:E7:17:08:4D:B7:C3:C8:97:2B:2A:DF:75
Certificate issuer: /CN=70b87c46-4f8e-49be-90ee-60fc32ee36ca
Certificate serial: 010D0C9F4328584944694791ABD650B80A4A5600
Authority key identifier: F3:83:50:2E:C7:C2:65:E5:71:04:B3:F8:C8:4A:C6:D1:7E:12:94:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/70b87c46-4f8e-49be-90ee-60fc32ee36ca.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/70b87c46-4f8e-49be-90ee-60fc32ee36ca/c4e77cc9-b642-381c-a023-73ef0a7e1fb0.roa
Signing time: Sat 22 Mar 2025 01:00:40 +0000
ROA not before: Sat 22 Mar 2025 01:00:40 +0000
ROA not after: Fri 20 Jun 2025 01:00:40 +0000
asID: 204903
IP address blocks: 67.217.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/70b87c46-4f8e-49be-90ee-60fc32ee36ca/70b87c46-4f8e-49be-90ee-60fc32ee36ca.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/70b87c46-4f8e-49be-90ee-60fc32ee36ca/70b87c46-4f8e-49be-90ee-60fc32ee36ca.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/70b87c46-4f8e-49be-90ee-60fc32ee36ca.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 16 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:44:69:47:91:ab:d6:50:b8:0a:4a:56:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70b87c46-4f8e-49be-90ee-60fc32ee36ca
Validity
Not Before: Mar 22 01:00:40 2025 GMT
Not After : Jun 20 01:00:40 2025 GMT
Subject: CN=61da6de0-ff28-48a1-880d-ab1bbc2c8255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d4:46:3c:42:bf:14:88:e5:c9:eb:d9:a4:5c:
36:8a:25:6f:8b:25:77:f6:9f:3a:55:62:4e:d1:37:
33:f6:c2:87:46:52:6d:37:32:f1:4d:2d:7a:7d:33:
ec:35:fd:24:63:1a:8d:0f:ed:59:50:b1:f0:f3:ab:
11:21:5e:9b:39:82:b0:fa:c9:c5:47:19:7b:da:a3:
8c:fa:0c:82:90:dd:04:a2:8f:01:a5:28:f6:7b:e2:
d5:2b:96:7f:15:04:95:d4:13:e2:cf:0b:c3:52:95:
ef:19:3e:c0:75:d2:c1:58:f7:30:a5:6e:e6:76:9f:
4d:18:7d:51:81:c1:fe:6b:2d:af:8c:6c:d2:c8:29:
98:02:69:1c:64:9e:7e:f5:b6:b3:55:31:ac:28:ef:
fe:c1:f7:9a:eb:f8:3f:5e:0f:53:36:bd:25:e0:78:
40:e6:53:f8:6d:1f:c9:d9:0a:36:58:2f:b1:4f:c6:
f8:4f:8b:37:b2:9a:33:6b:0f:21:28:e1:90:2c:25:
fb:57:10:46:d7:1c:f7:0a:5e:cb:8c:df:1a:a2:cf:
c2:75:9a:06:a5:a6:57:6f:5b:77:95:9a:6b:2e:04:
17:3a:df:88:c8:1b:f1:ca:88:32:ba:77:bb:0b:a6:
0c:28:c3:dd:5c:b0:7f:1e:9c:86:e9:63:84:83:3d:
c5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:7D:7A:EB:B0:91:FE:DA:E7:17:08:4D:B7:C3:C8:97:2B:2A:DF:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/70b87c46-4f8e-49be-90ee-60fc32ee36ca/c4e77cc9-b642-381c-a023-73ef0a7e1fb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/70b87c46-4f8e-49be-90ee-60fc32ee36ca/70b87c46-4f8e-49be-90ee-60fc32ee36ca.crl
X509v3 Authority Key Identifier:
keyid:F3:83:50:2E:C7:C2:65:E5:71:04:B3:F8:C8:4A:C6:D1:7E:12:94:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/70b87c46-4f8e-49be-90ee-60fc32ee36ca.cer
sbgp-ipAddrBlock: critical
IPv4:
67.217.251.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:07:3b:b5:12:71:af:d7:84:2e:43:de:a8:73:4a:ca:2a:64:
fd:d0:f6:a8:3c:dc:df:d5:c5:38:b4:82:4b:df:42:e0:d3:c3:
12:9d:d9:84:87:1f:7a:cf:19:32:3e:2e:16:24:6a:be:ec:c9:
a8:9f:21:12:fa:74:f5:b1:e2:63:87:e8:a0:ca:b0:19:5b:77:
56:ad:6c:3c:a8:e3:e3:f3:fc:3d:d3:62:28:77:36:56:31:37:
21:9f:c0:39:5f:f0:8f:8f:6b:5b:65:f6:55:7c:c0:1b:3b:11:
12:84:66:08:c8:7d:4d:4c:0e:24:5b:b0:29:db:25:89:87:6e:
8b:16:ed:13:c1:4b:75:38:a9:d9:9e:b7:97:e5:64:71:a4:a7:
a8:00:9e:31:db:e7:bb:a9:99:cb:93:9a:5c:5a:9a:09:d4:47:
8e:de:47:fa:1f:f6:49:26:3f:a4:62:4c:98:7f:10:17:fc:7d:
db:8b:a0:d5:39:e6:02:e0:3f:bc:c5:b2:09:5b:1b:a4:54:39:
2a:96:7a:23:ad:43:5c:c3:1d:bc:43:d3:dc:82:b7:c3:ab:5d:
a0:e8:34:45:03:89:3a:bc:24:cf:6c:6c:c9:1f:67:f1:b8:33:
b7:c3:a8:b9:9f:ee:47:9c:7b:0f:98:8a:b6:76:5c:ae:0e:39:
13:01:56:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 06:59:19 2025 by rpki-client