Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/237b35e0-e763-37c2-bfc3-3ad6e2355485.roa
File: 237b35e0-e763-37c2-bfc3-3ad6e2355485.roa (raw, json)
Hash identifier: oUAqIjxd/XnqNYMom0kTWVkplLG912AMafqw1ZaF+KQ=
Subject key identifier: 07:65:76:2C:66:13:AC:05:5F:7D:7A:EB:49:5E:67:60:25:39:03:2D
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F7D10A4D8362A29F0C1F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/237b35e0-e763-37c2-bfc3-3ad6e2355485.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33668
IP address blocks: 98.243.50.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f7:d1:0a:4d:83:62:a2:9f:0c:1f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=5658022d-d717-4ef8-b45a-65fda7adf0fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:db:01:9b:9e:8b:b9:a6:40:8f:87:9a:53:73:
e9:39:e6:c7:c0:97:c0:80:d5:ec:b9:09:b4:fc:7f:
c6:f7:ed:dd:90:50:57:c0:90:b7:55:ec:0d:85:93:
13:6f:9f:eb:16:44:e4:38:f5:44:76:09:ff:21:f8:
b3:c7:20:1d:53:65:eb:a3:2b:c0:3c:f8:1d:86:47:
59:1a:c2:6d:e9:25:93:1f:48:32:25:9d:53:c1:d3:
08:4f:04:f2:82:e9:80:27:d6:d8:c5:9f:50:7c:f4:
44:22:be:a5:cd:e9:c7:a5:d0:da:5b:7d:79:ff:73:
61:dc:6c:2f:09:bc:0c:1a:b2:0f:07:d1:63:e1:46:
d3:10:ff:16:eb:ef:64:0b:df:46:e5:68:a4:5c:21:
67:4b:85:64:fb:e5:76:40:1d:c5:7c:21:20:4a:10:
39:e2:1f:a8:8b:41:e5:6f:31:e4:0a:6b:00:73:c9:
c3:e9:3f:08:f3:6d:54:71:a7:b3:18:e1:3e:39:09:
7e:ea:13:7f:8c:a4:65:7c:ae:d1:34:ef:9a:ef:78:
27:4b:bf:79:aa:4a:3c:64:20:74:bc:5f:d1:ea:4b:
79:d9:cb:b2:e7:ae:27:9b:aa:0b:ff:d7:a4:08:66:
47:7a:09:81:14:c7:86:05:7b:66:f9:79:95:32:df:
2b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:65:76:2C:66:13:AC:05:5F:7D:7A:EB:49:5E:67:60:25:39:03:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/237b35e0-e763-37c2-bfc3-3ad6e2355485.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.243.50.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:8a:e2:bd:ed:d9:e1:97:f6:63:90:ee:08:36:80:80:e1:4d:
3c:19:3e:a4:39:52:eb:2e:2f:e4:84:eb:fb:c1:a6:8a:6f:e1:
50:f4:64:f0:f2:a8:1f:17:1e:ea:0e:71:60:28:3e:09:ed:b4:
80:c6:a3:28:f7:58:0c:82:3e:07:ca:6b:09:4d:f0:de:9d:3d:
bf:24:3c:ee:57:64:9b:b6:67:ec:d3:7b:56:45:f3:14:2b:96:
ea:95:3c:69:f0:db:19:c9:cc:6f:dc:c3:32:03:4e:47:10:82:
67:70:9d:45:f7:13:5c:4a:ad:0f:7a:72:2d:5a:50:94:36:51:
3b:ac:60:29:12:90:03:e9:36:39:10:04:98:73:8f:dc:85:5d:
bd:6e:85:2e:8e:66:e8:81:ee:f9:c4:99:e8:a9:5e:10:47:2a:
f0:84:19:38:dd:c1:86:ea:e2:58:4f:9a:b5:f9:b4:ad:2c:b9:
7a:af:81:04:ef:b7:db:bf:2a:21:55:91:fa:16:2f:ff:b2:aa:
14:06:3b:21:c6:4f:81:4e:cd:c6:ff:76:5d:6c:6c:ea:84:41:
55:d3:30:f3:7b:82:dd:dc:61:da:6c:48:5c:0f:f8:6c:91:55:
02:32:03:e9:3d:aa:a8:65:8f:f9:23:9c:9d:d6:73:97:d7:8a:
cd:e7:1c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 17:05:36 2025 by rpki-client