Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b65b6491-d543-3cb5-bcc8-0be903ed93fd.roa
File: b65b6491-d543-3cb5-bcc8-0be903ed93fd.roa (raw, json)
Hash identifier: IM3ydb3ypZyiurdFrL7Z+e6rx2y2uW5IZRwk4Dstdp4=
Subject key identifier: 51:BC:16:DC:27:27:D8:1D:F4:8C:7C:18:D9:5F:62:8D:AE:54:8C:FE
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F432858489FD09C36964F37307EC15900
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b65b6491-d543-3cb5-bcc8-0be903ed93fd.roa
Signing time: Wed 22 Jan 2025 02:00:39 +0000
ROA not before: Wed 22 Jan 2025 02:00:39 +0000
ROA not after: Tue 22 Apr 2025 01:00:39 +0000
asID: 12271
IP address blocks: 74.68.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Apr 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9f:d0:9c:36:96:4f:37:30:7e:c1:59:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Jan 22 02:00:39 2025 GMT
Not After : Apr 22 01:00:39 2025 GMT
Subject: CN=4f29be79-238f-40da-a93b-b746b01fa0cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:9b:38:2f:5a:ad:fa:12:51:6a:82:30:3f:ee:
e8:8b:cf:cd:f2:54:5b:36:86:a1:16:e6:72:50:2a:
f4:52:66:93:36:b8:68:28:2a:eb:a5:65:e0:a8:d9:
3e:9c:6d:5f:59:e9:f2:28:ea:ac:9b:27:c9:94:1a:
fc:d3:02:32:02:37:dc:09:fb:9c:d8:e9:01:a6:0c:
fe:89:26:3a:68:8a:f0:3d:25:a7:6b:c2:71:58:63:
6c:74:7a:03:fb:79:67:38:5a:15:e2:46:58:f3:87:
c3:30:d2:3f:eb:20:13:7f:ac:a0:46:00:19:ac:82:
b6:a7:7d:da:ce:56:9c:a3:f6:11:6d:c3:2f:45:ec:
20:43:6b:b7:01:92:96:b7:00:35:f0:c3:8d:59:43:
1b:b8:ab:ba:3b:9a:56:8e:e2:01:87:e2:1d:f9:93:
e7:41:01:f4:28:97:b3:46:e1:34:be:32:1c:fe:1c:
43:a8:d5:fa:15:1e:a8:24:bb:05:a4:78:15:e2:e6:
50:b5:4b:46:a4:93:21:b3:67:dd:c9:7d:d7:cc:9e:
0d:62:d0:6a:5f:59:71:dc:1a:c8:1b:29:65:3d:f8:
0e:6d:df:e3:44:9c:f0:b1:12:14:7f:21:1d:66:61:
87:64:c0:7f:f4:36:08:11:47:ff:d6:1d:6e:19:9e:
7f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:BC:16:DC:27:27:D8:1D:F4:8C:7C:18:D9:5F:62:8D:AE:54:8C:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b65b6491-d543-3cb5-bcc8-0be903ed93fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
74.68.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:02:c6:58:fa:3f:84:ff:09:06:bb:df:4c:c0:92:7c:4e:d7:
25:dc:5a:fe:c1:72:fb:32:f8:c1:45:89:e5:51:67:0d:65:11:
55:b5:84:87:ba:b1:3d:8c:d2:20:82:85:43:d3:0e:a6:6c:71:
9b:e2:ec:25:26:ef:6a:a2:b5:20:6b:4b:fe:ee:19:42:27:90:
e2:c8:92:b6:35:8f:ab:af:4a:fa:ca:4a:56:3b:68:08:b5:97:
63:53:10:52:be:f8:f3:2b:03:b5:cc:25:71:8b:f7:68:24:70:
0d:aa:9b:fc:ff:78:73:48:0c:88:6a:9c:eb:23:07:e9:f0:14:
dc:f1:a5:2d:b8:38:c9:e2:49:4e:52:02:ff:a5:d8:f2:bc:0e:
7f:72:b4:b5:47:6c:5f:17:4f:75:6a:c3:8a:1c:69:0a:45:c3:
97:d6:81:d1:dd:1f:c5:bd:49:bf:96:5e:5e:c2:3b:cd:25:6b:
47:c3:f3:d5:ae:a9:bd:4c:8f:8d:4d:ac:5d:21:9b:e7:bb:49:
0d:c4:0d:08:eb:ef:82:50:8d:de:fb:cb:d9:2f:40:6e:ba:c9:
cd:7e:2a:a7:25:cd:de:c1:bb:14:18:08:bb:35:c2:8b:e9:69:
c8:68:5c:5a:3a:12:16:e0:3f:19:99:3e:43:0e:09:14:30:cf:
a0:95:2d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:04:36 2025 by rpki-client