Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/28ac0bee-45dc-3518-a38b-05a97ff4db29.roa
File: 28ac0bee-45dc-3518-a38b-05a97ff4db29.roa (raw, json)
Hash identifier: qFIjXh3ow6Za9B4P5jhAmIxJ6w/jY4Yjp9HEYORQf38=
Subject key identifier: B9:6A:51:E5:AF:EB:7D:AF:FF:F8:35:38:BB:14:8F:45:F8:A4:93:16
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858490B4C2BC5F8EEE2B0AE99B280
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/28ac0bee-45dc-3518-a38b-05a97ff4db29.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 701
IP address blocks: 71.123.64.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:2b:c5:f8:ee:e2:b0:ae:99:b2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=c93c99d7-915b-418c-b582-548891d7327e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ae:53:75:26:f3:61:b9:f1:98:77:32:22:1b:
37:48:38:53:5e:3f:3d:22:73:6f:d9:99:75:20:ac:
8a:cf:aa:60:ce:80:ae:17:b2:ef:6b:9a:9c:24:f8:
fb:96:eb:0c:70:b4:d4:93:69:20:b4:f8:cc:20:ee:
5e:f8:47:e4:34:d8:92:c5:b3:54:ae:83:40:4c:33:
1d:9f:1d:76:0a:d1:f4:fd:24:b4:a3:24:db:b3:93:
db:37:c4:48:75:b6:13:55:bc:9e:53:7d:11:25:37:
ef:f8:fa:1d:b1:9d:18:d2:ab:06:90:2b:43:e5:7a:
12:c9:45:76:56:6f:a5:62:80:65:92:f6:ca:87:f1:
a1:e1:6f:b4:12:db:3d:db:56:f8:34:aa:15:76:fa:
ad:5e:be:d2:6e:ec:f1:b1:11:9c:24:20:ed:51:0f:
28:35:c8:9d:28:44:41:da:a3:6f:2e:66:1a:8c:27:
bc:dc:45:ce:6c:9e:2b:86:29:f8:9d:43:be:c9:15:
26:e0:9f:1c:8a:14:73:e0:28:65:ef:5b:15:d1:11:
50:88:84:ab:c6:99:20:2e:26:97:e8:bb:f0:85:fe:
f6:59:b4:3d:8c:d8:81:0a:af:a0:b9:a2:29:13:5e:
d9:0a:4b:bc:29:2b:df:56:c3:02:58:91:d7:ae:fc:
1b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:6A:51:E5:AF:EB:7D:AF:FF:F8:35:38:BB:14:8F:45:F8:A4:93:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/28ac0bee-45dc-3518-a38b-05a97ff4db29.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
71.123.64.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:d2:ed:4a:1d:ac:60:df:9b:2c:3a:bc:f5:75:52:0a:82:d5:
bb:5e:70:f1:3b:de:26:d7:26:a5:55:eb:c9:d9:bf:61:0f:dc:
5b:f9:5a:c6:49:c0:0c:1b:e7:a2:05:9b:fc:8f:11:b0:2a:0a:
d0:8b:45:b2:05:4f:9c:8b:83:84:f8:b8:5f:85:6f:66:03:b6:
1d:59:1e:e4:31:6b:00:c8:bb:98:ed:1f:3c:19:28:6e:85:f1:
9e:db:1a:5f:0f:20:8f:3e:87:5c:a8:93:a5:8e:d2:82:b1:39:
8b:c1:bf:12:0b:18:a6:fd:2f:db:3e:59:80:4f:60:4b:be:8f:
30:e2:60:8f:34:1e:f6:17:b3:cd:9e:48:14:79:81:4e:d5:e8:
bf:7a:61:f0:14:a3:6c:d8:42:80:e9:45:b0:12:8f:f5:1e:76:
83:ca:4e:10:f3:5f:e3:81:60:64:d6:c5:3b:86:88:17:81:95:
ba:2d:f2:51:5f:2b:2f:c9:f1:70:83:46:67:94:d5:7f:52:f5:
39:df:69:eb:80:86:fb:2b:63:8b:20:62:e3:e2:73:2b:bf:cd:
a5:ee:e6:63:69:34:e3:35:09:61:6f:6b:63:88:0a:5d:c5:f0:
14:8d:25:4a:03:22:f6:3c:6c:6f:f0:34:0d:2a:2e:ce:5f:a6:
7b:e9:d0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 12:05:44 2025 by rpki-client