Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a805a121-7c4b-33f9-a5e6-0548145e9a7d.roa
File: a805a121-7c4b-33f9-a5e6-0548145e9a7d.roa (raw, json)
Hash identifier: tdYS/2LQWsfUmI7R7ydF9O5uaOTguUOYY4x6nKs4P2s=
Subject key identifier: 0B:0F:BA:0E:F6:E3:50:34:C4:CC:F7:7D:21:6C:DB:96:2B:E9:79:25
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858490B4C2A296B57045B66C844C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a805a121-7c4b-33f9-a5e6-0548145e9a7d.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 701
IP address blocks: 72.75.128.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:2a:29:6b:57:04:5b:66:c8:44:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=5ddd1f50-d342-49ef-9fdd-1a51da316c22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:2d:43:85:bb:b1:72:0b:60:e6:e9:27:9c:8f:
bf:4b:ac:da:44:63:c3:59:d7:c2:a8:e0:17:08:35:
42:7b:b8:b6:59:b9:a0:1a:10:ab:64:c1:8e:40:39:
83:f5:26:6d:84:28:09:97:84:f2:bc:a1:6e:b6:32:
19:7d:b7:15:4a:76:68:d5:c2:00:a4:ae:04:ef:e3:
c4:82:3d:8b:48:e9:28:6e:8b:86:c0:4c:b8:9f:2e:
37:c5:06:5c:e2:f2:d8:21:0f:d4:a1:ee:ac:9a:06:
14:2d:59:d1:0d:3b:b4:a3:49:76:73:2c:b8:b5:3d:
61:46:1d:e3:f2:5a:58:a6:eb:b8:bb:ef:ef:eb:b1:
4a:fd:8b:43:13:7f:fd:c7:bc:7e:d6:e9:10:6c:05:
9a:ab:c4:bc:a5:3a:df:ab:c9:cb:4c:f5:ef:ee:44:
cf:28:b9:dd:60:8b:be:6d:b7:ce:8e:8e:47:6d:ec:
8c:54:5a:e4:9b:2d:1f:c8:b5:04:4b:cb:e9:33:63:
f7:0f:53:c1:70:8f:7f:c7:9e:66:9d:18:3c:30:68:
a9:d7:55:50:90:6c:21:86:29:65:9c:e7:ea:4a:79:
4f:52:d6:44:a6:d1:44:03:f6:0c:9c:74:55:b2:88:
28:10:a1:bc:e5:73:0f:75:9f:8f:a3:3a:e2:c8:49:
f6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:0F:BA:0E:F6:E3:50:34:C4:CC:F7:7D:21:6C:DB:96:2B:E9:79:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a805a121-7c4b-33f9-a5e6-0548145e9a7d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.75.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:e7:30:30:db:33:ed:66:6e:d2:1e:91:8e:e4:5a:bb:fe:5f:
83:8d:43:28:16:52:a5:25:a5:71:f0:cc:c0:4f:89:ce:de:bf:
46:18:2f:10:96:30:60:5c:81:ef:c7:bb:d2:56:2e:13:0e:f0:
be:51:66:19:f6:ff:23:06:4b:a0:98:ef:8b:26:62:8a:d8:fc:
cb:bb:6b:5a:19:e8:a8:5a:18:84:cd:a3:44:2f:8c:36:bc:70:
95:8c:6e:d6:20:43:14:3d:93:66:1f:9b:75:35:ba:22:c9:ee:
11:19:47:30:17:14:f0:8a:70:38:99:4e:06:07:54:c5:71:48:
10:48:71:b8:40:7b:2b:56:2d:8c:58:f8:3c:12:df:c2:37:55:
27:37:00:ba:c4:fd:1d:97:52:81:63:0b:93:f8:da:26:1a:f0:
3b:39:19:05:e2:c9:a7:02:95:3f:12:e4:c8:5b:80:2d:35:bb:
c5:13:da:c7:d9:c4:ac:c5:a0:fe:9b:70:b0:10:8a:aa:0e:93:
0b:ad:63:b1:78:08:71:06:b0:5b:2d:39:b1:84:a5:4a:38:7b:
ce:11:c6:5b:9d:bb:cf:bc:2f:3d:40:26:a1:ad:57:7a:36:24:
aa:d8:46:45:5d:f8:7a:d4:22:7b:a8:fe:9a:1a:1f:9c:d8:d1:
fa:7b:83:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 02:14:06 2025 by rpki-client