Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6440560b-becb-34b1-8b01-354f47dcc917.roa
File: 6440560b-becb-34b1-8b01-354f47dcc917.roa (raw, json)
Hash identifier: vWOKTkVcVEhpOyYgRmFNvK9MU8BRsSTNYeEClSno48M=
Subject key identifier: 4F:F0:92:3C:09:3D:17:39:51:9E:F4:3E:17:02:42:8F:E2:9B:A1:5B
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584968E5A6C527B11F42B1CD1F00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6440560b-becb-34b1-8b01-354f47dcc917.roa
Signing time: Fri 04 Apr 2025 02:40:37 +0000
ROA not before: Fri 04 Apr 2025 02:40:37 +0000
ROA not after: Thu 03 Jul 2025 02:40:37 +0000
asID: 19527
IP address blocks: 34.3.64.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:68:e5:a6:c5:27:b1:1f:42:b1:cd:1f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Apr 4 02:40:37 2025 GMT
Not After : Jul 3 02:40:37 2025 GMT
Subject: CN=ba9f5be6-ae5c-4ab5-8a50-7ddfb82370cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b2:dc:e6:bc:f9:26:9b:59:1c:ad:e5:f4:b9:
8e:ee:67:bf:23:37:0e:6d:84:63:f3:03:78:79:23:
de:2d:9e:fd:c8:0e:32:d1:db:81:bb:a7:88:25:33:
30:74:c6:10:25:5e:ef:d6:57:ce:74:73:bc:b7:26:
89:1b:f5:0a:02:cd:97:ba:2e:db:49:11:fc:bb:cd:
d0:c0:2b:60:cb:c1:4d:0b:69:40:64:cf:02:8a:ce:
f0:8c:3e:17:8f:54:d0:12:c7:f5:9a:1d:e5:ec:8d:
47:a1:1d:e9:e3:41:50:ee:ee:93:21:2a:0b:39:14:
69:53:aa:72:ee:e6:ce:09:73:90:cc:73:a0:cb:91:
cd:82:92:72:bc:78:7b:db:85:54:7d:bc:b8:42:59:
ec:31:a7:d9:02:8d:74:2d:1a:76:8e:3b:e8:9d:ba:
8a:c2:ab:e5:5e:1c:3a:be:f3:84:c2:25:01:67:f2:
7c:f1:a2:7c:fb:d3:a6:fe:94:ea:9f:06:fa:19:28:
81:82:0c:cc:17:15:66:12:05:7e:5a:38:aa:dd:0a:
da:6b:54:c9:2c:05:53:1a:f0:78:a1:ed:01:7b:8f:
67:59:f8:e7:c8:06:07:31:18:4c:0c:6d:1d:35:44:
d3:9f:1c:57:50:5a:56:0f:ca:76:32:93:91:55:18:
56:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F0:92:3C:09:3D:17:39:51:9E:F4:3E:17:02:42:8F:E2:9B:A1:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6440560b-becb-34b1-8b01-354f47dcc917.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.3.64.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:0c:a7:1f:0f:64:84:b6:10:9b:94:4f:66:fe:3a:5a:82:e7:
02:40:4d:41:95:a6:98:d2:11:38:35:11:a5:c6:ec:50:e1:48:
95:36:5d:1b:01:91:cb:2f:5a:52:46:07:0e:39:66:56:34:94:
a6:89:cd:9a:b2:37:33:b0:12:fb:b1:e2:5e:50:e9:38:79:f7:
96:ca:4e:5d:32:e7:c2:ea:41:13:52:b1:b3:f1:83:b0:b9:6a:
43:0f:36:39:94:25:8c:04:8b:2f:6e:46:7b:d3:12:12:4e:a9:
08:b0:ad:41:df:b5:45:b4:7b:d9:ac:82:7a:8b:3b:c0:fe:c7:
c5:05:59:90:8a:cc:9d:c4:a4:40:d8:af:94:ea:2e:31:66:41:
8c:59:d2:e2:4a:fa:9b:51:c7:27:23:40:2f:70:e8:d6:68:d7:
cf:4a:f2:5d:80:ad:ab:fc:46:24:76:c8:87:d9:88:e2:cb:94:
ba:42:ad:ca:10:36:c5:d4:3a:35:d6:70:4a:86:ab:ab:8d:91:
e5:4d:47:ad:e8:3f:81:01:9d:4c:f0:b5:7e:ff:3e:db:96:ad:
f7:de:bd:85:be:f0:38:8a:89:cc:8c:8c:6a:3b:1d:58:4d:6f:
cf:dd:7b:3d:a2:75:9e:f7:f1:ed:36:25:e0:33:3e:97:24:32:
10:96:55:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 19:11:26 2025 by rpki-client