Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4b63a081-9d93-3de1-8d23-f282154d9442.roa
File: 4b63a081-9d93-3de1-8d23-f282154d9442.roa (raw, json)
Hash identifier: WkUjVlUiuFhUoNoehl5ilg4oUxBDCNVHwU6dgr9P5EQ=
Subject key identifier: 76:C9:21:50:D2:44:ED:3B:E0:B8:AB:64:63:E1:F3:EA:EE:F3:34:99
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858490B4C31CE68D81D6500723E80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4b63a081-9d93-3de1-8d23-f282154d9442.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 701
IP address blocks: 68.163.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:31:ce:68:d8:1d:65:00:72:3e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=68d16d37-0f53-4af4-8e0b-e328552a4ac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:35:32:a8:37:72:f4:ce:db:32:86:79:c8:fb:
5f:b2:65:9a:7d:b2:d2:9a:d1:48:2c:d6:af:b1:4f:
ad:c3:3f:15:b5:74:36:97:19:f9:c7:01:60:f9:05:
52:19:a1:85:3a:7c:e4:68:e2:f2:07:c1:90:16:0e:
4e:73:5f:11:44:47:08:4d:f5:70:f6:06:c2:ba:8e:
b1:a5:b6:e3:09:2a:60:23:ad:3f:86:a3:2a:dc:7e:
b7:d0:d8:db:57:c7:82:39:69:8a:ff:87:58:7a:11:
53:4c:58:8d:07:ab:9a:9f:ed:15:5f:ac:4f:f0:a9:
81:7c:49:64:d6:06:30:c6:28:f1:1b:20:7c:ad:1a:
38:3e:e6:bc:79:96:38:d3:0b:f4:02:d7:f5:98:c7:
95:9d:5c:d5:81:97:03:16:dd:66:54:c0:da:d2:6a:
e4:32:0b:b4:e6:67:2f:4d:73:72:59:28:76:ed:b9:
36:39:a5:5a:e8:b4:74:35:9e:52:72:d6:98:95:1d:
fc:7a:55:9b:c1:c8:8a:14:3e:f3:c0:ac:44:d6:eb:
a9:81:87:a3:a2:54:8e:11:fd:75:58:39:39:5b:20:
69:2d:9f:48:53:fe:f4:5d:0b:ec:93:14:fc:1d:ad:
c8:5f:fb:1d:27:bc:30:56:98:eb:94:f4:2f:73:f0:
ab:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C9:21:50:D2:44:ED:3B:E0:B8:AB:64:63:E1:F3:EA:EE:F3:34:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4b63a081-9d93-3de1-8d23-f282154d9442.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
68.163.121.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:50:84:a8:55:fb:ad:de:84:bd:a4:b7:0c:d8:0d:e7:64:e5:
98:e7:0d:f3:c8:d8:46:25:ca:7e:9c:35:01:b7:83:14:f3:00:
de:f6:98:ef:d8:d5:96:f6:33:07:02:b3:f3:fc:1c:f0:db:56:
25:e4:57:3a:fa:b6:f7:7f:5e:d0:3e:dc:ac:83:a4:5f:a8:c3:
32:3c:fe:3e:11:4c:2a:f1:97:81:74:1b:a5:0a:79:88:23:76:
73:d4:e9:3d:8b:6f:27:d9:9b:24:43:1f:da:46:64:e4:a9:49:
9b:de:39:06:0d:67:62:b8:06:1b:42:49:95:24:86:ab:33:30:
c7:2c:e0:61:82:cf:71:d6:33:89:8e:16:f6:af:7f:ef:28:44:
8e:71:c7:42:5b:f4:d0:01:de:65:17:14:ac:d9:57:69:41:45:
98:b7:bc:54:ce:7c:1c:7a:e7:44:32:10:18:5c:b2:8f:08:57:
f8:23:4a:b6:f6:ec:01:39:1f:f8:64:21:ae:ec:f8:73:85:fa:
6b:ac:cc:fd:a3:9d:97:7f:3a:d1:ac:1c:e1:1b:dd:c5:cf:89:
12:cd:ef:f2:a0:73:1a:35:a3:52:e1:9b:76:1d:c7:d3:ff:9b:
4c:bd:a6:df:cd:a8:eb:0c:d4:5d:4c:27:b0:5f:56:63:45:7b:
40:35:8b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:59:54 2025 by rpki-client