Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b1e56662-c883-3748-a106-12a983c015ff.roa
File: b1e56662-c883-3748-a106-12a983c015ff.roa (raw, json)
Hash identifier: 59tZt35EpL1f+OhwbaZUbIz1Cb2Euc/QWbTv/Pb+XUk=
Subject key identifier: 12:3E:29:6D:38:28:77:65:D3:D6:3D:BB:1E:E4:D0:B2:CE:98:33:48
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848C150DD8848945E36F0540440
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b1e56662-c883-3748-a106-12a983c015ff.roa
Signing time: Mon 03 Feb 2025 02:00:39 +0000
ROA not before: Mon 03 Feb 2025 02:00:39 +0000
ROA not after: Sun 04 May 2025 01:00:39 +0000
asID: 6167
IP address blocks: 174.214.48.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c1:50:dd:88:48:94:5e:36:f0:54:04:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 3 02:00:39 2025 GMT
Not After : May 4 01:00:39 2025 GMT
Subject: CN=f0ec7e5d-9283-4a29-8fd4-f8eee830ec68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:02:4b:36:89:ab:08:c8:95:9c:38:03:2e:d7:
a6:7f:23:e8:75:22:d6:76:2b:39:48:4f:cb:94:be:
fc:6d:26:49:c8:e9:7f:61:29:51:12:59:e6:d1:8e:
63:a4:39:e4:98:6e:8b:11:67:86:1a:0d:d8:66:49:
a3:be:db:a5:ce:44:79:90:7e:4a:1e:8e:a6:cd:15:
bf:d5:5c:eb:c0:2c:67:18:86:2f:a5:91:6f:17:58:
80:04:fe:96:79:46:05:ce:fb:dc:f9:7d:dd:68:9b:
22:6b:61:72:9a:68:f9:1c:01:9e:aa:c4:4a:2e:ae:
ea:12:1a:05:fd:99:1c:2f:ea:98:64:55:8d:b5:da:
bf:04:5c:bb:f1:58:92:53:13:e7:08:2c:b2:81:bd:
30:45:3b:73:72:11:19:6c:1b:18:5a:f8:6f:8f:c8:
24:c9:55:39:8a:1e:a4:e4:4a:3b:74:10:73:18:ff:
3e:a5:62:8d:b4:75:8b:9b:97:07:28:94:0c:50:4c:
45:26:76:76:26:1b:7c:6d:3b:e6:ce:ce:a6:8c:b5:
cb:f4:42:e2:b1:92:ba:ff:59:b8:f4:41:52:46:55:
99:6d:0a:58:90:08:fe:6a:51:75:8b:74:89:1e:f0:
d5:2f:78:3c:61:43:b6:52:c5:87:83:c9:79:c1:02:
26:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:3E:29:6D:38:28:77:65:D3:D6:3D:BB:1E:E4:D0:B2:CE:98:33:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b1e56662-c883-3748-a106-12a983c015ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.214.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:30:eb:a9:63:af:a4:44:c3:24:7c:d7:52:9d:70:e3:6a:9f:
7e:60:86:22:7f:cf:df:8a:77:c9:ae:54:eb:e9:dd:44:1b:a1:
18:89:df:dc:9e:a8:2b:ed:2d:94:20:f0:59:6a:a9:d5:25:bc:
1a:80:52:df:8c:39:5a:05:df:63:13:d9:47:7f:67:e4:20:29:
ae:18:fc:a6:36:83:0d:94:5f:8f:35:63:e5:f2:ac:69:73:76:
18:2f:a9:e6:3d:b7:6f:32:c1:c7:70:24:25:ce:26:84:c7:c9:
8f:a9:71:32:ae:c6:c1:42:50:76:c9:5a:90:35:1a:a5:3c:92:
b6:35:a7:5b:63:f1:1e:0a:a3:08:30:5f:62:b5:21:59:05:e4:
31:50:bf:97:c8:e3:74:ae:c3:01:e8:dc:f4:44:eb:7e:06:8f:
41:1e:e1:96:5f:9d:2e:a6:b3:a8:2f:1a:5c:53:37:82:55:67:
23:99:5f:38:12:60:f4:e2:05:3e:a0:03:a7:21:84:05:57:a0:
31:5e:fe:c2:56:ca:54:02:05:1f:c4:7e:5b:e9:d3:e1:36:3d:
89:a4:20:3f:61:0a:d7:c2:4f:e3:c7:2d:8b:dd:da:0c:6f:ff:
69:03:2b:d9:37:25:13:72:82:7d:ee:f2:f5:12:c4:4f:a8:b0:
cc:ad:14:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 20:51:04 2025 by rpki-client