Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/4672951b-5cd5-3eca-a2f3-77aaa6b34b18.roa
File: 4672951b-5cd5-3eca-a2f3-77aaa6b34b18.roa (raw, json)
Hash identifier: Q+Hsg5IPqnnjLiSHPLxulqPiffZifrAipJN9gb+MtxI=
Subject key identifier: C0:A9:76:4A:71:89:59:12:7D:97:A8:70:98:E9:67:5E:10:D2:CB:9D
Certificate issuer: /CN=32262fda-73b9-4875-8f83-9733217ce893
Certificate serial: 010D0C9F432858493243DCCB6F2679B29E589A80
Authority key identifier: 96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/4672951b-5cd5-3eca-a2f3-77aaa6b34b18.roa
Signing time: Sat 15 Mar 2025 13:00:52 +0000
ROA not before: Sat 15 Mar 2025 13:00:52 +0000
ROA not after: Fri 13 Jun 2025 13:00:52 +0000
asID: 131199
IP address blocks: 64.44.84.0/24 maxlen: 24
64.44.87.0/24 maxlen: 24
64.44.118.0/24 maxlen: 24
172.93.132.0/24 maxlen: 24
172.93.177.0/24 maxlen: 24
172.93.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:32:43:dc:cb:6f:26:79:b2:9e:58:9a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32262fda-73b9-4875-8f83-9733217ce893
Validity
Not Before: Mar 15 13:00:52 2025 GMT
Not After : Jun 13 13:00:52 2025 GMT
Subject: CN=7c300d65-c6d6-4bd9-9d9b-5ec35a658264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e5:57:0a:ff:02:fc:18:66:79:a3:23:12:d1:
95:4b:a5:92:04:55:6f:96:4a:a3:48:95:98:28:f3:
89:04:85:94:55:7d:2d:ea:e1:0b:e0:a5:67:c8:96:
5b:09:c5:9e:af:df:e5:f0:81:0e:8b:5d:be:6a:ed:
98:6e:fd:9d:03:4b:3f:e9:36:0d:b2:ad:f6:3a:e9:
11:04:b5:d6:26:b7:88:63:3a:b8:b0:e0:d8:5d:09:
80:b4:43:59:69:d0:ab:f0:1b:c9:9a:33:9c:ea:0d:
d5:0f:a8:71:c5:a0:4f:89:45:7e:1e:12:a5:a4:ba:
47:71:f8:76:46:c4:36:b0:ff:b8:76:c2:0f:04:75:
e8:7d:ee:45:f1:b0:8c:47:a6:8d:b7:88:85:75:5d:
56:39:97:a3:3a:9c:29:77:ed:4b:41:2e:0d:10:a1:
ed:66:f2:bd:ce:66:e5:a9:d2:24:40:8e:d4:a5:7e:
6c:76:01:c7:f6:44:3f:83:0b:bc:d4:71:99:a5:9f:
ee:5f:7a:ee:4c:3c:76:f7:e4:59:e0:bd:65:b0:6d:
b0:23:4c:59:da:61:ec:de:13:6f:73:40:45:ea:b1:
0f:59:1c:46:e3:6e:3f:bc:d7:a7:e0:8d:35:c7:3b:
fd:0d:00:7e:8a:99:bd:97:aa:74:08:a2:ec:8a:1b:
ba:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A9:76:4A:71:89:59:12:7D:97:A8:70:98:E9:67:5E:10:D2:CB:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/4672951b-5cd5-3eca-a2f3-77aaa6b34b18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl
X509v3 Authority Key Identifier:
keyid:96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer
sbgp-ipAddrBlock: critical
IPv4:
64.44.84.0/24
64.44.87.0/24
64.44.118.0/24
172.93.132.0/24
172.93.177.0/24
172.93.207.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:83:2b:2c:18:d2:8b:d2:5a:f1:c2:8b:8b:88:5f:df:b2:db:
f5:8d:9f:61:1d:b6:21:d4:7d:f3:9d:9c:c1:d8:31:36:32:9b:
d6:7f:a1:3b:1f:46:76:19:e5:64:35:45:73:80:69:ab:53:e3:
fd:c5:c1:50:86:d6:46:69:a4:6b:a7:01:12:ad:4a:67:eb:99:
73:28:89:0a:ec:97:93:0a:7b:91:58:99:54:f7:19:cc:bd:e9:
9b:83:ff:2e:ce:bc:c6:d6:2f:5d:e2:e5:83:ca:70:c8:be:74:
87:06:95:95:31:a3:58:29:c9:34:23:eb:3e:6c:81:4e:fd:88:
c3:ef:61:aa:15:f4:bb:0d:cf:af:ac:f3:6f:f0:18:65:94:0c:
77:e0:ba:8c:f8:fb:6f:13:11:e4:dc:ef:cd:63:c4:81:65:5a:
e0:7a:f0:43:76:3f:22:25:80:5d:e4:44:cd:0b:c0:ee:71:eb:
fd:80:a5:3d:8c:97:7c:9e:59:c2:e1:ef:cd:1d:58:38:4a:e7:
4e:2d:9b:a3:b6:85:28:f5:8b:f3:b4:94:92:e3:56:32:0b:0c:
b6:fe:58:e5:0e:19:a7:23:a8:fa:6a:01:cb:61:57:5d:0d:db:
8c:62:1e:66:84:78:e9:f5:7f:e8:4e:44:34:11:bf:a5:6f:e7:
d0:3b:cc:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 04:28:49 2025 by rpki-client