Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2916f933-bf91-317b-a57a-073b279ea357.roa
File: 2916f933-bf91-317b-a57a-073b279ea357.roa (raw, json)
Hash identifier: l8hIzvX0tJ9MHPa5bksS3Ep6z/91bBnn310rxj6e8So=
Subject key identifier: 9E:C8:55:D0:E7:90:C7:F1:04:60:02:CD:92:67:87:E2:25:7E:33:08
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858491246CE2C0A86AC24DD5AA880
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2916f933-bf91-317b-a57a-073b279ea357.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 701
IP address blocks: 71.251.176.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:ce:2c:0a:86:ac:24:dd:5a:a8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=8031451c-a0a7-48a9-a920-63234cafb7ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:af:9a:fa:f0:95:17:3b:2b:22:76:1c:3c:3d:
85:3d:2d:c4:9d:f9:c6:6f:18:4e:53:63:27:3a:af:
e7:32:35:f3:3a:13:8e:47:ca:e8:0e:c7:a5:2c:ae:
4b:13:53:5c:ad:e4:1b:b1:1e:e5:fd:43:be:a4:73:
fc:da:67:d4:08:f6:40:a2:7b:22:49:28:99:1a:4f:
9a:62:80:09:03:aa:0e:d4:21:e0:da:2a:40:a9:f9:
ce:05:fa:fd:96:6b:d4:3c:fd:dc:f5:b2:22:f4:43:
d6:fa:42:1b:f5:dd:9e:da:9c:da:b6:78:0e:53:69:
7c:57:bc:08:3f:89:0a:c3:af:96:7d:71:96:33:6a:
aa:22:5c:5c:a3:71:b5:6c:65:a3:b0:b0:f9:57:ab:
76:0a:b2:9c:d4:b6:65:31:c9:25:53:a6:84:9c:76:
67:12:40:9b:6a:63:70:11:26:af:14:54:4b:90:73:
f5:0f:9c:29:a3:8d:30:46:be:0a:33:3c:b0:77:b2:
b2:f7:a2:9e:a3:06:5f:e2:b3:37:c9:74:b3:98:27:
d4:24:96:9c:40:bd:72:88:08:8c:6c:dc:12:99:e3:
79:5e:60:11:7f:25:ba:89:83:54:14:07:55:ee:a8:
3b:8f:48:33:96:1f:72:a7:85:4a:20:d6:5d:e6:09:
d6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C8:55:D0:E7:90:C7:F1:04:60:02:CD:92:67:87:E2:25:7E:33:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2916f933-bf91-317b-a57a-073b279ea357.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
71.251.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:f8:b7:6c:ff:89:77:96:4b:23:41:9f:55:4d:31:14:28:a1:
c0:95:80:d4:20:62:d5:58:ae:8a:36:89:24:34:fa:b7:97:3d:
5a:d6:bd:a7:9b:de:68:86:cd:45:8b:c1:1d:39:1d:bf:7c:73:
f6:de:f0:f5:38:46:fe:77:ac:e8:d3:32:ec:78:50:8b:ea:11:
f9:36:f5:89:cf:dc:14:21:25:82:f1:a9:f7:fa:74:aa:fc:4f:
54:70:56:38:ad:fe:0b:a2:46:39:cc:fb:49:f4:e5:c4:ab:4a:
f0:e7:b2:80:13:34:4f:d8:10:8c:d6:3a:fd:da:c3:ed:f7:36:
09:37:3f:44:69:76:2d:a9:07:0b:45:ea:7c:64:11:58:87:e5:
a0:e9:79:c3:41:a4:7d:3e:6d:b0:2d:aa:df:57:b3:75:f6:60:
a4:8e:aa:f1:83:8e:d3:89:4e:c2:a5:98:67:f7:0c:a3:85:46:
1d:a4:43:6c:28:fe:53:01:d4:2e:cc:69:2d:ba:9f:98:00:11:
5b:10:c0:13:40:9e:a5:e9:2a:62:fe:c2:de:0d:52:fe:ea:e5:
85:fc:f3:02:d8:3c:6f:04:64:8b:77:b2:11:d5:e0:c8:22:ba:
a9:79:d1:76:9d:b1:40:a5:7e:0d:45:97:75:63:e5:b1:9b:8a:
c4:97:6f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 09:52:47 2025 by rpki-client