Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1fbbcbaf-0caf-33be-b2e0-3d8505665780.roa
File: 1fbbcbaf-0caf-33be-b2e0-3d8505665780.roa (raw, json)
Hash identifier: H0UHqjTUqEPA66joV2mjJuo0MqfLYL8X9XC2Nmw7eOE=
Subject key identifier: CF:59:94:B3:17:64:AA:0B:E2:A5:60:A8:9B:E1:46:03:3B:66:DD:53
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F8D74FAFD6907AEB3EB300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1fbbcbaf-0caf-33be-b2e0-3d8505665780.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33668
IP address blocks: 67.167.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f8:d7:4f:af:d6:90:7a:eb:3e:b3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=ff68a6b2-f63a-4e40-b023-6613d95d3a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9c:66:7e:4d:06:8a:60:f4:9d:76:88:71:c1:
59:e6:f6:49:72:b4:9e:39:af:37:d6:e4:14:69:74:
85:ba:e2:92:3e:8d:cb:ad:99:72:be:38:48:7f:7a:
f4:9d:21:f5:b7:2f:33:2c:af:5b:f0:6f:75:2e:53:
09:28:b6:9f:d5:80:37:84:cd:0d:09:4f:ff:23:53:
df:4d:24:3b:f5:00:68:a8:e6:59:ab:e5:2e:37:8a:
e5:6e:98:5e:ac:f1:43:2e:8b:75:dd:61:6b:75:3c:
df:02:77:92:f3:f0:2f:83:be:81:c8:44:40:d0:3f:
6a:8b:94:ad:69:da:bb:97:a9:a0:fc:52:6e:b5:24:
1a:85:6c:d3:87:10:ae:4a:02:d8:ec:11:1a:10:bb:
a2:c8:cb:24:75:49:d9:3a:26:8a:df:8e:8a:8b:86:
cb:e3:6b:9e:7d:1b:52:0d:ad:c9:c9:0b:34:2a:0c:
f6:74:ab:9c:52:37:36:00:b8:54:59:ee:06:d8:86:
4d:b0:d6:6a:c9:89:72:2c:ca:99:f6:40:05:25:c7:
ab:70:d1:b0:75:0e:70:fc:29:a9:0c:5e:7f:ad:65:
3c:3f:35:c6:82:31:0c:bc:88:16:9b:f0:5e:2c:4c:
42:eb:e0:43:e4:69:b9:1f:f5:9f:df:10:d9:c7:f7:
76:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:59:94:B3:17:64:AA:0B:E2:A5:60:A8:9B:E1:46:03:3B:66:DD:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1fbbcbaf-0caf-33be-b2e0-3d8505665780.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
67.167.178.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c4:34:39:69:34:cc:b2:d8:c4:c2:de:9a:5a:b0:5d:a9:9a:6d:
61:9c:7c:71:bb:f1:7e:9c:ec:40:60:81:9f:c5:c8:8f:06:12:
4b:e6:41:d3:28:1f:a8:e7:27:62:f0:9e:87:f0:de:ab:2b:45:
51:28:8d:70:f9:cf:cf:2f:e8:de:5d:f4:7e:11:97:b3:c0:62:
8a:3c:4a:eb:13:05:05:98:df:05:6f:a7:d0:53:a0:04:3c:6e:
b6:88:88:63:31:ef:18:99:2b:0f:80:eb:8e:49:01:7a:fd:c9:
76:b4:7f:8a:b6:39:64:e7:c7:32:9a:e3:39:7a:23:70:2e:2a:
89:e6:30:35:f4:eb:b1:c1:16:fc:6a:84:5d:d9:d3:25:9d:b3:
66:b0:5f:59:8b:ad:9d:08:57:fa:84:1e:4e:08:0f:bf:b7:b6:
fd:d9:c4:00:d4:f3:d3:d6:0d:4e:d2:52:88:5a:ef:ef:ae:f9:
39:4c:bd:48:80:8d:a6:d2:1e:bd:e7:26:60:e4:e3:78:a7:9f:
99:e0:04:1b:bf:d5:68:47:65:bd:bf:a2:c9:a7:0d:8c:eb:65:
8f:8b:26:c9:a8:ab:5a:39:ee:cc:7b:df:ac:15:52:22:3a:18:
bd:7e:f6:5a:4e:30:bd:00:9b:c8:78:6b:eb:9a:88:75:1e:8f:
e2:51:a3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 00:19:43 2025 by rpki-client