Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/73997e5b-2e23-31b1-beef-916fd8ac9bfb.roa
File: 73997e5b-2e23-31b1-beef-916fd8ac9bfb.roa (raw, json)
Hash identifier: tRhBQyFRmh9+K1V7eTO0LSqBHVL765DNxR7dSp7UabY=
Subject key identifier: EF:B2:59:D3:DB:83:84:E4:A3:DA:73:02:3E:1E:54:EE:7A:6E:81:B9
Certificate issuer: /CN=b02b2a27-63d2-435f-8114-d98e289edc6c
Certificate serial: 010D0C9F432858490881652DD9483A2828710D00
Authority key identifier: 68:FD:10:A9:76:FA:09:AC:44:0A:CF:EB:95:4C:B2:32:BF:35:91:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/73997e5b-2e23-31b1-beef-916fd8ac9bfb.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 36230
IP address blocks: 208.71.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b02b2a27-63d2-435f-8114-d98e289edc6c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b02b2a27-63d2-435f-8114-d98e289edc6c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:65:2d:d9:48:3a:28:28:71:0d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b02b2a27-63d2-435f-8114-d98e289edc6c
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=12dd9d13-d7aa-4d1c-ac10-8a48b0d903de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4a:b5:d5:89:6d:ec:3a:58:97:f0:e7:22:74:
d6:92:e3:00:2f:9b:67:01:4e:0f:08:8e:48:d6:a4:
02:51:f3:e0:20:c3:6e:97:2e:6a:37:7d:48:df:00:
32:dd:73:06:1d:87:33:d9:49:2d:0e:19:3f:29:23:
f4:da:13:79:d6:ef:7a:d4:59:13:9c:d8:d3:61:f0:
c2:50:d8:28:27:90:ae:82:23:ef:9f:76:94:d7:64:
2e:d5:32:4f:68:bf:48:5b:e4:e1:1f:22:84:0e:ce:
07:e1:47:28:0d:53:03:d0:a1:84:8a:45:27:5c:a5:
4e:15:99:93:e6:66:17:ee:78:12:5d:ce:48:80:cb:
13:61:87:94:66:75:f8:9e:2f:e2:e1:c5:1e:46:8e:
7d:a0:fe:8c:30:a9:06:bf:87:b6:00:b6:10:dc:48:
d7:d7:aa:50:9f:ea:e9:e9:57:50:66:5d:42:8a:81:
1c:c2:f3:ed:5e:8e:2a:71:ae:b4:bc:c7:7b:cf:09:
b5:ff:e8:43:a7:d3:26:ce:02:c2:fb:5b:ef:c3:87:
f7:cd:9a:c3:56:ce:71:f1:ad:0a:7f:94:65:0c:e9:
d5:db:98:90:70:73:c6:fa:c6:09:ca:88:bb:9c:2b:
86:3e:0e:89:1f:e3:e8:7b:de:38:03:ac:48:a5:bf:
5b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B2:59:D3:DB:83:84:E4:A3:DA:73:02:3E:1E:54:EE:7A:6E:81:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/73997e5b-2e23-31b1-beef-916fd8ac9bfb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b02b2a27-63d2-435f-8114-d98e289edc6c.crl
X509v3 Authority Key Identifier:
keyid:68:FD:10:A9:76:FA:09:AC:44:0A:CF:EB:95:4C:B2:32:BF:35:91:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer
sbgp-ipAddrBlock: critical
IPv4:
208.71.209.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:ef:19:43:1d:0a:56:37:19:e6:78:cc:2c:27:29:6c:fd:d7:
4c:02:5f:dc:0c:59:67:fb:f2:b8:a2:2b:20:f3:81:a1:6f:4b:
21:f7:07:e9:96:c9:0e:db:a4:2f:2e:6e:ad:a4:03:bc:88:93:
b8:a0:c6:74:72:78:5d:e0:38:c6:d4:94:d0:40:bd:11:15:a4:
87:fe:a0:6a:d2:22:b2:65:83:04:47:3a:02:8b:37:12:b6:66:
32:9d:4e:5c:1d:21:55:c1:3b:a3:19:db:dc:49:8e:8d:8c:f0:
ca:0d:f6:93:4d:11:d2:70:52:c2:95:c8:31:95:14:f0:da:e8:
f4:11:c0:6d:b9:90:0a:e2:4f:0e:ab:4a:09:a0:f8:57:b4:33:
9c:f2:69:93:40:ff:fd:46:af:f0:d7:af:ce:3c:c2:2b:de:4f:
8f:fa:20:a7:33:3d:47:eb:e3:15:c2:4d:8f:04:b2:97:25:9e:
2f:9c:2a:93:12:ff:fb:c1:e6:9e:d8:fb:55:dc:90:31:bf:4b:
42:11:2c:cc:2f:dd:68:e4:40:0d:22:ef:2d:48:bb:6e:c3:2b:
55:9f:1f:66:7b:ac:db:19:cc:74:0b:82:1a:47:c0:71:5c:ae:
7f:bf:dd:c2:ed:f6:e6:e5:14:85:92:6b:cb:1e:67:bf:7a:08:
c9:37:60:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:29:46 2025 by rpki-client