Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/131e157b-0c1a-371c-9978-88edce726378.roa
File: 131e157b-0c1a-371c-9978-88edce726378.roa (raw, json)
Hash identifier: mGaUajanTH3UwY+yqcLZDtiIrlqDvXXOsUXkqt81rzQ=
Subject key identifier: 69:8B:3E:52:7C:DE:AE:81:DD:AE:E5:07:FC:65:45:33:18:17:84:78
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F432858499AF47AB302A2FDECBBF85D4C
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/131e157b-0c1a-371c-9978-88edce726378.roa
Signing time: Tue 22 Apr 2025 01:00:47 +0000
ROA not before: Tue 22 Apr 2025 01:00:47 +0000
ROA not after: Mon 21 Jul 2025 01:00:47 +0000
asID: 852
IP address blocks: 173.182.88.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Apr 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:9a:f4:7a:b3:02:a2:fd:ec:bb:f8:5d:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Apr 22 01:00:47 2025 GMT
Not After : Jul 21 01:00:47 2025 GMT
Subject: CN=cccbaca2-b856-40b1-a327-f45e565651a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:69:68:6b:65:79:92:0d:b2:01:e0:75:9e:28:
7a:1e:92:75:e7:7a:20:b6:7a:b0:6f:d3:38:45:3c:
1f:c6:e7:c9:6a:fe:08:16:dd:da:01:ee:02:47:69:
4d:b7:f1:07:b3:a4:0c:33:70:25:a2:66:dc:3c:30:
31:9a:c7:10:b1:54:1b:2b:10:de:e0:d2:60:54:96:
0a:a7:8d:d2:8b:68:f9:82:fd:9b:bc:60:6a:be:98:
4f:65:49:63:0e:1c:cc:ed:64:11:db:4c:1b:35:49:
af:05:36:b3:ff:19:9a:f8:82:a9:fc:27:33:1e:7d:
e3:0c:b4:71:90:14:72:33:3d:98:88:13:af:39:b6:
92:7a:f9:e9:24:4f:1c:7d:7d:23:49:1c:dd:d3:c1:
42:db:d9:7f:a9:59:26:05:67:ac:bd:7a:a2:c2:08:
db:37:04:c9:f5:0a:20:8e:28:96:ca:fa:9b:ee:6e:
01:df:76:c2:e9:06:7d:9d:f9:d9:a2:9d:2b:9f:27:
42:58:1f:3a:c9:f3:1a:0a:17:11:18:2a:76:94:72:
78:f6:e2:37:5e:b9:08:89:ce:ba:0b:d3:0d:db:6f:
14:bc:4a:35:3d:07:51:67:d2:30:aa:ab:66:6b:ee:
39:68:47:ce:e9:b1:cd:b1:df:1c:ef:2c:f4:8b:4b:
c7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:8B:3E:52:7C:DE:AE:81:DD:AE:E5:07:FC:65:45:33:18:17:84:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/131e157b-0c1a-371c-9978-88edce726378.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
173.182.88.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:4e:d9:99:3f:4b:57:33:ff:26:45:d4:b0:bd:9a:fa:2d:2b:
86:cb:e0:3e:34:68:ef:c4:94:ef:88:92:a7:43:20:a7:fc:0a:
ff:22:54:36:a4:c3:ce:eb:6a:68:1c:16:9f:f8:4b:84:de:12:
a9:2c:45:2d:20:62:dd:2e:67:2c:9c:32:44:bf:a9:a8:9a:16:
36:62:ae:f0:e4:32:ec:7e:df:0e:82:b0:6a:e1:b5:48:fd:e6:
6c:f2:e4:4c:a6:f1:12:60:3e:1b:17:b2:2d:fd:ea:8c:f9:95:
41:26:0c:b7:74:76:b2:ab:1b:2b:f6:3f:14:29:be:6e:26:14:
c5:c3:ff:b7:40:93:ab:64:8f:ff:79:fe:65:ba:37:32:f4:e3:
22:ec:46:d4:19:72:4e:ba:c0:9c:37:f2:7d:f3:14:ff:51:28:
99:5a:f3:08:86:12:d5:44:d8:98:65:21:05:88:1e:c5:e7:fa:
cf:29:d6:58:65:12:9d:2d:14:ff:37:ea:70:09:72:0b:75:28:
b8:dc:55:72:99:e3:5e:68:35:92:dd:fd:2d:c9:e5:58:dc:5b:
6e:5f:b9:9d:05:ec:93:c9:4b:a1:35:81:da:ee:ef:56:07:93:
3d:b1:a8:79:7d:b6:f8:27:c2:a9:22:d4:16:c0:90:bf:4a:af:
9a:20:56:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:38:21 2025 by rpki-client