Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a4caed9-74ba-3385-b8b2-5265261df681.roa
File: 2a4caed9-74ba-3385-b8b2-5265261df681.roa (raw, json)
Hash identifier: r0KhBClb1EPA5d4mO6OItjzpgWZh7XL4aFXmC2y2OI0=
Subject key identifier: 6F:BC:9B:A6:A4:71:3D:38:3A:55:08:DC:A1:07:21:C6:34:AF:3E:29
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858497DA5ECE870F519EC06284580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a4caed9-74ba-3385-b8b2-5265261df681.roa
Signing time: Fri 11 Apr 2025 13:01:00 +0000
ROA not before: Fri 11 Apr 2025 13:01:00 +0000
ROA not after: Thu 10 Jul 2025 13:01:00 +0000
asID: 22909
IP address blocks: 173.162.16.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:7d:a5:ec:e8:70:f5:19:ec:06:28:45:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Apr 11 13:01:00 2025 GMT
Not After : Jul 10 13:01:00 2025 GMT
Subject: CN=075b7f92-dfbd-4755-872b-0f3ad8f548ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:cd:dd:7c:3a:3b:a0:e4:18:aa:7b:33:b2:bc:
bc:9e:42:0e:d3:b2:74:40:6c:62:af:7b:c5:72:71:
77:aa:e3:e5:b8:f0:91:f8:d2:b6:61:7e:88:33:ca:
39:89:32:69:ee:13:c2:2d:73:40:21:b3:57:95:1e:
70:e0:e5:3a:e0:e0:2e:80:ce:38:47:77:b9:6b:45:
32:26:e8:15:ef:40:c1:ce:c3:7e:3a:3f:e7:52:29:
88:05:09:85:57:64:6d:79:e1:2e:d2:0f:3b:03:5c:
bd:69:95:bb:af:46:0c:9c:4b:a5:c1:18:c7:5d:7e:
49:1b:ac:4c:92:25:f7:0d:78:c3:26:4f:5f:b1:82:
aa:f3:c2:f7:13:37:00:a4:a4:c6:45:2b:9b:89:c8:
79:00:43:a1:fa:30:e9:79:65:54:5a:63:d4:3f:ac:
44:83:a9:cd:fa:e9:70:27:05:16:eb:f0:43:39:50:
47:ea:fe:84:47:88:38:33:e3:59:cf:60:b4:87:11:
57:99:55:a6:4e:17:a4:8c:33:6c:f5:c7:ae:bc:ac:
3e:0f:f1:c9:1c:1d:93:ec:86:2c:44:72:5b:1b:58:
a2:16:05:88:71:fa:33:3e:6d:7a:29:1a:5c:50:54:
b7:82:4d:35:dc:39:ec:47:4b:43:e0:06:46:a1:22:
02:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:BC:9B:A6:A4:71:3D:38:3A:55:08:DC:A1:07:21:C6:34:AF:3E:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a4caed9-74ba-3385-b8b2-5265261df681.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
173.162.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:3d:f9:da:30:32:67:f2:71:e9:99:ea:8a:a7:29:09:c7:8b:
f5:aa:70:e0:d1:7a:7b:f3:ff:87:15:65:aa:d6:82:ba:c1:19:
fd:84:18:51:53:14:a1:22:a7:5f:21:62:d9:b7:ae:a5:6c:5d:
89:16:e2:e9:47:53:be:5f:74:e8:d5:4c:17:5a:40:37:f8:1a:
28:e8:56:be:e8:8a:83:19:07:d0:97:00:1a:05:45:1c:af:cd:
90:3f:4d:cf:da:53:75:35:42:04:c8:b0:30:19:9d:74:64:ef:
11:09:ae:1e:bf:74:cc:af:75:8e:b2:b9:b0:57:0a:92:a0:2e:
19:47:c8:ea:72:af:fa:d0:e6:45:26:d1:07:8e:70:9a:b8:ac:
92:1f:10:33:e3:71:92:62:0d:4d:d2:8b:91:89:5a:a8:91:5e:
fa:99:68:bf:c0:ff:bf:10:d3:5d:06:25:21:dd:f7:9a:ce:1d:
7f:6c:19:6e:2f:1b:8a:14:5d:bb:eb:d3:ba:e9:37:0f:9e:b6:
7a:21:ea:e7:8d:f5:56:80:91:9c:b8:34:34:6b:6d:af:a7:61:
e2:90:c3:e5:61:56:5a:be:c8:1d:00:c9:76:12:6d:a0:50:11:
f8:2f:d5:48:af:c9:90:7d:d2:60:fe:48:20:b1:86:34:9c:77:
0a:fc:3a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 18:59:43 2025 by rpki-client