Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a27dbbea-587c-3b9c-a61f-2c859363a69d.roa
File: a27dbbea-587c-3b9c-a61f-2c859363a69d.roa (raw, json)
Hash identifier: qgqawZKtBfpj7R5KRNFCFwvAmY8L/1IWhXw02uA6t6Q=
Subject key identifier: 2D:EB:30:22:1E:F9:33:A9:66:B8:A5:55:27:FA:40:AA:9A:53:B8:82
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848C150ECBDAD8BF6AF81920280
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a27dbbea-587c-3b9c-a61f-2c859363a69d.roa
Signing time: Mon 03 Feb 2025 02:00:39 +0000
ROA not before: Mon 03 Feb 2025 02:00:39 +0000
ROA not after: Sun 04 May 2025 01:00:39 +0000
asID: 6167
IP address blocks: 174.224.88.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 09 Apr 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c1:50:ec:bd:ad:8b:f6:af:81:92:02:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 3 02:00:39 2025 GMT
Not After : May 4 01:00:39 2025 GMT
Subject: CN=058fcf99-6edf-4c86-9724-92644636d22e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3b:dd:6d:eb:f1:08:0e:bc:bb:d1:5b:88:f3:
35:3c:6a:1d:53:b6:2b:69:20:a7:7c:cc:f0:a3:7c:
f5:a1:db:67:95:bc:8c:55:49:d7:63:ee:cb:d2:c8:
f3:f2:b9:5f:4b:07:20:90:3c:39:3b:da:f8:42:ae:
20:5b:c1:08:87:f2:af:83:22:a7:e5:1e:50:c7:b8:
ee:31:ad:32:f0:a9:89:e3:5a:9e:11:40:5d:a0:b5:
16:5c:8c:ad:b5:49:e9:63:98:e8:1e:f5:5b:1e:4c:
fd:63:90:dd:39:15:e5:9c:cc:8e:4c:7a:c2:67:77:
0a:22:bd:cf:54:57:da:2e:01:a5:f6:f9:dc:1a:20:
cb:3f:7a:10:ad:3d:d8:70:3a:5d:bc:80:97:c7:70:
31:3f:19:ac:8f:af:f3:35:5e:ab:99:c2:ad:dc:05:
f5:a9:70:67:8b:67:50:27:99:62:02:3a:f5:ce:e7:
d0:49:55:98:bf:d0:73:06:cc:d2:fa:8d:84:83:91:
1a:a7:2e:99:d3:b2:a9:4f:e1:1e:50:d5:a5:11:cb:
57:27:c7:3c:b3:24:ab:2b:32:db:8f:95:ee:11:27:
84:9a:ae:56:7f:17:a0:94:e3:1f:a1:3e:59:ae:de:
9a:20:ac:04:07:14:e1:fd:f5:c7:22:df:ed:ad:c9:
62:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:EB:30:22:1E:F9:33:A9:66:B8:A5:55:27:FA:40:AA:9A:53:B8:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a27dbbea-587c-3b9c-a61f-2c859363a69d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.224.88.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:d4:d2:1f:c2:87:cf:4a:8f:ad:73:d2:55:de:1d:a4:89:b5:
49:2a:cb:36:84:a7:15:41:bb:32:25:4e:fb:2b:e6:c0:f9:ae:
40:d8:9e:95:92:f7:11:19:a7:de:de:1c:53:10:d7:25:36:1d:
18:c0:3f:4f:4b:22:47:bd:2b:e7:03:aa:2a:4b:4e:fd:a8:4f:
e6:e8:ca:3d:ac:2d:f3:f4:2c:9e:91:29:50:1c:f2:9d:ae:8a:
7a:07:01:b0:61:bd:3b:e5:f0:81:21:1d:f4:82:f9:c5:52:ae:
2e:30:4c:13:8a:4b:ea:fa:83:c5:97:ef:85:39:40:46:ed:32:
16:22:e5:0e:de:d1:65:a6:ac:12:4b:f5:0f:6a:04:3a:6e:63:
00:5f:05:9d:e7:6b:a6:76:51:97:fe:cc:4c:9c:ec:69:2e:0f:
02:74:5c:b5:7c:6a:cd:89:e0:fc:fd:c6:2f:2c:92:d9:13:f0:
65:5d:b9:7c:c0:2d:c4:1d:1a:f4:46:0b:1d:91:b3:71:31:ac:
68:fc:f0:32:60:05:31:d2:a3:71:de:5f:f6:b9:db:23:54:fc:
6e:e7:fd:fc:98:55:a2:fe:f4:dd:9d:5c:3a:1d:1e:c6:8a:f6:
37:6e:65:fd:03:85:64:48:83:d8:49:88:a0:38:9f:51:bc:a3:
78:98:24:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:28:32 2025 by rpki-client