Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/08229bef-beb6-325b-ac26-b43a85249640.roa
File: 08229bef-beb6-325b-ac26-b43a85249640.roa (raw, json)
Hash identifier: qko0TGsidrDMxR8eqAV+gMVIRX/XnY1jH9wy8iLkLfA=
Subject key identifier: 33:2E:42:A7:F6:FF:EF:EF:D0:0C:FC:A8:A4:DA:CA:9D:12:B3:92:42
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848B26568EF6650BEC5EB93A580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/08229bef-beb6-325b-ac26-b43a85249640.roa
Signing time: Tue 28 Jan 2025 17:45:06 +0000
ROA not before: Tue 28 Jan 2025 17:45:06 +0000
ROA not after: Mon 28 Apr 2025 16:45:06 +0000
asID: 33491
IP address blocks: 98.222.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 17 Mar 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b2:65:68:ef:66:50:be:c5:eb:93:a5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 28 17:45:06 2025 GMT
Not After : Apr 28 16:45:06 2025 GMT
Subject: CN=63d40f55-7bda-483c-a0c2-79a337a10d0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:59:21:ef:29:93:1f:d7:6f:3c:dc:b9:8d:67:
40:51:73:af:b3:53:64:ff:ab:b8:2c:01:c1:30:d1:
a7:58:87:88:17:53:60:ea:d1:f5:a0:e3:a4:68:94:
42:2f:b8:1d:0c:d7:db:a1:52:2b:bd:8e:5f:fe:6f:
d5:04:17:3e:70:3e:30:4a:ae:bb:3c:13:0e:cf:fb:
1f:67:c6:be:aa:d0:67:00:b8:62:86:14:87:98:0a:
cb:10:97:2b:07:32:67:8d:34:10:57:3c:de:c2:e1:
7d:82:78:63:02:12:a6:55:8c:b9:9c:4c:6b:1e:92:
04:f5:ca:cb:d8:c6:75:da:df:e2:dc:0a:9d:e5:14:
fc:1e:53:fa:28:ac:95:dc:33:55:d4:1f:ef:69:f4:
f7:81:3d:e5:3f:99:6f:15:2d:e9:75:65:3f:03:96:
6d:20:55:6d:ef:29:67:3b:9d:ff:20:42:21:21:19:
73:fc:ea:6f:f6:c2:04:b5:85:b0:a9:e3:7e:a9:4b:
df:83:9e:c6:8d:dd:af:b7:79:69:a4:36:df:ee:3a:
87:bc:0a:31:c3:fe:45:0c:a3:5e:47:f3:6f:cd:28:
fc:03:71:7a:05:2d:13:5c:03:76:9b:18:33:14:a2:
70:dc:00:64:b2:49:33:67:fa:e9:bc:dc:97:25:c9:
c9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:2E:42:A7:F6:FF:EF:EF:D0:0C:FC:A8:A4:DA:CA:9D:12:B3:92:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/08229bef-beb6-325b-ac26-b43a85249640.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.222.119.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:23:27:02:bd:fe:05:4b:41:e7:44:4d:74:00:1f:a5:3c:af:
9f:5f:98:f1:54:f8:c6:a6:e9:16:fd:85:7f:a0:3c:84:d2:4d:
51:cc:6f:1f:59:e5:8d:f7:8a:76:59:c8:c6:18:cb:9e:c4:18:
44:45:c6:c0:ec:b9:11:30:74:c8:d0:17:77:e9:10:54:88:d3:
d1:b5:a2:d5:a1:0e:87:11:f1:33:39:23:14:7e:d7:66:41:51:
bb:4c:bf:8c:96:b8:0f:de:0f:d8:b7:32:06:d0:3e:60:3d:fa:
88:0b:ee:49:bc:e1:cf:0c:07:f3:ac:78:b8:37:29:cc:86:a5:
45:02:3c:47:1f:1d:c6:7a:63:be:5f:18:b2:c5:5c:fb:6b:be:
72:e8:15:d1:21:91:27:39:69:a1:2f:4c:22:e2:7a:73:80:5e:
85:70:a3:83:c2:7d:51:7f:71:30:95:39:5a:56:9e:df:76:69:
27:a0:76:da:dc:8a:66:22:1a:c1:0b:6f:e8:ac:06:fb:92:3f:
85:66:f3:76:96:7b:33:05:bd:9e:65:1c:85:dc:2d:8c:f4:f5:
4a:f1:11:40:3f:fd:31:83:b3:1b:e7:9f:74:fd:4d:6f:47:c6:
94:72:e8:6d:18:09:6e:2a:16:e1:60:49:6b:6d:b9:ed:c9:57:
90:63:63:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 15 00:20:28 2025 by rpki-client