Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/35553d69-d3f3-39e3-b949-fcf9b7e9ed7b.roa
File: 35553d69-d3f3-39e3-b949-fcf9b7e9ed7b.roa (raw, json)
Hash identifier: IWSTbZPGk/BcBu6rxMffGCLm4FOz69Ek2vBjIhz0mWI=
Subject key identifier: B9:AF:1A:E4:9F:14:D5:53:4F:E3:B2:FB:01:C2:CB:68:5D:57:2D:93
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328576D51CC73C042CFC1732ABA0456
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/35553d69-d3f3-39e3-b949-fcf9b7e9ed7b.roa
Signing time: Tue 07 Jul 2020 19:21:40 +0000
ROA not before: Tue 07 Jul 2020 04:00:00 +0000
ROA not after: Sun 17 Mar 2030 04:00:00 +0000
asID: 8075
IP address blocks: 40.125.0.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 09 Apr 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:2a:ba:04:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Jul 7 04:00:00 2020 GMT
Not After : Mar 17 04:00:00 2030 GMT
Subject: CN=b619b4bf-83d7-49a5-9ba5-afe20c179087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:36:e5:1c:74:4d:d5:82:eb:c6:3a:9a:15:9e:
08:03:86:32:9b:ba:cc:d0:e6:59:e0:e0:e5:bd:6a:
3d:77:ea:6e:ee:83:09:ba:20:d2:17:5d:27:42:04:
fc:ad:5e:fb:37:61:9b:1c:f8:b0:78:8d:af:32:22:
f8:80:cc:ad:1c:8e:c8:5d:f6:e8:45:dc:ab:ff:36:
6d:59:e3:38:1f:a5:33:a9:d0:85:26:32:e9:cd:56:
2c:0f:89:91:b4:36:91:11:f3:56:0d:a0:59:41:d1:
19:c6:fe:75:1c:5d:7f:e3:d2:3d:f4:a8:c7:54:2d:
59:cd:0f:2c:73:b0:7e:61:0c:b3:31:06:94:41:8e:
a6:a6:77:5b:d5:4a:8e:05:3b:6c:8c:8a:6d:47:16:
a3:6f:3a:79:1c:6b:c5:f4:ea:cc:52:af:bd:e1:80:
cc:7b:e8:b4:51:8e:9f:29:8d:d9:99:b2:4b:32:f5:
45:d2:6b:53:67:3e:df:72:53:40:c0:e4:90:c4:98:
6d:aa:25:84:75:ac:82:50:91:a5:10:84:90:a2:e7:
ab:e1:58:68:87:f2:ee:7f:4a:b8:36:e0:e5:86:5a:
78:2b:cd:cb:30:4c:04:41:92:ae:84:5d:4e:eb:16:
16:6a:97:37:e4:b6:0d:e8:9e:91:58:ad:8e:9a:8d:
cb:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:AF:1A:E4:9F:14:D5:53:4F:E3:B2:FB:01:C2:CB:68:5D:57:2D:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/35553d69-d3f3-39e3-b949-fcf9b7e9ed7b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
40.125.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:b6:9d:45:41:41:1a:5a:fc:05:c7:e3:6a:cb:76:69:a6:b0:
a0:7c:67:b2:d3:ad:b1:39:57:7c:f1:fb:42:f2:db:2a:08:70:
33:d7:65:96:44:32:05:d4:72:a5:46:9b:da:c9:3c:89:14:eb:
ba:75:ac:84:1a:76:e0:ef:40:f7:a2:ca:f1:ac:49:69:f9:1c:
a0:7c:aa:0e:41:3f:36:62:a1:0f:d6:4e:11:77:05:a2:4d:ce:
35:6c:78:58:1b:37:9c:f6:9a:db:59:a1:63:a3:b2:52:a0:a1:
e2:b1:03:01:9c:be:95:71:e9:e4:3c:04:b7:53:a9:c1:21:40:
43:f2:97:4f:01:41:b7:d8:c1:0d:f4:c1:6e:b1:72:0b:45:f9:
00:e7:b3:22:2b:eb:3a:cb:27:b0:1f:51:6d:14:16:67:dd:ec:
5a:b7:e6:06:42:28:55:95:fb:7a:6a:82:af:37:7c:fb:bc:3a:
6e:df:87:e9:b5:4d:bf:96:cc:6b:04:ad:02:a6:0a:fc:01:e8:
e8:b9:5d:00:be:f5:93:23:c9:53:d4:3e:2c:b4:26:40:8d:c9:
56:55:92:99:e9:4d:d3:66:3c:86:23:18:94:cd:d7:38:f5:84:
e0:36:22:c7:a8:c1:b0:91:84:90:d2:40:54:a1:38:65:75:09:
96:7e:b3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:28:31 2025 by rpki-client