Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/113b908c-48a6-3148-8305-9a4a872712d4.roa
File: 113b908c-48a6-3148-8305-9a4a872712d4.roa (raw, json)
Hash identifier: HIl9dZjsfnfXA/lbYMLHKnSXYxNM50+We0aLock9HlM=
Subject key identifier: D3:F8:3C:22:13:88:0F:D1:61:90:28:0B:16:DB:CE:0D:3C:23:F0:8C
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858490B4C3257920EE950BB953100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/113b908c-48a6-3148-8305-9a4a872712d4.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 701
IP address blocks: 70.20.0.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:32:57:92:0e:e9:50:bb:95:31:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=437f2d73-b0df-42b5-88b6-f2605a1628e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:e8:12:73:70:de:54:17:0b:19:c9:9d:53:bb:
ee:8a:fd:b5:44:57:34:2c:db:ff:29:f4:3d:bc:24:
6a:6f:1c:9f:7c:38:db:3c:00:f5:d3:69:0e:da:17:
d4:ab:27:7c:5f:65:6c:a9:1c:5f:93:da:aa:2f:fe:
e1:08:8a:0d:f2:ca:d1:70:1a:1e:bf:f9:7e:67:3e:
24:99:4e:ac:56:d0:4c:ac:8c:f9:57:81:1b:2c:1f:
6c:d6:77:18:2d:4b:4e:d6:d4:ab:5c:86:d8:ee:a1:
96:c3:4f:b0:32:fa:69:dc:ae:6a:00:76:ac:5e:3d:
89:01:39:ca:be:a5:72:53:d9:a2:d9:c7:a3:e7:a9:
6d:e2:5a:da:a1:33:af:dc:82:12:e0:56:33:e2:87:
e5:26:68:0d:e3:e5:1a:74:ae:69:dd:78:40:9e:6a:
de:cc:07:35:50:87:b8:44:73:06:4f:12:3d:13:b3:
76:91:59:0d:88:bf:94:f9:7c:d6:1d:35:7f:0b:0e:
ca:69:59:eb:61:a9:62:3d:87:76:41:1c:ec:58:0c:
79:b4:8d:1c:00:15:c2:f2:dd:22:75:39:76:8b:e8:
dd:7e:d4:42:6f:e9:bd:3a:dd:53:54:10:31:16:68:
9e:df:d6:a7:12:ad:f0:d8:06:a4:05:4d:fa:4c:4d:
c0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F8:3C:22:13:88:0F:D1:61:90:28:0B:16:DB:CE:0D:3C:23:F0:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/113b908c-48a6-3148-8305-9a4a872712d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
70.20.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:11:40:95:70:05:b3:50:32:72:1e:0a:14:96:19:13:bf:7c:
25:e1:e7:f3:0f:92:0b:1a:11:8c:00:41:01:93:18:97:9c:44:
d0:6b:be:8d:f3:ca:50:6b:43:f4:a9:af:8a:d1:42:1e:0e:2e:
99:f7:43:87:9b:de:37:d5:87:04:14:42:4d:90:65:28:3e:98:
d5:ea:2f:ab:7b:63:6b:e2:8f:d2:fc:8c:70:db:58:72:20:97:
18:c6:7d:93:37:b5:e5:01:ae:f3:a5:da:94:11:ca:6f:25:d0:
2a:43:27:05:67:07:67:45:1f:55:0e:58:be:19:83:e4:5e:7b:
9b:19:59:60:df:68:27:cf:a5:5c:aa:ab:94:03:67:bd:ea:00:
fd:55:f5:21:4d:2a:71:be:95:fe:67:68:ed:5a:b3:ad:56:16:
5c:a6:e8:4f:8a:da:d2:9e:bb:4b:70:87:26:8b:1f:5a:9b:82:
3a:d7:95:07:d6:05:53:27:e1:cb:fe:59:e0:32:73:c4:85:ae:
57:27:79:42:bf:e6:ac:3a:5a:15:47:21:66:54:4d:99:16:1e:
6b:fd:7a:82:62:0f:c5:d5:3a:65:0a:32:89:e8:c0:57:f2:69:
a8:a4:a0:fd:bf:5c:94:59:c4:93:77:c0:bb:00:9c:20:08:a2:
b6:2e:3a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:38:39 2025 by rpki-client