Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/23123658-6763-3034-bf29-405617e7505d.roa
File: 23123658-6763-3034-bf29-405617e7505d.roa (raw, json)
Hash identifier: sXz32NnvWBqoYFy+uPDyVm8BjiqmN4D97Orih9kLO4o=
Subject key identifier: 6B:73:7E:4B:96:F7:14:08:58:3A:9D:E5:0F:E1:C4:60:D0:11:53:80
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F82942C5F23CCBF2972700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/23123658-6763-3034-bf29-405617e7505d.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33490
IP address blocks: 71.236.176.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f8:29:42:c5:f2:3c:cb:f2:97:27:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=e01a2585-bf22-41ca-ab5e-37ad3324f294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:de:e0:2e:89:9e:72:5b:d5:0f:2a:59:d6:13:
06:26:ad:87:e0:dd:17:4e:a7:89:12:50:b3:cf:14:
2a:4c:68:80:75:52:4e:2e:90:aa:9c:12:20:ec:1a:
d7:58:c4:5e:60:c3:61:6c:64:2e:c2:0c:af:a5:d2:
28:a1:53:c2:4d:31:a3:cb:47:41:22:31:96:bb:a8:
af:c7:78:63:9f:11:8a:4e:bd:12:5a:6a:d1:1d:fd:
99:ce:69:c0:4d:fe:a3:bb:02:4f:61:3a:51:f4:bf:
58:1d:cb:f4:97:5c:14:3e:6a:16:3d:c3:24:fc:7a:
74:66:72:e2:78:c0:52:27:34:e3:de:c5:38:c9:90:
48:a5:67:66:f8:3e:30:18:66:e1:db:08:3e:63:43:
b6:5d:4e:ae:60:86:56:26:db:a5:14:f5:ca:dc:c6:
6d:41:66:c0:9c:8a:fa:ea:fe:70:bb:57:4d:ed:73:
db:a4:86:ac:b0:f5:d5:7d:43:99:57:94:5f:95:66:
69:f6:cb:3a:18:2a:67:7e:8e:73:3b:99:a1:14:8d:
3a:a0:ce:5c:9c:83:6a:f6:de:87:8f:9e:36:a6:70:
07:5c:fb:5b:16:1d:39:16:0a:c3:6c:13:19:b6:6d:
65:eb:cb:bb:f7:2b:ce:42:d9:c1:80:8e:12:d5:f1:
97:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:73:7E:4B:96:F7:14:08:58:3A:9D:E5:0F:E1:C4:60:D0:11:53:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/23123658-6763-3034-bf29-405617e7505d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.236.176.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d0:04:54:e6:2e:bb:5d:e2:7e:64:9a:c0:3b:e2:82:75:33:00:
0f:30:a8:e2:db:15:13:32:f7:26:58:ac:8e:cc:c1:12:88:40:
56:6f:d7:3e:50:88:7b:b7:98:e9:38:60:9d:2f:fe:d4:6c:38:
66:1c:7d:b9:d8:c4:b1:db:4b:0a:10:0d:05:9d:92:fb:5a:83:
8e:11:31:41:74:25:31:72:47:ae:f3:d7:93:f2:0d:ce:07:62:
ab:bd:c7:41:3d:2f:26:e3:67:16:a9:1c:cc:f6:00:7b:a5:85:
73:1d:b7:d6:81:c4:6e:6a:10:ec:03:c6:b5:68:ff:97:00:22:
dc:38:77:06:f0:47:00:0b:df:18:a2:31:56:e1:10:a6:67:4d:
40:45:2f:49:26:77:92:ec:f9:c3:47:b7:df:e3:01:8f:80:4d:
90:3c:59:2e:6b:56:e6:5f:c7:a7:67:c1:1a:6a:ed:91:de:df:
5a:c7:49:aa:77:90:9d:08:e8:12:fe:c0:d5:c0:61:8d:35:08:
99:41:29:37:b8:82:db:97:a3:ee:7b:80:66:80:91:f0:09:3d:
13:1b:0b:27:3e:fb:bb:4e:f7:ed:5b:b6:e5:d1:c2:46:58:36:
fa:72:97:a4:0a:35:65:f3:94:ce:76:4d:fb:26:2e:3e:c2:66:
6a:58:54:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 15:24:39 2025 by rpki-client