Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/acf9e451-9687-33be-a884-d0d594ac52f8.roa
File: acf9e451-9687-33be-a884-d0d594ac52f8.roa (raw, json)
Hash identifier: 5BI895yCKNaTuXPmwRCKcOdAaNQeME0DIBTcEP2Sfcc=
Subject key identifier: A5:41:6F:21:6D:5E:F4:F6:7B:0F:97:C3:07:A8:D3:30:22:8B:05:AB
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848B626213D58F8F909DDC7DE80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/acf9e451-9687-33be-a884-d0d594ac52f8.roa
Signing time: Thu 30 Jan 2025 02:00:40 +0000
ROA not before: Thu 30 Jan 2025 02:00:40 +0000
ROA not after: Wed 30 Apr 2025 01:00:40 +0000
asID: 11273
IP address blocks: 63.84.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b6:26:21:3d:58:f8:f9:09:dd:c7:de:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 30 02:00:40 2025 GMT
Not After : Apr 30 01:00:40 2025 GMT
Subject: CN=decb185e-7a3f-4917-8abf-7e7411d266d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5d:8d:25:d3:f9:9f:38:ee:78:c3:a9:a2:99:
f9:37:72:a2:b1:e8:07:4e:b2:5d:cd:99:c2:37:e0:
58:2e:cb:43:c2:95:8a:6c:70:46:fb:3c:f5:56:56:
73:08:a7:58:60:b3:d5:cc:eb:40:3f:c1:4c:29:fa:
6f:11:65:b7:0c:e5:34:1e:ea:3b:ef:c3:02:54:88:
23:61:69:47:3e:4c:5f:72:b8:dc:ef:ae:53:e9:c2:
7a:60:bd:2d:c6:f8:88:c2:ca:4a:32:ac:c5:60:a6:
21:33:6d:3a:de:4f:0c:53:28:5c:9b:21:76:82:fd:
a3:2e:69:7a:42:d5:f4:c7:22:14:86:3a:54:6f:e5:
19:a7:cd:fe:a7:0a:a8:4e:ea:77:49:82:d4:75:50:
93:8f:6e:0a:8a:67:b3:57:56:ac:28:c4:66:89:9b:
d7:0f:4c:9f:4a:77:74:86:4c:e1:58:55:ae:b0:b7:
0b:ed:1b:91:fc:c0:db:bf:d9:52:e1:e4:ae:7e:db:
fd:c9:e4:3b:b4:10:10:7d:67:95:5e:af:e4:e4:82:
c2:6b:d6:af:4b:a9:9b:c5:13:1e:9d:90:70:13:2a:
f0:b3:56:12:18:c2:cd:ef:65:14:bf:e9:fc:8a:95:
ed:99:04:44:49:cc:6a:9a:45:09:61:9e:18:19:9a:
13:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:41:6F:21:6D:5E:F4:F6:7B:0F:97:C3:07:A8:D3:30:22:8B:05:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/acf9e451-9687-33be-a884-d0d594ac52f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
63.84.245.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:86:5c:b8:cb:68:32:22:0a:83:89:30:ad:48:f8:21:8d:56:
23:84:70:05:75:19:3d:1b:43:30:d4:01:b6:58:16:79:4c:72:
74:c6:af:e6:c2:db:24:19:07:e0:39:9c:df:9c:5c:39:3a:37:
c0:6e:2c:62:c7:a5:fe:07:4e:9c:d7:9a:d2:70:75:ee:40:84:
eb:e5:45:b8:07:03:ad:0f:71:9f:3b:61:08:bd:4e:5d:8e:b5:
13:5e:32:2f:ca:f6:d2:39:8a:2b:4f:09:68:53:00:3a:1b:59:
43:2b:7b:2d:21:94:bc:de:59:d4:12:a8:99:3a:0a:63:3d:9d:
0a:a8:92:71:c4:c3:9d:4e:88:c6:95:88:e9:67:57:17:e1:ba:
02:b4:ec:65:ce:96:f9:38:e8:93:d6:dd:a4:24:6b:95:19:b5:
06:b0:39:5b:d6:84:f5:d6:b5:12:fe:47:57:c2:95:40:4d:28:
64:a3:64:39:a9:7f:df:e4:85:27:15:37:a6:57:df:1a:83:ae:
84:6a:ab:07:36:f4:41:b7:8a:04:b1:d5:94:9c:c1:12:26:7e:
9f:92:ab:03:c0:b1:51:a2:3d:66:6d:0f:e7:64:4d:8f:76:67:
03:86:d6:78:7f:2e:9f:8a:4b:c4:4d:6b:81:38:f8:ca:3d:34:
b8:d0:54:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 13:05:49 2025 by rpki-client