Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e150b470-1521-35c3-a72e-d41a37e9a2d7.roa
File: e150b470-1521-35c3-a72e-d41a37e9a2d7.roa (raw, json)
Hash identifier: z6AAT4v+EId2MH8t2IImjDINW/19SKDsZ/hMAZHYxiE=
Subject key identifier: E1:F8:41:19:1B:AE:6C:A5:33:DE:C2:ED:1E:A0:27:30:B1:2C:39:50
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858491246FC472D95869DB89B0A40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e150b470-1521-35c3-a72e-d41a37e9a2d7.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 701
IP address blocks: 100.35.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:fc:47:2d:95:86:9d:b8:9b:0a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=ac27c0fb-27ac-42d0-aad0-ee23940db516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6f:23:7f:19:de:50:49:76:7f:b9:9d:24:6a:
3d:81:df:87:be:86:a6:ec:42:b1:a5:92:cc:b3:f0:
14:a7:a2:e4:8f:b3:54:84:13:22:47:fe:f7:9d:b4:
d3:f8:06:7e:d2:62:ab:01:c5:84:68:30:52:aa:13:
6c:89:29:d8:ce:37:a1:7d:bc:a2:41:4e:c4:ad:f5:
1f:28:76:7d:79:e5:d9:38:f9:5e:dc:68:71:3f:d1:
62:51:2c:29:82:00:42:11:ca:2f:b5:3d:a7:92:41:
44:a4:91:99:ff:69:70:a0:09:ce:6a:df:eb:7f:69:
34:b9:dc:bf:48:d4:49:10:db:55:da:d2:4c:a3:50:
da:b6:f1:97:22:22:d2:33:f0:46:83:fb:5f:c6:35:
c8:f5:2a:4a:8e:07:0d:fe:8f:c4:c7:8a:90:c0:20:
e3:a9:66:db:07:3d:87:c2:12:04:10:9f:76:12:c4:
a5:69:4f:11:1f:f9:c6:d3:a3:04:44:2c:54:6f:53:
b9:9c:75:34:42:93:52:fa:a1:1d:29:34:80:24:0a:
b3:02:e8:57:bf:1f:a0:6f:08:8d:a6:46:19:a6:e9:
32:07:3a:c9:9c:d5:e0:1c:88:9c:66:52:fa:2c:2c:
ae:82:7d:64:e7:ec:75:a8:b2:a3:f5:c3:47:56:47:
97:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F8:41:19:1B:AE:6C:A5:33:DE:C2:ED:1E:A0:27:30:B1:2C:39:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e150b470-1521-35c3-a72e-d41a37e9a2d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
100.35.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:07:5e:7b:75:18:5b:22:0f:03:76:37:12:c1:b4:83:a4:dd:
81:17:9f:4d:f9:88:58:6b:fb:06:a0:e8:f7:fa:3d:b1:8a:3a:
d1:43:c2:56:89:56:de:4f:92:89:50:e1:ab:27:8a:04:ed:ed:
2c:66:28:3b:ce:78:5c:20:a3:e4:84:b2:ca:22:6e:b6:a8:60:
f3:c0:98:2f:cd:28:6d:ca:0d:ad:68:b7:f9:53:87:24:ad:d9:
10:93:22:7a:96:99:1f:4f:1b:71:92:27:51:ca:fc:a3:10:6a:
85:e8:ca:93:93:54:6a:8c:40:f5:8a:34:2a:9d:61:90:07:fb:
5b:6a:d1:29:15:b6:8e:3d:02:70:11:79:af:7b:c1:c5:8d:05:
1f:3b:18:94:9d:22:06:61:73:7f:39:8f:0c:0f:11:87:cf:a5:
bb:b5:4c:0d:b5:86:f9:67:ab:8a:bd:55:a4:0b:2e:f7:b4:c8:
14:39:14:cc:68:95:29:c1:9c:5d:54:cc:bd:e4:a9:bf:34:ff:
02:75:a7:4d:24:66:f7:fc:fd:72:d1:be:c6:7d:33:31:a6:7e:
65:29:f4:e6:2b:ed:50:6f:98:61:2b:d1:4b:be:f2:4a:8b:10:
66:9a:ba:ab:e6:49:5b:12:f8:8d:f3:9e:a3:30:3f:fe:42:13:
5e:0c:ca:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:50:04 2025 by rpki-client