Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/1608e66a-6ff2-3b65-9a8a-d370f1dd6135.roa
File: 1608e66a-6ff2-3b65-9a8a-d370f1dd6135.roa (raw, json)
Hash identifier: 6jepH5KYzC7l2p4+U0kPVz9EZ9+cjtnavZqNQH2VeqM=
Subject key identifier: 34:96:28:96:C2:5E:BC:A9:2E:22:37:EF:D1:54:F8:02:20:0F:C6:15
Certificate issuer: /CN=036d6da4-f590-4da8-a22f-55511da98ee5
Certificate serial: 010D0C9F43285848E59BBCD6C85C78F9B5F0E880
Authority key identifier: 69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/1608e66a-6ff2-3b65-9a8a-d370f1dd6135.roa
Signing time: Sun 16 Feb 2025 02:00:40 +0000
ROA not before: Sun 16 Feb 2025 02:00:40 +0000
ROA not after: Sat 17 May 2025 01:00:40 +0000
asID: 16509
IP address blocks: 52.128.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e5:9b:bc:d6:c8:5c:78:f9:b5:f0:e8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=036d6da4-f590-4da8-a22f-55511da98ee5
Validity
Not Before: Feb 16 02:00:40 2025 GMT
Not After : May 17 01:00:40 2025 GMT
Subject: CN=5572b096-01de-4d15-bbd6-362f28a289f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:27:6e:a4:0c:9b:02:ec:70:ae:95:12:b7:df:
c0:ca:29:a3:f7:07:c5:94:cf:cb:1d:4a:2c:a5:de:
02:fa:e4:b5:b7:90:8b:78:7d:f0:40:3b:dd:f4:52:
5d:3a:b7:61:67:62:4e:d4:f1:fb:f6:43:3e:c4:bc:
54:4a:46:e2:97:73:cb:30:ba:cd:79:aa:97:c2:4a:
f4:0f:61:5e:ee:47:46:83:af:d9:fa:7f:7f:fc:b4:
10:37:37:6e:7a:27:12:c2:d3:03:b5:87:16:70:76:
54:c6:de:3b:13:84:6e:25:ba:29:95:f6:d0:d4:c7:
75:7b:c9:58:81:91:ab:5d:e5:9e:d5:fd:60:0f:0d:
55:fd:14:63:17:a6:f2:c4:6d:00:19:a0:ce:7a:2e:
41:c2:c8:24:cd:f9:c3:11:3a:19:6b:73:c2:4d:0a:
2b:1f:4a:6f:59:3d:df:b7:69:27:32:ae:ad:ab:93:
79:e0:47:81:47:21:72:1e:8a:f9:01:e8:e3:9a:31:
24:4b:5c:88:9b:98:99:63:a9:f7:7b:88:25:0a:3f:
1a:42:fc:c7:11:2f:53:56:cf:69:bc:65:c0:fa:05:
a7:2f:56:4c:ba:ca:d6:76:41:54:2b:87:c2:25:f3:
cd:27:41:37:5b:98:31:a4:8f:74:4c:36:1e:fc:45:
38:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:96:28:96:C2:5E:BC:A9:2E:22:37:EF:D1:54:F8:02:20:0F:C6:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/1608e66a-6ff2-3b65-9a8a-d370f1dd6135.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl
X509v3 Authority Key Identifier:
keyid:69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer
sbgp-ipAddrBlock: critical
IPv4:
52.128.41.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:75:74:81:c4:4c:dd:1a:5e:c5:81:1c:f4:ff:61:ac:b3:eb:
0e:26:50:48:8d:fc:b0:a8:cb:79:45:e9:2e:12:ec:ba:7f:74:
b2:44:94:2e:94:73:07:75:c6:b5:5a:5d:b5:c2:29:ce:8f:6c:
69:97:66:42:b3:53:ce:b0:07:77:9e:85:88:5a:6d:3a:db:be:
bf:b8:39:06:d6:17:9a:d4:64:cc:33:d3:4b:fe:3f:7b:21:fb:
f0:03:9b:db:f3:6d:e8:0e:3d:dc:be:91:81:2f:f6:95:86:5f:
06:d8:a3:0b:28:09:b4:d7:b5:61:e2:f7:d6:86:d9:d6:8f:73:
94:2e:fd:07:e2:6b:45:8b:57:d5:74:45:4e:d6:b8:da:96:1e:
fe:47:99:42:8b:b9:e2:07:0f:1f:a0:42:61:58:e5:30:d9:f4:
c1:60:1d:68:de:7d:1f:25:1b:02:95:c7:cd:a5:d0:3f:73:fc:
35:4a:87:ad:70:30:8b:f2:75:90:ee:be:66:90:92:5e:b1:e7:
a0:e0:94:19:35:74:ce:e6:73:57:52:7e:1b:59:d2:30:43:fe:
ce:3d:e8:3a:31:f3:74:f5:9a:4b:48:6f:0f:a1:94:18:29:1b:
9c:a6:fd:0b:6d:8d:df:d2:9b:f4:27:05:01:92:e4:fa:81:ea:
10:39:03:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:26:34 2025 by rpki-client