Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8ed14c74-7968-3ed3-bffb-22e89f6d3860.roa
File: 8ed14c74-7968-3ed3-bffb-22e89f6d3860.roa (raw, json)
Hash identifier: GXnY5RBXjgryDqYkK+QZl58w8fJiPjY80k2Nza64Cmo=
Subject key identifier: 53:32:B7:39:47:1E:20:24:23:4D:63:83:5B:DC:14:C4:3A:9C:AD:12
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848E2D19F379A06AA972CAC9EC0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8ed14c74-7968-3ed3-bffb-22e89f6d3860.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 33363
IP address blocks: 16.98.64.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:9f:37:9a:06:aa:97:2c:ac:9e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=0dea5530-f37e-405f-bd36-8c42a59f9aaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ab:d9:57:bc:51:cf:78:7a:05:3b:f0:77:63:
28:02:31:03:ed:be:91:c6:37:7a:dc:16:0a:9a:a7:
a5:a7:94:f2:10:2e:3b:d9:7f:d0:8b:16:a4:e3:49:
92:2d:68:f5:37:13:d5:0d:eb:e4:cf:21:a1:f5:15:
79:6d:2c:0d:b4:5f:61:56:4f:03:df:7c:44:17:d9:
83:9a:a4:43:ae:4b:ba:a5:14:b8:3c:17:96:e2:7e:
fe:fc:d0:c0:0b:d5:0b:26:f7:c2:82:2d:30:6d:ec:
b8:64:dd:66:a8:7b:aa:4a:14:89:2b:c5:2e:ba:1c:
30:cc:02:72:dd:c5:db:e8:aa:14:2a:aa:da:8c:20:
95:8e:85:c1:f7:57:76:d7:be:b6:78:37:cb:60:76:
83:c1:f7:7d:93:f6:2b:bf:91:1a:e4:8f:02:93:4f:
b4:80:2c:da:85:a4:ff:09:99:04:09:ca:39:67:07:
23:5b:dd:fe:a3:b5:3b:58:e4:16:f9:67:7f:bd:6c:
4f:43:68:39:61:71:fd:8f:e9:08:34:20:e5:e5:ba:
30:70:2e:25:f5:21:9a:3c:bb:01:e1:18:dd:0b:6b:
75:61:b2:ea:58:ac:ab:d8:ee:06:5e:4a:ba:53:92:
bd:a1:33:c2:fb:30:a6:c4:37:fe:4b:d1:42:c8:c0:
b3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:32:B7:39:47:1E:20:24:23:4D:63:83:5B:DC:14:C4:3A:9C:AD:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8ed14c74-7968-3ed3-bffb-22e89f6d3860.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
16.98.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:34:d1:79:fe:96:e8:a9:a5:68:fe:3c:5d:5d:4b:12:53:9e:
5c:cc:dc:c2:50:e3:c4:95:c6:8d:39:10:9b:f2:1c:6b:91:82:
f8:5b:87:89:e5:b2:98:da:6d:9a:f1:df:60:50:48:42:b8:fe:
f4:41:8d:83:17:6f:1d:ed:ea:49:16:3f:08:d4:bb:07:ea:f3:
54:c6:77:96:b4:08:36:83:42:cc:bb:d5:f2:6c:91:5c:ee:4f:
02:19:bd:6e:5b:fd:67:6b:ca:23:6b:b4:32:38:e4:5f:fc:76:
5f:bf:a4:cc:36:22:b5:73:80:9a:e7:5b:8a:ca:a7:61:53:c2:
8c:0c:eb:c1:74:4d:39:22:da:7d:e3:a7:10:54:15:b1:5b:84:
60:2e:2b:d5:52:9d:ed:2c:8b:b4:92:d8:88:b0:a6:05:16:15:
50:e1:a6:51:4b:23:ac:99:6d:ae:9c:7f:de:c8:91:d6:d1:98:
86:0a:a1:b0:d5:b8:fd:a8:fc:ce:17:0d:d7:61:f9:54:e6:b2:
40:c9:84:8f:c1:e2:bd:6b:8b:8c:ec:41:fc:74:5f:2e:37:7b:
b6:07:59:35:2f:8c:13:d6:f0:78:5b:98:99:c5:aa:af:5f:e5:
61:44:04:59:85:49:fd:97:8b:51:b8:bf:17:47:35:22:a4:c5:
e6:68:f2:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:08:59 2025 by rpki-client