Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1c5e00b3-8a3f-331d-8123-725c0f1eb117.roa
File: 1c5e00b3-8a3f-331d-8123-725c0f1eb117.roa (raw, json)
Hash identifier: dTPzyhTt98xAr+7Gv7JgGoKL/gucDmDbQmVd5/CBoiw=
Subject key identifier: D2:F6:FE:72:23:A5:70:B9:20:8D:1E:C5:7D:87:43:A5:65:24:6D:57
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848C150E120CA672498BD674700
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1c5e00b3-8a3f-331d-8123-725c0f1eb117.roa
Signing time: Mon 03 Feb 2025 02:00:39 +0000
ROA not before: Mon 03 Feb 2025 02:00:39 +0000
ROA not after: Sun 04 May 2025 01:00:39 +0000
asID: 6167
IP address blocks: 174.218.168.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c1:50:e1:20:ca:67:24:98:bd:67:47:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 3 02:00:39 2025 GMT
Not After : May 4 01:00:39 2025 GMT
Subject: CN=418e538f-9460-4f60-bf7d-0ebfec02f1e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:42:fb:3d:a6:7a:cc:57:65:b1:6e:6b:63:ca:
97:af:de:16:a3:f4:35:02:5c:ec:03:c6:4d:9c:b0:
fc:5e:76:7c:62:e3:1e:b7:7d:cf:20:42:56:c2:e0:
2a:99:64:00:05:b1:35:79:62:98:13:9e:ce:c1:02:
7d:f0:a2:e7:7f:46:e9:b6:3b:55:e3:a0:fd:7b:c9:
7a:e9:8b:3c:15:cf:1e:b7:56:de:ef:58:b1:fd:db:
aa:5d:14:19:86:67:6a:c9:06:3b:51:a4:82:52:a0:
12:a1:6f:73:a6:22:81:d9:c7:b2:b4:b6:12:52:53:
0c:9d:fe:23:90:1d:7b:b7:71:11:25:21:00:2a:63:
57:6e:8a:23:69:09:7f:80:96:97:29:ec:97:33:92:
92:5f:2e:65:81:f1:51:6a:4f:cd:17:2c:c6:14:a1:
a6:22:46:89:fb:3d:ee:84:f5:c5:96:f7:2f:c4:db:
ee:06:6b:2d:64:65:f3:69:22:b0:8a:3d:c5:1b:30:
c2:b8:76:98:eb:ba:8b:e1:59:24:69:70:b0:e8:62:
d4:42:61:8d:48:5d:e8:9c:d7:f7:44:f5:dd:7e:fd:
ac:1a:8b:0d:d0:bf:b3:fe:8d:14:c4:f6:01:5f:41:
9f:4b:0a:7d:94:3a:e7:e4:44:12:5e:2f:98:2b:a0:
e0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F6:FE:72:23:A5:70:B9:20:8D:1E:C5:7D:87:43:A5:65:24:6D:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1c5e00b3-8a3f-331d-8123-725c0f1eb117.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.218.168.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:a1:7b:4d:12:08:83:57:49:7f:7b:64:fe:fd:a6:10:58:a7:
5d:93:f7:ce:ae:3b:43:5e:61:7e:e5:9e:7a:ef:4f:60:da:32:
4d:0e:93:31:c5:4a:d2:44:1f:8f:cf:34:28:9f:ca:1b:be:3b:
15:b5:96:39:74:33:a1:c4:b6:20:4b:4a:b5:75:4e:d5:35:b8:
13:08:62:4f:bf:3c:dc:c2:30:6a:93:0b:4a:52:01:64:00:9e:
a9:9d:f3:c0:b8:1a:4b:44:a5:87:1e:bd:c9:36:3c:e1:22:f8:
2c:6b:dc:3d:53:db:cc:de:db:57:c2:80:3b:88:24:a1:9b:3b:
04:4f:12:e4:1b:0f:f1:94:02:c2:75:47:55:4c:de:74:8c:8d:
3a:bd:ae:12:69:f8:79:a0:14:00:58:0d:67:1e:44:32:2c:f6:
0a:12:ac:82:d8:ca:8d:69:77:db:5b:bb:c8:00:15:f6:7f:6a:
f1:91:b3:7c:be:90:e0:7e:3b:e0:35:c8:6d:69:0a:30:28:45:
84:0b:b9:c6:c3:aa:ad:bc:a4:80:07:66:bc:43:32:ef:31:f7:
92:62:6a:8a:2d:db:29:76:09:d6:23:85:17:8f:06:5a:b8:20:
8f:3b:84:26:93:0d:3f:47:1d:d8:4a:41:4e:41:55:98:7e:bc:
71:df:82:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 01:55:09 2025 by rpki-client