Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/dae284ad-220c-3185-bf30-245f48f314a6.roa
File: dae284ad-220c-3185-bf30-245f48f314a6.roa (raw, json)
Hash identifier: 0lBxglt0crTpYUIm2C6uRfWvdVwW+LqULHsw6rJQtpQ=
Subject key identifier: DD:23:B3:93:64:F6:85:B7:81:73:4C:27:F7:FF:41:C5:91:12:5C:CC
Certificate issuer: /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Certificate serial: 010D0C9F43285848F4F6A0000F3F1BC3408B16A0
Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/dae284ad-220c-3185-bf30-245f48f314a6.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 8560
IP address blocks: 67.217.240.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f6:a0:00:0f:3f:1b:c3:40:8b:16:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=2236ff3e-9f1e-4a74-9fb2-60ba39722ac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:48:d3:30:88:4f:05:83:eb:84:e0:9f:e1:7e:
f6:93:93:b4:cf:90:58:48:75:21:dc:ff:4b:57:b9:
61:c8:51:f8:18:82:b4:06:4c:4a:63:24:18:b8:f9:
da:53:44:46:b0:37:d6:d7:8e:bc:4f:ed:17:10:87:
3c:04:35:b2:05:4e:d8:06:a4:a2:0b:a8:6b:3b:cc:
83:1a:66:28:e9:82:06:a2:ff:d7:2f:f8:9b:b0:4e:
18:57:0d:bf:4d:07:c5:fa:b3:b2:cf:27:4b:db:4a:
c6:79:6c:38:dd:37:a0:6f:41:eb:7c:50:61:b2:b8:
0b:3e:73:79:a9:02:4a:ba:d0:4f:64:96:3a:2e:ff:
5a:59:f1:dd:0f:bd:4b:26:de:8d:c7:41:37:df:53:
20:c6:34:0b:65:80:a6:7e:2b:88:c9:5b:7b:a3:f1:
46:34:46:51:f9:b8:8c:63:66:6c:a2:41:72:d9:91:
13:0c:ce:0b:48:47:da:e4:96:37:8d:d4:c8:c2:aa:
b5:fc:64:a3:fa:54:a3:94:45:8f:31:c7:b4:63:af:
2a:a7:ab:6a:36:ea:da:9d:bc:e9:dc:06:d4:91:a7:
f9:bf:58:2b:84:48:22:90:2c:7a:75:27:01:72:ad:
7c:5c:74:a2:a9:7b:8c:fa:73:f9:c3:66:8c:1d:e6:
1d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:23:B3:93:64:F6:85:B7:81:73:4C:27:F7:FF:41:C5:91:12:5C:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/dae284ad-220c-3185-bf30-245f48f314a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl
X509v3 Authority Key Identifier:
keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
sbgp-ipAddrBlock: critical
IPv4:
67.217.240.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:06:c7:9e:73:1a:1b:5c:4a:77:04:f9:4c:1f:3d:0e:81:3f:
9c:cb:b6:48:ce:b1:5f:3c:73:87:32:e0:1d:85:b9:14:f2:9a:
68:b9:2b:54:63:62:9b:c8:7b:b3:05:ad:d6:67:e2:19:67:50:
fa:5f:1c:cf:40:bd:10:c9:ab:93:48:bc:14:f9:91:7e:10:e2:
80:f9:9d:5e:a0:2e:9f:62:1b:da:41:fb:9a:da:d4:8c:33:e6:
7c:11:27:06:e8:c8:f7:a7:c2:fe:e1:b8:b6:2c:2d:fa:d7:84:
ea:21:39:d9:e1:89:b9:b4:6d:0c:9c:74:3e:a5:0a:17:d5:73:
cc:72:fa:02:af:7e:15:ce:35:68:a6:22:d3:c1:32:78:94:03:
83:f4:61:27:f3:25:29:bf:41:ae:40:87:60:75:10:71:c4:94:
4a:c0:97:9b:f5:80:80:a5:ce:58:e1:29:16:6d:e0:bd:6e:69:
1b:ac:17:56:85:27:4b:10:22:c7:94:50:fa:2a:0a:c1:c8:9a:
2a:f7:31:5d:d6:98:aa:55:8c:38:03:da:d5:be:79:5e:48:71:
3b:01:97:74:1d:5c:5a:48:76:e8:a9:12:4c:7e:25:b2:1c:ed:
67:c3:c2:30:9d:b8:22:e4:41:bf:13:b1:b9:86:12:11:28:5d:
ca:e2:61:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 12:35:05 2025 by rpki-client