Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d8fb982a-1c07-32dc-bc30-bf26804ba396.roa
File: d8fb982a-1c07-32dc-bc30-bf26804ba396.roa (raw, json)
Hash identifier: s1+HZwed7d9FvGoh1laP4g5fNlzlwlJ85773mLfpcxA=
Subject key identifier: 56:AD:AE:9D:6D:3F:D0:96:B0:B8:AD:7F:D9:3D:86:A5:79:47:AB:E8
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584902EC31DF1209A262FD056900
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d8fb982a-1c07-32dc-bc30-bf26804ba396.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 701
IP address blocks: 204.51.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:31:df:12:09:a2:62:fd:05:69:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=ab31139d-9804-4b27-81d4-283c79f8dcad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4c:a9:d3:82:20:00:05:a6:18:b1:c9:0b:a0:
ab:e5:4d:7e:fa:78:5a:16:3f:fc:7c:38:5a:1d:c4:
19:b8:cc:17:41:d8:40:aa:b5:6d:1d:87:11:b1:c4:
46:90:37:91:f1:b3:bd:08:53:e3:f5:1d:19:a3:2b:
44:31:d8:55:a7:27:bc:76:cd:c1:9a:f2:da:44:e5:
79:bf:42:35:c7:de:90:ea:19:b7:4a:41:da:1b:0e:
cd:51:54:da:c2:b6:7d:48:d2:8c:08:d0:1b:66:a2:
7e:db:e6:d3:3f:c2:85:6c:89:11:d3:28:55:7d:00:
85:15:75:97:4b:e7:5c:9d:01:44:09:e4:3d:7f:a4:
8c:18:f8:0e:33:2c:a4:a3:64:02:0e:67:f0:25:30:
bc:28:26:20:65:03:2a:99:df:35:e5:79:e2:d5:81:
85:5a:ff:14:8e:5c:15:ac:55:8a:a4:10:44:2b:45:
e1:af:8a:83:59:63:79:a7:04:94:71:b0:95:0b:05:
46:58:0d:78:f5:07:c2:7b:22:54:d6:2b:ca:97:6a:
17:33:e6:01:05:0b:e9:f6:b9:b6:36:27:17:47:80:
af:cb:30:d4:30:68:35:24:f4:3c:e6:1f:f5:fc:77:
64:15:be:37:c3:a1:b5:e1:7f:07:e4:ac:4f:e6:fa:
b5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:AD:AE:9D:6D:3F:D0:96:B0:B8:AD:7F:D9:3D:86:A5:79:47:AB:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d8fb982a-1c07-32dc-bc30-bf26804ba396.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
204.51.70.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:49:fc:40:f8:53:b4:bd:68:30:3f:e3:b6:11:21:98:1f:d9:
15:d9:f1:03:4b:bb:03:b7:2a:ab:5c:69:ea:3b:d1:cd:1a:f2:
5d:12:53:e3:b2:e2:33:7f:3e:cb:ba:45:a8:3f:d3:92:d2:39:
dc:73:49:37:5b:54:ab:f5:89:74:56:6c:1d:1a:83:bf:8c:cc:
03:1e:82:fa:35:5b:3f:77:ce:e3:2a:06:40:2f:27:fd:6a:1e:
f3:b2:a4:71:ce:7e:ef:36:df:a9:e2:a2:ee:d8:e1:61:54:81:
90:e5:24:74:ee:c3:b7:49:49:af:bf:83:8a:0f:fd:7a:66:67:
14:32:68:b9:ac:ab:1c:27:fa:fd:48:f0:6d:f2:3b:ac:bb:90:
a1:b4:9d:61:9a:20:de:58:73:f7:24:3b:b3:61:0b:99:67:3b:
c4:0e:8f:cb:d6:a9:04:e3:09:b5:f6:69:0c:72:6f:9b:1c:80:
b4:4e:ec:39:a3:c7:6d:9e:84:b3:12:42:15:37:72:30:07:a7:
32:1e:7e:74:30:86:70:f4:22:05:08:f5:83:5c:22:31:29:60:
e7:81:62:80:83:0d:b3:50:11:53:25:d9:bc:47:90:f5:6e:1b:
4f:b1:f4:11:7d:6b:c3:69:59:5b:1a:03:39:2b:76:ff:85:3d:
f2:75:5d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 04:07:36 2025 by rpki-client