Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a8a6ac0a-090b-3051-9e0c-3c15b89ead18.roa
File: a8a6ac0a-090b-3051-9e0c-3c15b89ead18.roa (raw, json)
Hash identifier: GUU+RBN0Uqn8FErZQ2by8hT+Rw8d1XqQwXrNbAGMino=
Subject key identifier: D3:FA:D8:DE:F5:18:27:7D:23:5B:EC:9D:A7:A7:8B:27:AC:CE:7E:F0
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848C150ED53CCD4BBFDBEAD7460
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a8a6ac0a-090b-3051-9e0c-3c15b89ead18.roa
Signing time: Mon 03 Feb 2025 02:00:39 +0000
ROA not before: Mon 03 Feb 2025 02:00:39 +0000
ROA not after: Sun 04 May 2025 01:00:39 +0000
asID: 6167
IP address blocks: 174.224.184.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c1:50:ed:53:cc:d4:bb:fd:be:ad:74:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 3 02:00:39 2025 GMT
Not After : May 4 01:00:39 2025 GMT
Subject: CN=df71eac1-9ea9-406f-9180-858dbbb93a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:72:75:88:85:4d:41:05:b9:e6:2f:d0:a5:3f:
36:2b:8e:2c:82:4d:43:68:16:57:70:d6:2a:81:8e:
0f:e7:21:19:c5:28:84:9e:db:58:42:d5:31:30:38:
71:e9:53:0c:af:1e:b7:53:b2:b4:6c:43:25:75:9d:
e6:66:95:99:6e:d5:f4:ec:6b:cf:08:9e:88:e2:aa:
d0:f3:b4:1c:9f:ad:fc:85:1c:f3:4d:e7:d0:46:e9:
c8:6d:93:ed:20:83:07:d0:0e:91:8a:d5:75:65:9c:
d5:fb:ed:67:22:9c:60:28:dd:f3:0d:79:7a:ac:6c:
44:62:6c:41:4a:1e:ca:33:9d:f2:09:7c:40:c3:27:
f4:ee:0d:a0:78:f3:02:73:de:da:8a:41:8d:b0:bd:
14:bd:e1:4b:92:03:ce:8e:dc:2b:6d:06:04:86:e9:
9f:bc:fd:74:ae:e1:9b:ca:2f:9b:f4:77:b6:3f:4b:
f6:a3:52:59:50:eb:41:b0:c2:87:08:f0:1f:21:8a:
32:59:95:25:31:3a:3d:4b:6c:0f:18:0e:65:10:54:
28:a1:eb:ca:cc:0c:0d:ed:3d:4a:e0:71:70:25:d0:
a8:3c:f7:21:e9:9f:43:cb:06:a7:0a:2c:dc:d6:c5:
46:25:90:f1:63:bd:b4:21:18:e1:c0:4b:e2:3f:b7:
82:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:FA:D8:DE:F5:18:27:7D:23:5B:EC:9D:A7:A7:8B:27:AC:CE:7E:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a8a6ac0a-090b-3051-9e0c-3c15b89ead18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.224.184.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:76:94:ea:2a:59:cf:c9:7c:85:d6:3c:6e:17:93:8d:0e:7c:
7b:92:f2:78:9a:ea:b1:b6:61:5d:e0:9b:5e:31:b9:b6:f3:b6:
a2:2e:7c:92:9d:e1:61:2b:56:55:3a:a5:a0:7a:f2:83:9d:bd:
aa:0d:91:3b:f4:49:db:c3:77:98:ce:05:9d:5e:a4:85:82:c8:
9c:b4:7f:16:fc:c1:6f:dc:d2:34:1a:9b:72:eb:41:ad:a0:9d:
92:25:db:75:7d:bd:0e:7b:a0:10:ae:2c:40:39:ff:b4:f6:1c:
66:a0:62:64:aa:62:6f:18:3e:62:f2:b6:6d:c1:69:5b:fb:96:
84:75:41:70:52:87:a0:e9:53:aa:c5:d0:89:c7:42:89:ef:cd:
7d:52:56:4b:a5:ec:dc:65:71:88:71:71:a3:8a:8f:95:a5:2c:
e7:e5:8d:b5:b5:62:03:43:68:7e:ab:63:57:d6:a0:6d:2d:1a:
8b:88:92:97:33:07:28:58:c2:14:f9:1b:11:a0:a4:90:ed:d9:
91:61:1e:54:52:a8:67:9e:56:50:45:ff:36:66:68:48:f5:f4:
ff:d5:89:54:b0:31:91:59:73:3d:d4:61:0b:50:b5:81:57:c2:
ce:f1:20:fc:5c:d8:99:6f:04:a5:a6:8d:e1:ea:7c:c7:a9:e6:
0e:95:52:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:04:15 2025 by rpki-client