Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f2bbfacc-bcc3-3669-a7c6-ae7a06600691.roa
File: f2bbfacc-bcc3-3669-a7c6-ae7a06600691.roa (raw, json)
Hash identifier: eElW01TkkQ7+MEsPRzBFjZkUxzGG9ek+wAaM12LMj1g=
Subject key identifier: 77:0C:27:B1:50:80:58:4F:7B:34:7E:1D:4E:0D:81:7D:E0:58:A9:36
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858493ED3DF0451DC7585D9C37500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f2bbfacc-bcc3-3669-a7c6-ae7a06600691.roa
Signing time: Thu 20 Mar 2025 01:00:39 +0000
ROA not before: Thu 20 Mar 2025 01:00:39 +0000
ROA not after: Wed 18 Jun 2025 01:00:39 +0000
asID: 6167
IP address blocks: 72.107.172.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3e:d3:df:04:51:dc:75:85:d9:c3:75:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 20 01:00:39 2025 GMT
Not After : Jun 18 01:00:39 2025 GMT
Subject: CN=795bc8d4-3d3d-4c92-9cd2-be25ec1d68bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1e:eb:7d:b1:9d:bd:d4:64:2e:d0:e1:d9:f3:
08:2c:5c:9c:f6:10:0a:4d:b7:38:95:01:2f:be:ea:
c7:e8:02:64:3c:fe:e1:b6:1b:dc:c7:b0:ab:03:e7:
ac:b3:3d:d7:c3:67:e1:4e:ef:e9:36:14:f6:f0:85:
c5:be:84:4b:10:16:67:c9:91:10:ad:4b:50:f6:cd:
52:22:74:a9:1f:d4:10:f1:9d:53:7a:7b:8f:ab:e2:
af:a6:eb:d3:2b:67:52:e6:c9:4b:9c:cb:bc:a2:fc:
06:47:a0:3b:4c:f1:28:84:74:ff:ba:46:1d:d8:1c:
50:4f:9a:47:56:f4:e9:75:2b:71:44:de:b2:c6:7b:
2a:e4:20:5e:35:80:80:a5:50:9e:0e:48:0b:65:3f:
fd:f9:6a:ce:eb:4e:41:bc:0d:a4:10:30:dc:84:cb:
18:39:22:75:5a:08:09:21:52:9f:51:50:68:9c:dd:
51:44:b5:51:11:cb:5c:20:ee:7b:d2:aa:41:6a:43:
06:1c:42:8f:97:aa:d1:c8:ce:e1:7b:9b:26:35:29:
f8:3d:f4:f4:9c:5a:43:f3:57:21:52:64:88:97:4e:
db:33:0d:4a:fa:82:44:04:2e:93:2c:55:a3:a5:05:
da:1f:47:1d:a9:83:d2:82:00:76:b4:b6:8b:ac:7f:
68:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:0C:27:B1:50:80:58:4F:7B:34:7E:1D:4E:0D:81:7D:E0:58:A9:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f2bbfacc-bcc3-3669-a7c6-ae7a06600691.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.107.172.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:31:85:18:f2:b2:6d:ef:7d:cf:e0:8e:3c:5b:99:4c:00:cd:
3c:4d:a0:da:07:7d:7a:02:37:50:0f:bb:fd:64:3c:03:29:6f:
bf:7b:49:94:7b:36:3e:a0:1f:29:88:c8:f9:92:06:0f:6e:5d:
76:32:98:ac:26:cf:7a:1c:3e:09:58:f3:84:bb:9f:7b:60:12:
ea:b8:7b:63:c4:1a:85:44:93:76:44:bb:4a:0b:ab:ce:48:a1:
fb:33:8c:ef:ad:5c:76:71:93:ee:db:7b:90:6d:b6:48:ac:c8:
03:04:90:71:ce:fe:6a:dd:97:9d:53:46:b5:05:97:a0:98:e1:
67:92:e8:9a:81:35:88:de:76:08:68:ac:27:d8:76:5f:d1:e6:
7b:40:58:22:de:de:02:d0:0d:c4:6f:5d:1d:db:bc:6e:00:2b:
5b:64:ea:63:1a:b1:c4:f5:ba:a6:7e:b7:2e:55:2c:d6:04:8c:
7a:c2:bd:9d:7c:a5:ab:8f:ac:c9:61:63:c0:08:32:0d:e6:c7:
97:b7:61:06:18:35:69:b8:33:e6:1c:25:85:70:2a:57:16:43:
75:01:c9:b7:e8:dc:bb:83:a6:a7:7e:1c:d5:74:ad:31:8a:af:
24:bc:cc:e7:01:a2:c6:91:9d:b9:ac:e6:25:b4:bd:cb:f2:56:
43:36:2a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:46:28 2025 by rpki-client