Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9607f1e-20c8-421d-b23b-a4c9bb6b791f/d2bd9968-807f-3443-8508-432fb873254e.roa
File: d2bd9968-807f-3443-8508-432fb873254e.roa (raw, json)
Hash identifier: /G0/NzuhR7Y1gsd4roVCuSJNquFTYMv4NM3dUyLyRjM=
Subject key identifier: 32:8D:CE:D0:62:D8:25:5C:01:FA:D4:80:91:52:48:9B:CD:D0:A1:92
Certificate issuer: /CN=c9607f1e-20c8-421d-b23b-a4c9bb6b791f
Certificate serial: 010D0C9F432858498769B350F7CFEDD042D7E400
Authority key identifier: 3A:9D:F6:7E:78:A2:D3:C4:F2:72:DA:86:5E:28:29:FF:EE:ED:05:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9607f1e-20c8-421d-b23b-a4c9bb6b791f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9607f1e-20c8-421d-b23b-a4c9bb6b791f/d2bd9968-807f-3443-8508-432fb873254e.roa
Signing time: Tue 15 Apr 2025 01:00:47 +0000
ROA not before: Tue 15 Apr 2025 01:00:47 +0000
ROA not after: Mon 14 Jul 2025 01:00:47 +0000
asID: 26962
IP address blocks: 207.71.160.0/24 maxlen: 24
207.71.161.0/24 maxlen: 24
207.71.162.0/24 maxlen: 24
207.71.163.0/24 maxlen: 24
207.71.164.0/24 maxlen: 24
207.71.165.0/24 maxlen: 24
207.71.166.0/24 maxlen: 24
207.71.167.0/24 maxlen: 24
207.71.168.0/24 maxlen: 24
207.71.169.0/24 maxlen: 24
207.71.170.0/24 maxlen: 24
207.71.171.0/24 maxlen: 24
207.71.172.0/24 maxlen: 24
207.71.173.0/24 maxlen: 24
207.71.174.0/24 maxlen: 24
207.71.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9607f1e-20c8-421d-b23b-a4c9bb6b791f/c9607f1e-20c8-421d-b23b-a4c9bb6b791f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9607f1e-20c8-421d-b23b-a4c9bb6b791f/c9607f1e-20c8-421d-b23b-a4c9bb6b791f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9607f1e-20c8-421d-b23b-a4c9bb6b791f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 16 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:87:69:b3:50:f7:cf:ed:d0:42:d7:e4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9607f1e-20c8-421d-b23b-a4c9bb6b791f
Validity
Not Before: Apr 15 01:00:47 2025 GMT
Not After : Jul 14 01:00:47 2025 GMT
Subject: CN=b890aa09-85a3-4d4f-b99f-a7fdcdfa643d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:08:fe:23:73:1c:de:13:f2:cf:b2:9c:20:e6:
eb:11:24:b5:68:06:4f:3b:0b:4d:08:a9:d2:f4:6a:
21:c2:68:37:4c:a4:2c:27:12:48:e4:95:56:10:97:
a8:0f:d0:e7:0f:dc:e8:be:81:ea:88:38:d1:f8:2b:
fd:86:5a:ce:de:77:17:a8:0e:b8:a4:7c:7b:84:d1:
20:63:60:98:7b:7c:be:7c:9d:4f:b1:c0:7f:f5:56:
84:eb:f7:78:d6:9d:f1:9b:21:36:43:28:b3:62:c1:
8a:a9:50:e2:21:b0:bf:bb:2f:c7:fb:93:c7:97:41:
9f:e2:9d:6d:bb:ea:53:5f:a1:bf:9f:cb:95:2f:69:
2c:a7:2e:fa:34:35:6d:6d:5b:e7:0b:ea:c3:59:62:
05:a4:3c:27:10:50:2b:69:1f:30:dc:15:c9:07:60:
fd:e7:72:96:24:9a:53:c0:a1:2b:fc:b9:b3:95:28:
df:a4:c5:6a:ca:1d:54:7b:5f:fb:03:b7:16:42:90:
f3:6e:f4:bf:77:d4:31:1c:b5:90:84:56:bc:39:e0:
b5:99:58:5f:5f:e9:ef:3a:71:3a:ca:71:50:b7:6a:
29:6c:92:f3:3e:15:a8:25:bf:0b:2c:44:0e:fe:5f:
29:92:94:4e:0f:64:0d:16:d5:3c:89:93:84:82:95:
51:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:8D:CE:D0:62:D8:25:5C:01:FA:D4:80:91:52:48:9B:CD:D0:A1:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9607f1e-20c8-421d-b23b-a4c9bb6b791f/d2bd9968-807f-3443-8508-432fb873254e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9607f1e-20c8-421d-b23b-a4c9bb6b791f/c9607f1e-20c8-421d-b23b-a4c9bb6b791f.crl
X509v3 Authority Key Identifier:
keyid:3A:9D:F6:7E:78:A2:D3:C4:F2:72:DA:86:5E:28:29:FF:EE:ED:05:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9607f1e-20c8-421d-b23b-a4c9bb6b791f.cer
sbgp-ipAddrBlock: critical
IPv4:
207.71.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b7:fe:ef:de:4f:2c:38:e5:9d:46:e3:30:cb:c8:94:f2:0a:b5:
f0:74:56:9b:b7:f3:ed:77:3f:94:bc:f1:21:0f:b0:77:3a:81:
74:61:9a:64:20:61:65:d2:7f:c7:48:47:ee:f1:d3:50:7a:13:
46:d4:f8:e4:eb:1d:17:c2:a6:a5:b6:a0:d0:12:01:25:ec:8f:
00:ed:02:f1:93:ab:c3:88:dd:fa:b3:cb:fd:0c:92:72:c0:b5:
59:85:b8:bd:52:10:96:1a:7f:6d:7a:d4:8c:f2:80:d1:49:0f:
4c:60:01:6b:9d:fc:d4:bd:5d:3d:da:93:af:fd:e7:7c:69:84:
b2:25:f4:aa:76:07:8b:ab:35:c9:73:41:37:bc:44:a0:4e:f0:
68:8b:53:bc:bd:57:0d:79:a2:97:48:e1:64:9c:48:8b:eb:7d:
d3:38:92:07:14:24:80:7e:03:bb:e5:bf:7e:2e:18:61:52:8e:
f9:ba:5e:36:97:65:4f:d4:3c:b6:bf:95:6c:ef:c0:8e:a3:63:
df:78:36:f3:1e:02:87:6e:2f:69:01:81:d3:46:bc:9e:34:81:
00:96:dd:51:f2:f0:73:70:22:93:f4:a3:c1:4e:60:1d:70:04:
62:24:b7:cc:54:6c:17:56:99:61:be:e2:0f:e5:9d:3d:36:1e:
68:06:46:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 08:00:20 2025 by rpki-client