Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c6dfa41-4e44-3e4c-b65c-2b9b91ca0ae4.roa
File: 1c6dfa41-4e44-3e4c-b65c-2b9b91ca0ae4.roa (raw, json)
Hash identifier: bZ+a67Wphu7p7dIwLpa/G4O3hFrTiGYnQIT3GOq2U9Q=
Subject key identifier: 25:28:E5:21:A9:40:0E:BC:C2:73:41:39:BA:54:AF:8B:F5:E6:78:46
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F7AEB41E1BD9E5D4282580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c6dfa41-4e44-3e4c-b65c-2b9b91ca0ae4.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33668
IP address blocks: 73.144.136.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f7:ae:b4:1e:1b:d9:e5:d4:28:25:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=2b4aa8de-cee5-4ba9-b91d-cfb8947bb361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:02:dd:eb:e5:a4:a4:cd:9f:1b:34:51:96:b4:
88:dd:78:09:a6:53:1b:37:12:7a:4d:e9:f5:7e:bb:
3b:f7:85:bb:c4:f2:1a:57:2d:d2:17:a5:40:2d:4f:
de:43:fd:08:a1:16:14:2c:fd:1a:b3:f1:7c:82:18:
14:62:7c:e1:6d:89:e9:99:8a:e7:c5:8c:7b:49:7a:
05:d3:e3:f5:7f:d8:d6:fe:22:56:32:b8:09:ef:68:
e8:2d:28:bc:0c:38:65:ce:b1:bd:08:1d:67:9a:7c:
e5:b9:31:55:9f:91:ec:ab:62:d7:b3:f2:44:30:58:
3e:ea:a1:55:00:32:f9:9c:6a:80:1d:8b:78:6c:2f:
1a:5b:40:ad:74:c8:4c:97:cf:5e:b7:dd:98:94:09:
6b:5e:4c:ed:d6:13:bd:8a:ea:12:fd:e0:33:6e:ab:
95:5a:9d:14:b5:54:de:7b:9e:e9:3e:e5:7d:40:9e:
4e:20:72:f2:4a:4a:a8:15:08:a1:f0:08:f4:28:e3:
78:a4:3f:ca:09:42:6d:12:c4:cf:d7:c7:68:d5:47:
d8:c4:24:08:c8:8c:76:74:52:86:ca:55:67:05:8b:
59:4e:a8:c4:9d:3a:9c:57:28:b8:c5:78:b3:f2:95:
25:98:2d:55:15:c7:7b:9d:cf:65:fa:e7:3b:2d:99:
10:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:28:E5:21:A9:40:0E:BC:C2:73:41:39:BA:54:AF:8B:F5:E6:78:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c6dfa41-4e44-3e4c-b65c-2b9b91ca0ae4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.144.136.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b5:b6:99:8f:52:e1:18:f9:e8:d0:86:f9:eb:a2:09:64:ed:45:
aa:35:40:21:38:34:17:a7:51:bb:2a:3f:4a:d6:dd:ea:94:98:
c7:0d:51:5e:a5:e5:cc:b4:6d:7d:57:28:75:79:45:5d:ba:22:
00:1c:6a:99:b0:cf:e4:ef:d7:58:b7:f1:da:89:eb:62:dc:91:
b3:88:37:de:d2:8c:1b:27:cd:fe:1a:e5:aa:b3:5d:ee:a8:8e:
96:94:22:b4:6a:a4:29:34:a4:27:ad:11:64:28:c5:1c:63:7a:
44:4c:43:34:26:54:37:fb:85:d4:71:c8:11:72:65:5d:75:ac:
e5:d7:af:c7:c8:b3:eb:56:e7:63:13:60:84:65:90:8a:9f:6f:
54:e5:ca:bb:4a:93:ce:b4:02:75:f5:ad:07:b7:0b:b7:bc:6e:
78:19:ff:e2:69:e2:61:35:58:db:2e:19:13:99:93:69:27:50:
38:ac:48:51:b4:db:1b:93:eb:56:e8:c9:b9:d7:eb:9f:c8:c5:
23:68:97:1f:cf:d6:e2:9a:77:a1:04:6c:a3:95:ec:0b:71:f4:
ed:d8:19:3e:a3:86:42:69:e8:c9:30:e2:5f:73:c1:ed:77:ab:
b4:9f:ee:98:e4:04:52:4a:c5:d5:ce:f0:39:da:72:c1:2a:93:
36:2f:ee:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 06:52:10 2025 by rpki-client