Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7c6b835a-906d-351d-9487-0521927e90d9.roa
File: 7c6b835a-906d-351d-9487-0521927e90d9.roa (raw, json)
Hash identifier: RLwk+HExKklZlvSyyx2NWVa1ABFgOwuRGUv1fPpTl6k=
Subject key identifier: E3:FE:7F:D3:D0:4B:6B:FA:7E:00:DA:F9:69:F0:8F:0B:C6:2A:D0:67
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584917DC0B38FB2BD7B3A12E5028
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7c6b835a-906d-351d-9487-0521927e90d9.roa
Signing time: Thu 06 Mar 2025 02:00:39 +0000
ROA not before: Thu 06 Mar 2025 02:00:39 +0000
ROA not after: Wed 04 Jun 2025 01:00:39 +0000
asID: 6167
IP address blocks: 72.96.172.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:17:dc:0b:38:fb:2b:d7:b3:a1:2e:50:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 6 02:00:39 2025 GMT
Not After : Jun 4 01:00:39 2025 GMT
Subject: CN=ea284902-3bee-43c8-9d4d-1854d78eac8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:dc:25:99:2c:d4:ff:ee:43:b0:01:99:88:20:
a9:21:18:50:c0:2f:bd:fe:7c:20:54:30:04:f9:66:
20:11:1c:f3:86:96:5d:de:33:4f:98:63:3b:55:0d:
80:d1:45:b6:59:57:2e:90:70:08:c9:e5:f1:ae:54:
6b:79:69:54:f0:b8:e0:a0:f3:11:8d:01:b7:f0:5d:
16:2e:bb:ec:3a:3c:a5:02:ef:15:13:9f:50:1f:e9:
f4:3c:50:5c:81:58:c0:96:76:5e:4f:64:b8:a8:9d:
1f:d8:01:94:93:ba:a1:b0:6e:89:30:48:1d:2e:1e:
fc:ba:dc:ab:3c:85:2a:af:70:80:a4:4c:e1:2d:59:
71:89:a0:e0:dd:83:37:b3:fc:c4:98:2c:bb:67:d2:
62:53:93:98:81:a6:1a:bd:ed:59:de:00:fa:f1:04:
84:6d:2b:7e:80:e0:c4:ce:b2:6a:0c:57:30:7b:d5:
2c:56:1f:49:26:01:cc:19:3d:6c:24:9d:ea:e1:01:
0d:01:a0:69:13:af:b0:0d:19:1a:02:95:f4:9a:28:
de:c4:2f:d9:75:85:7e:17:ec:8e:32:73:67:91:8c:
1a:42:a8:54:1a:a4:48:e0:86:f2:30:9c:30:be:7d:
e3:d5:2a:60:e7:6a:ba:4c:24:30:40:58:1f:c2:bb:
68:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:FE:7F:D3:D0:4B:6B:FA:7E:00:DA:F9:69:F0:8F:0B:C6:2A:D0:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7c6b835a-906d-351d-9487-0521927e90d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.96.172.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:82:6f:5e:cb:8b:bb:20:57:6d:80:93:9b:1e:35:3a:14:ba:
c5:47:95:a1:ca:1f:80:1f:b2:13:0a:6c:1d:4e:54:bb:a5:6b:
38:9d:cd:95:28:8f:51:e9:01:31:09:7d:f2:d7:fe:af:fd:0a:
1b:71:1d:80:f6:5c:b5:1c:38:83:b8:1e:51:a4:42:a9:6c:cc:
08:b0:12:70:87:09:e7:ee:28:cf:3b:63:52:3c:28:cb:b1:e4:
68:eb:b2:6e:bb:95:7f:9f:54:d0:11:53:ff:33:3f:b7:cf:f9:
6f:4c:69:22:93:b9:ce:44:90:ae:2d:ab:aa:0c:60:bd:44:23:
e2:ac:fb:fc:e6:9d:c0:d8:ee:7f:0b:85:16:84:8a:98:d0:33:
3d:bd:6a:c5:fa:e1:b7:4a:65:8b:43:78:93:d3:b4:cd:c1:21:
8a:45:d7:ab:40:6a:b2:55:c7:58:ee:ac:b1:58:41:87:01:fe:
03:28:17:46:0f:cb:15:6d:50:c5:83:18:df:f4:af:c0:a2:61:
7c:fc:dc:08:48:2c:12:ca:d9:8a:30:ce:ff:76:ec:22:d5:ef:
8e:b3:74:d6:76:8f:82:35:18:79:74:fa:91:27:bd:d2:82:54:
45:a9:23:25:c7:e1:21:0a:f1:be:a9:93:43:f7:48:3a:33:2a:
c5:f6:44:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 08:44:54 2025 by rpki-client