Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e9127117-4973-3fd4-bf09-509ad1481762.roa
File: e9127117-4973-3fd4-bf09-509ad1481762.roa (raw, json)
Hash identifier: T59oSCm4V2zoP97LsEbDXMA/57wbkmwFlIXEtnumnM4=
Subject key identifier: 05:D7:5E:CF:74:76:98:18:A2:FC:79:81:64:6E:3F:27:F5:47:AF:36
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848C150ECAD62D632A092C80CC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e9127117-4973-3fd4-bf09-509ad1481762.roa
Signing time: Mon 03 Feb 2025 02:00:39 +0000
ROA not before: Mon 03 Feb 2025 02:00:39 +0000
ROA not after: Sun 04 May 2025 01:00:39 +0000
asID: 6167
IP address blocks: 174.224.80.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c1:50:ec:ad:62:d6:32:a0:92:c8:0c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 3 02:00:39 2025 GMT
Not After : May 4 01:00:39 2025 GMT
Subject: CN=45b56822-d333-4cbb-b047-d438c15f59bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:5d:d9:39:9d:05:5d:3d:27:ee:20:97:e4:43:
95:d8:17:9c:20:14:ca:34:b8:19:e1:3a:d7:02:c0:
02:f8:8c:ce:e6:02:b9:7e:67:48:93:b2:a6:49:77:
8b:bc:62:6c:6d:2f:1c:73:05:e1:4c:ea:d9:8b:19:
4c:1a:65:f6:64:c8:0b:6a:2d:49:a5:d6:21:9b:91:
7d:54:cf:ef:b3:9f:e9:8c:81:e6:f0:ff:83:80:2d:
28:43:c6:48:cb:5b:84:37:d2:bd:fd:35:0e:39:35:
9d:38:3a:fb:ac:87:c8:cd:b0:75:bf:6e:fc:41:62:
b7:ff:3a:2d:3f:7d:93:3d:01:1f:5d:40:fc:8c:ac:
e0:66:c3:6e:1d:99:1f:25:80:14:64:35:98:c9:89:
44:90:11:fd:9d:e3:84:34:5f:1f:0e:cf:49:f2:69:
15:db:fc:48:b5:97:9d:05:e0:e9:2c:3d:c5:3c:3b:
64:55:ee:a9:97:b5:17:63:70:23:aa:82:b5:7d:1e:
64:16:40:d7:26:ba:2a:fc:c6:6d:cf:c9:47:c1:29:
0c:be:ec:5e:f2:90:59:21:09:68:7f:f3:b3:2c:45:
b1:70:75:02:07:0a:10:18:59:89:58:0e:50:c9:2a:
9a:ed:5e:03:58:50:9f:e9:3c:f3:7d:b4:a7:90:9f:
b6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D7:5E:CF:74:76:98:18:A2:FC:79:81:64:6E:3F:27:F5:47:AF:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e9127117-4973-3fd4-bf09-509ad1481762.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.224.80.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:04:30:0f:34:3c:95:4b:cd:4f:15:00:bf:80:43:b2:89:a9:
4b:7e:8f:00:cb:53:81:17:7d:92:47:60:e6:cb:f0:0a:de:25:
6d:16:50:93:b7:c5:dc:59:c2:f7:1a:2c:41:7d:25:c6:10:82:
54:56:fa:33:ad:58:da:a8:da:bd:ac:bc:b2:99:18:2a:89:b0:
55:09:eb:6d:cd:c6:0b:51:a1:7e:04:b8:81:73:21:75:e6:5b:
45:e9:f6:77:3e:a8:7d:aa:f9:c6:20:c0:4a:8d:2f:84:09:75:
91:87:06:b6:39:cd:16:7f:71:b4:80:27:bb:50:f7:4d:a6:66:
23:31:7d:0f:40:80:37:1d:53:01:ea:b9:dc:1c:19:8a:cf:30:
c3:81:f3:73:2b:67:a3:1f:40:aa:33:bf:2e:d4:96:3c:ec:7c:
c8:b7:95:16:55:c8:04:17:c1:bd:00:58:41:42:91:e5:62:af:
2d:56:69:18:f4:a3:cd:da:fa:c1:2c:19:60:cf:12:b3:6c:7a:
b1:da:6a:8e:95:b4:b0:a0:d4:fd:d8:81:b4:af:98:ca:78:49:
1b:1a:2c:0d:04:14:fd:9c:11:51:df:46:8c:43:39:44:31:c7:
d4:3f:28:3f:3a:de:b9:e5:90:4b:65:7d:84:41:2c:8d:b6:94:
c2:76:b1:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 16:42:35 2025 by rpki-client