Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/90081a89-e843-331c-9cf8-0fd9094c066e.roa
File: 90081a89-e843-331c-9cf8-0fd9094c066e.roa (raw, json)
Hash identifier: Ru/AwRzEei5sDec2wEtPu9FqACP2N38KC79N2kHVU+8=
Subject key identifier: 88:2B:13:0B:05:3C:B7:B0:3A:D9:18:53:76:B5:E5:37:C3:FD:2C:E4
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848C150E37513FAB5E98C020380
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/90081a89-e843-331c-9cf8-0fd9094c066e.roa
Signing time: Mon 03 Feb 2025 02:00:39 +0000
ROA not before: Mon 03 Feb 2025 02:00:39 +0000
ROA not after: Sun 04 May 2025 01:00:39 +0000
asID: 6167
IP address blocks: 174.219.128.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c1:50:e3:75:13:fa:b5:e9:8c:02:03:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 3 02:00:39 2025 GMT
Not After : May 4 01:00:39 2025 GMT
Subject: CN=16352602-852b-4095-b890-52c76c37c8e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e9:35:48:9a:dc:8b:d8:0e:00:20:7a:c0:4d:
c3:03:87:39:21:7c:a7:d3:ee:c7:87:c3:b4:36:25:
4b:99:00:d2:91:a9:0d:fb:7d:6d:fd:31:55:37:91:
fa:e2:a4:1a:0e:95:3b:7e:4a:d8:25:02:11:8f:35:
87:01:e5:5c:d2:b6:76:a8:b4:94:c4:fd:d6:9b:4b:
5a:1f:6d:ed:fe:61:c4:7b:98:84:ea:26:22:a9:eb:
5c:1d:c2:76:7b:6b:c5:51:bf:2f:5f:b1:61:5d:a2:
d2:94:4b:91:c8:0d:55:f9:35:4f:3f:fc:d8:4d:5c:
60:ed:19:f3:df:4a:3f:8f:66:f7:10:c6:17:d9:d8:
2f:3e:43:a6:b4:20:18:25:55:78:8e:99:49:2c:df:
55:ff:9b:4c:68:b7:5a:62:7e:58:ec:d4:c1:ab:c4:
5d:1a:14:cd:83:54:f6:ff:fd:15:8e:97:19:c8:09:
2f:ac:5a:86:f4:80:a4:96:68:6d:19:76:2e:86:77:
3b:3c:2e:d0:ae:c3:fb:d6:4d:de:2e:b9:f6:0a:2c:
4e:be:42:c0:f2:9f:6f:61:af:64:cb:3e:19:c7:bf:
4f:6c:d8:2a:2c:8e:85:49:c8:1d:3b:99:38:da:db:
ca:95:f6:32:1f:c6:80:98:c4:63:c7:e7:e8:26:c1:
cd:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:2B:13:0B:05:3C:B7:B0:3A:D9:18:53:76:B5:E5:37:C3:FD:2C:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/90081a89-e843-331c-9cf8-0fd9094c066e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.219.128.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:1a:5c:37:ef:23:90:9c:70:57:a3:5c:e9:62:9a:09:8b:f6:
79:6c:6b:0a:dd:cf:e1:22:41:5f:ed:4e:95:e6:5b:79:67:fb:
cd:b8:8b:cf:05:4c:d5:c4:3a:2d:e3:04:6b:c4:e2:ec:0e:9b:
d3:39:b5:ab:d8:ea:de:6d:27:68:7d:f3:60:d0:01:2c:b8:15:
e6:07:d5:5e:c9:ff:96:21:35:f3:e3:c3:de:40:42:24:de:89:
f8:3c:61:77:a6:82:34:3d:a4:67:54:c7:80:7c:c6:eb:38:01:
e9:ed:b0:6f:6b:fb:72:61:07:37:de:e7:de:45:e0:6d:51:44:
89:7c:95:61:65:19:ad:e4:d2:93:b9:a1:8d:95:c2:00:df:f3:
37:1c:85:a2:b0:b6:b6:5d:07:ad:d4:01:84:14:ee:47:8b:1a:
55:e0:72:8f:cf:91:59:7c:d9:3f:5e:7a:91:9b:68:66:db:a9:
e7:05:48:b2:bb:4c:64:78:1b:ee:ad:00:c2:9d:c4:0a:ae:d9:
27:76:6e:90:35:83:c0:a0:eb:b0:e7:3a:a0:0a:49:ec:38:a7:
fc:69:01:a1:e0:d7:63:45:2f:9b:0f:59:a1:f9:68:b2:38:b5:
1d:76:c7:b3:4f:fb:bf:69:c6:12:6b:c1:38:2e:23:55:92:90:
a2:4a:2f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 12:22:02 2025 by rpki-client