Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5ffb160-7d08-4282-966a-137e7328c1b0/ecefeada-cbdb-3f8a-9abe-50ea35a728f3.roa
File: ecefeada-cbdb-3f8a-9abe-50ea35a728f3.roa (raw, json)
Hash identifier: qnNeu9BEqiEyMIxRK+v/cZ6AtyxUm3XVJgLgqTBuVU0=
Subject key identifier: AD:15:10:6A:C0:C3:3A:5A:90:0F:2E:EF:C5:6D:10:02:73:B5:85:CB
Certificate issuer: /CN=a5ffb160-7d08-4282-966a-137e7328c1b0
Certificate serial: 010D0C9F43285848D0ABB2D72D677DA884E36800
Authority key identifier: 3C:2E:40:AC:19:47:1C:23:8C:42:39:6E:D3:35:EC:B6:BB:E5:D6:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5ffb160-7d08-4282-966a-137e7328c1b0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5ffb160-7d08-4282-966a-137e7328c1b0/ecefeada-cbdb-3f8a-9abe-50ea35a728f3.roa
Signing time: Sat 08 Feb 2025 14:00:52 +0000
ROA not before: Sat 08 Feb 2025 14:00:52 +0000
ROA not after: Fri 09 May 2025 13:00:52 +0000
asID: 63330
IP address blocks: 104.222.64.0/20 maxlen: 24
2605:e580::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5ffb160-7d08-4282-966a-137e7328c1b0/a5ffb160-7d08-4282-966a-137e7328c1b0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5ffb160-7d08-4282-966a-137e7328c1b0/a5ffb160-7d08-4282-966a-137e7328c1b0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5ffb160-7d08-4282-966a-137e7328c1b0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 07 Apr 2025 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d0:ab:b2:d7:2d:67:7d:a8:84:e3:68:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ffb160-7d08-4282-966a-137e7328c1b0
Validity
Not Before: Feb 8 14:00:52 2025 GMT
Not After : May 9 13:00:52 2025 GMT
Subject: CN=40b6f1a6-d645-4706-a7a7-e73125ccf86e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:84:10:ab:27:ef:22:38:f0:79:9d:96:00:0f:
67:37:59:c8:ea:82:24:15:2d:cf:09:54:d6:fe:46:
60:33:8c:c6:e0:9c:63:d0:0d:c9:fb:16:0d:03:5e:
f2:22:80:a9:89:d7:45:fb:62:f2:8d:46:46:92:f3:
9b:6c:cc:e0:6d:ae:6b:e8:8e:ed:01:ad:3a:39:78:
be:b3:fc:da:e1:7f:19:46:6d:38:48:43:5d:f9:d6:
6d:c2:a2:f2:02:cf:1a:87:0e:f8:5c:d2:65:82:a2:
65:fd:a1:43:a5:cf:9d:58:43:f2:d8:7b:e3:49:17:
6f:f0:ad:e6:82:4d:75:bd:4b:ec:cb:12:1f:cb:6d:
d0:a8:de:47:69:0c:91:83:4c:5b:6e:d1:91:fb:09:
53:7a:3b:5e:db:7f:62:dc:95:30:8c:42:1f:b3:6b:
81:68:4e:a7:d7:43:a9:56:d5:8d:8c:d1:8d:d7:ce:
5a:c0:73:ff:3e:51:3b:7e:be:88:1e:5d:8e:88:d9:
ff:dc:cf:94:59:fc:7a:c0:9e:9b:f6:72:a9:21:de:
9f:b9:24:33:69:a5:b3:a7:50:68:06:0b:53:9a:db:
91:1f:9f:5a:69:10:50:31:76:5f:82:1a:39:0f:5b:
b9:0c:6a:2b:3b:1f:5c:ef:a6:45:a6:57:70:94:03:
fe:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:15:10:6A:C0:C3:3A:5A:90:0F:2E:EF:C5:6D:10:02:73:B5:85:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5ffb160-7d08-4282-966a-137e7328c1b0/ecefeada-cbdb-3f8a-9abe-50ea35a728f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5ffb160-7d08-4282-966a-137e7328c1b0/a5ffb160-7d08-4282-966a-137e7328c1b0.crl
X509v3 Authority Key Identifier:
keyid:3C:2E:40:AC:19:47:1C:23:8C:42:39:6E:D3:35:EC:B6:BB:E5:D6:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5ffb160-7d08-4282-966a-137e7328c1b0.cer
sbgp-ipAddrBlock: critical
IPv4:
104.222.64.0/20
IPv6:
2605:e580::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:5d:72:df:74:94:78:70:48:8b:92:61:80:7f:a2:b3:b3:1d:
55:62:34:0f:30:8c:4d:93:21:54:07:17:a0:fe:01:5a:d4:27:
bd:07:b9:53:79:8c:3e:9c:49:e9:41:69:29:dc:7d:91:6e:d4:
ae:6c:17:81:a7:84:c6:98:0e:ee:81:22:e4:6d:9a:fe:89:14:
3b:8a:e6:04:07:67:4d:60:86:83:b3:98:52:b2:7c:a0:be:85:
4e:f5:69:b0:e8:9d:3a:14:1e:c9:68:ef:fa:27:30:c7:df:1c:
6f:74:81:5a:52:6f:c0:a2:98:da:87:9d:78:d4:85:e1:d7:fa:
f1:62:10:b0:1e:f4:e5:bc:a6:3a:63:23:89:26:45:bc:df:cc:
8c:f3:57:f2:35:b2:ce:13:d5:4a:02:2e:ff:60:d7:4f:c5:ba:
00:33:f5:24:08:2d:6f:84:73:68:e5:0b:80:c3:80:d3:10:ff:
33:7b:a8:13:19:93:e4:04:b2:f3:22:cb:c1:25:b7:af:78:fc:
b3:5a:d4:9c:58:ba:7f:4d:6a:28:fe:51:9e:24:ea:be:00:83:
43:ec:2a:d5:7d:2a:1a:5c:2c:7a:3e:9d:a1:db:7f:ac:b4:97:
3f:16:33:b3:cb:23:39:6e:50:02:49:07:12:62:f9:34:16:9a:
21:0a:f7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:05:33 2025 by rpki-client