Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0a4f20b5-9964-3f60-91c8-7e4549db394f.roa
File: 0a4f20b5-9964-3f60-91c8-7e4549db394f.roa (raw, json)
Hash identifier: K2t6i6hwCqVY94iMbGs+C8wxZAW1+pcSvpXtoKWib3o=
Subject key identifier: F0:22:DB:32:9A:1E:EC:BB:D8:88:1E:62:A2:BB:60:5B:23:D3:36:4F
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB1F5F2F0A5A1E0CEDFF120
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0a4f20b5-9964-3f60-91c8-7e4549db394f.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33651
IP address blocks: 98.45.144.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b1:f5:f2:f0:a5:a1:e0:ce:df:f1:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=328e34bd-f61c-49b7-8a44-b96ad10f1fa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a3:c2:e6:f8:b9:7d:ad:ff:d6:a3:5c:37:71:
8e:37:75:bc:6d:90:23:41:fa:fd:82:e3:e2:0c:bb:
d4:ff:db:15:e3:52:de:cb:5b:be:8f:74:c4:51:e3:
d1:07:1b:37:ef:d7:72:50:7d:40:15:df:5a:0a:44:
20:f6:e4:af:1b:0f:5a:45:ed:f8:61:91:8a:16:95:
0b:27:8a:d3:4a:16:1d:71:9a:8a:9e:99:ad:a4:ba:
15:16:29:25:13:4c:f9:c6:72:3e:16:8b:80:a0:a6:
af:5a:b9:ae:f5:7e:58:29:7a:4e:00:7c:16:e0:1c:
b7:ba:a7:aa:70:3c:36:20:2c:84:08:ad:06:59:f8:
11:2f:99:2a:cb:25:f0:ed:a1:d9:fc:18:18:0c:fd:
3c:7d:f1:88:e9:bd:37:cd:82:c4:1d:83:79:6e:39:
69:70:69:7a:12:8d:eb:1c:00:f7:9b:ca:ca:ac:7d:
71:68:85:ed:50:d8:63:be:97:37:1b:ca:eb:0d:9c:
ef:d6:a1:75:8d:8e:07:83:76:6a:9b:a4:21:95:c8:
6b:22:57:1d:15:00:19:54:c0:17:ca:35:20:4a:37:
95:ec:af:4b:5e:31:bc:fb:b1:2e:02:8d:81:01:97:
cb:1e:37:a1:7b:b8:29:80:8a:f9:f8:31:26:7b:61:
23:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:22:DB:32:9A:1E:EC:BB:D8:88:1E:62:A2:BB:60:5B:23:D3:36:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0a4f20b5-9964-3f60-91c8-7e4549db394f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.45.144.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:66:90:c9:cc:d2:2f:a0:01:b9:63:4f:4e:82:cb:82:1f:1f:
3b:e5:0f:55:97:d0:80:b1:c1:ea:35:9d:76:9f:08:20:a1:66:
14:81:59:09:2d:44:12:81:91:0c:9a:6b:cf:0a:22:f0:46:24:
a6:2c:1c:f7:49:0f:c0:e7:ba:11:7f:6c:74:07:db:39:b9:90:
c8:56:9c:ba:1b:c5:af:67:bc:7e:cb:cb:56:59:8d:cb:b1:82:
3e:c8:1a:14:29:ba:ab:3d:01:c4:d0:f1:da:ef:90:e2:9d:9c:
6d:cd:24:5a:94:81:7b:7a:95:a9:d5:cc:86:5d:22:31:f1:dd:
17:06:92:ee:50:ff:57:a3:9a:34:38:b9:4f:8e:f8:78:55:a2:
85:e2:f9:d6:77:6e:1e:8d:aa:70:01:35:e3:b3:2f:6f:b2:d6:
f3:01:cc:7e:9f:65:77:e3:ad:bb:27:93:88:d9:23:b1:b9:81:
2b:47:a7:82:ab:74:ba:d0:9a:e8:05:b8:91:1b:3e:c0:66:45:
7a:02:d3:0a:e4:7c:cd:33:3b:1e:c4:e5:37:9a:95:ef:e6:53:
b7:b8:61:0c:6b:a9:4e:7a:ab:ea:e6:98:d1:2e:07:28:b2:08:
c5:d4:e6:69:b7:78:c4:42:4c:d9:e1:bb:2c:f8:85:c0:33:d5:
3e:4b:ec:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 11:11:15 2025 by rpki-client