Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/46caa585-df4a-302c-9a7f-e69d38ba8b27.roa
File: 46caa585-df4a-302c-9a7f-e69d38ba8b27.roa (raw, json)
Hash identifier: xcRH1rs1hwYvgSXJHvHe6RZaeLHEdkXWuKmz4iJl+e4=
Subject key identifier: BF:BE:B2:E4:CF:55:E2:CD:B5:5C:71:19:5A:07:E3:CB:66:AE:8F:BF
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858491246D35C27BE46C9B71D43C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/46caa585-df4a-302c-9a7f-e69d38ba8b27.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 701
IP address blocks: 108.3.64.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:d3:5c:27:be:46:c9:b7:1d:43:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=082e2b34-e5a6-4014-9536-8737748f7f1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:67:36:49:be:fd:b5:22:80:cb:ad:e9:f9:72:
59:0a:9a:90:14:32:36:38:c7:c0:a1:f9:35:ba:1d:
d7:ec:56:30:70:a0:10:7c:d4:2f:bc:ad:6f:27:15:
f8:e5:b6:b7:f2:61:77:1d:2e:a6:8f:e0:e3:16:f7:
0b:37:69:50:57:20:ab:c5:53:c4:3b:12:d9:f2:e0:
8c:09:4e:57:8e:e3:6a:68:72:58:58:f0:6a:6b:37:
ca:79:4a:29:8e:ec:11:7c:86:72:50:c9:a4:0c:df:
5f:c4:19:15:50:f6:4b:3f:59:75:49:92:fb:44:1d:
27:63:83:59:fa:80:58:d0:f5:c2:d6:d2:91:64:e8:
a4:e6:53:a4:82:5b:1b:95:c5:3a:4b:8d:7c:02:33:
e1:37:2d:6e:31:74:71:b3:5b:bb:92:44:48:07:06:
14:03:67:82:a3:ac:b7:7d:8c:92:d4:af:16:06:51:
6d:1c:db:42:ff:1d:06:be:d2:74:15:52:2d:19:80:
4a:e4:f2:c7:b0:87:00:5f:1b:bb:62:cf:ae:20:5c:
fb:44:1a:e5:1e:ef:23:fd:40:6e:6f:c9:a5:95:36:
e9:96:88:cb:93:11:93:2d:88:cd:33:80:7e:3c:28:
d2:c2:36:b6:01:71:37:9b:c8:51:f7:70:e1:1c:95:
7d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:BE:B2:E4:CF:55:E2:CD:B5:5C:71:19:5A:07:E3:CB:66:AE:8F:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/46caa585-df4a-302c-9a7f-e69d38ba8b27.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
108.3.64.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:5e:e3:3f:ab:8e:34:e9:15:a3:19:5c:1a:cf:00:f7:00:9c:
00:34:ab:f2:c4:9a:91:46:68:3d:bf:4f:32:97:87:54:f9:bb:
65:b4:b6:7f:b7:29:ec:da:26:08:ec:68:d8:f9:22:c3:37:f3:
06:a6:ff:41:de:4d:61:15:f7:e4:74:51:78:9c:55:79:0c:9d:
8c:50:cd:9a:b7:a1:93:96:04:ec:20:da:5c:75:3c:c4:2b:74:
dc:a0:d6:bf:c6:2c:df:f6:ed:a2:df:58:46:67:fa:c0:54:91:
3f:23:75:82:ee:d5:f4:d4:fe:60:20:2f:ed:8d:72:44:94:8c:
00:26:bd:e3:58:6e:aa:ce:f2:e6:57:41:ef:be:68:e8:e3:e9:
ac:3e:aa:45:c9:fb:09:dd:2e:f6:97:12:cc:60:06:73:ba:94:
44:fe:df:62:2d:69:fe:b6:94:49:d4:3d:c1:5d:83:e2:e2:f3:
c7:0d:f3:43:7f:28:ca:3b:ac:d2:3e:0d:22:5f:14:bf:d3:95:
ea:b3:22:44:c6:cc:07:7b:fd:f3:7d:1b:1f:54:3e:07:7a:18:
ac:76:ea:04:38:92:b7:bf:37:0a:8d:46:c2:7c:c1:8f:ab:cd:
26:95:c2:cb:7e:59:b8:5b:8c:cb:04:2e:cd:a2:c3:b7:df:20:
f8:f3:29:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:29:43 2025 by rpki-client