Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eff5f3cc-d054-3ac1-a62e-481bf8f9d7b3.roa
File: eff5f3cc-d054-3ac1-a62e-481bf8f9d7b3.roa (raw, json)
Hash identifier: fuSEMBgzajNEJjWY89FmdrasGVgVyCLkXtcEIXZyVDw=
Subject key identifier: 2A:F4:5C:BF:14:5E:BD:9B:04:68:63:B9:8A:09:5F:92:E5:67:BE:29
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858491246F658362EEFCC3A1E70A0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eff5f3cc-d054-3ac1-a62e-481bf8f9d7b3.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 701
IP address blocks: 70.21.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:f6:58:36:2e:ef:cc:3a:1e:70:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=ba958d29-3b6c-4c6e-95ba-25ed26f80581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f8:12:6f:e3:bd:77:e4:14:de:e6:66:46:5b:
e4:74:47:38:fe:a2:ca:aa:ad:5c:34:71:34:34:d5:
88:30:58:5f:cb:2a:88:9d:52:9e:a4:04:3b:70:38:
98:6e:bb:99:42:07:36:61:95:51:5a:ca:f2:1e:64:
6b:e6:35:2b:3c:26:57:30:a3:02:ad:35:b0:9b:ee:
1d:bd:05:5b:5a:8e:e9:5a:f5:32:1c:b4:97:1c:d9:
2a:a1:3c:b0:6d:17:89:62:94:78:30:75:1b:7f:2b:
42:28:81:3d:67:e8:a7:77:2b:5c:e8:41:d2:c6:80:
e7:9e:9b:7d:10:9e:59:04:9b:47:bb:32:c5:4f:d3:
7c:45:3f:7e:c1:05:49:de:8e:4b:9c:cb:cf:ff:ea:
3a:f5:c6:53:2a:58:ae:b3:24:59:8a:41:1e:59:8d:
3a:8b:11:ff:63:7a:89:17:fc:86:23:10:b5:03:5e:
7a:7f:b0:a5:8f:1a:65:d2:87:ac:70:8d:c6:5b:6a:
09:e6:40:3c:52:85:40:14:c5:83:ff:6a:50:6c:91:
7a:3a:1f:8c:f6:fd:d5:b9:82:a1:dc:e1:29:b3:a1:
59:d2:9e:09:f5:ad:8d:63:74:e2:b7:cf:80:6c:f4:
b1:fc:ad:71:3c:e6:a5:c8:d8:e9:73:4b:2c:da:69:
8a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F4:5C:BF:14:5E:BD:9B:04:68:63:B9:8A:09:5F:92:E5:67:BE:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eff5f3cc-d054-3ac1-a62e-481bf8f9d7b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
70.21.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:bc:19:e1:d9:88:5f:cf:1b:5f:7b:4c:41:61:06:ec:20:76:
b7:0f:cd:bd:ce:6b:2f:86:fe:8b:17:41:a3:87:43:15:94:21:
f2:70:b3:c4:bd:70:05:36:a9:43:0a:fd:9c:da:24:a2:ff:0e:
5b:77:d5:60:78:cd:e5:58:3f:12:e4:0c:42:96:b3:fd:2d:ab:
37:49:43:5e:eb:8e:a1:8f:a3:97:1e:0d:06:19:c2:10:a9:da:
7b:93:01:71:a4:58:f4:67:ba:19:c6:56:e5:26:48:0c:06:c1:
3f:b0:f2:e2:ae:df:9f:15:9b:75:39:d1:2d:7f:a2:32:b9:55:
a6:4c:21:39:d2:57:d3:ce:a0:15:dd:42:d6:d0:58:1f:d2:bc:
37:60:c9:e9:2f:0d:3f:27:73:c0:50:26:a1:23:ca:96:d3:ee:
89:c0:c8:24:d3:d1:dd:bb:c1:20:7b:b4:4e:1d:8e:6d:05:6f:
f3:69:a3:c1:97:4c:ad:fc:bf:4c:86:69:51:7b:2b:46:ce:fc:
47:3b:cb:17:fb:b7:86:45:f9:72:a4:18:8d:d7:0c:7e:b3:5d:
69:60:23:db:b4:63:27:00:40:f7:c0:c9:77:11:04:c7:b8:46:
bd:c3:13:d9:e1:c0:73:cc:0e:48:2e:e7:fb:c9:5e:75:c1:89:
8d:9a:8a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:39:59 2025 by rpki-client