Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b010230-a0e3-3436-b347-0f49266ca5ae.roa
File: 2b010230-a0e3-3436-b347-0f49266ca5ae.roa (raw, json)
Hash identifier: +CPhNXLKO4gQ5b80SVY9th5g5gSN/V6E+DQyENeP+aQ=
Subject key identifier: 98:1F:30:72:7B:31:46:8A:27:C6:5F:EE:F2:F6:49:A7:27:C7:FE:EC
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CAFDD033F44FC527C31F9A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b010230-a0e3-3436-b347-0f49266ca5ae.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33651
IP address blocks: 24.4.4.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:af:dd:03:3f:44:fc:52:7c:31:f9:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=0cfa5c65-534b-47ef-8bd1-a9b8a27f52f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d3:f4:82:2c:24:9f:4a:da:6c:2d:cf:7e:dd:
ce:9a:c2:94:6a:bd:f0:d5:2d:a0:4a:ac:de:27:26:
1b:a2:37:b9:63:d9:7a:ae:d1:2d:52:db:7a:1d:f9:
17:98:74:bc:e0:0d:81:e7:b3:77:0c:17:87:d9:62:
99:06:5e:7e:7e:25:7c:2b:2d:d7:c8:a4:68:2b:77:
0f:0f:d6:29:6c:ae:b6:3d:10:9c:43:c6:83:3b:8f:
26:f3:0d:4d:c2:98:54:fe:7d:92:ff:3b:4a:4d:76:
47:b0:d3:5c:46:10:1c:e0:1e:32:93:b6:20:ee:52:
76:8b:d0:14:f0:d8:75:92:c3:b5:ca:90:6b:b0:4c:
b4:40:8d:43:5e:f8:80:3d:18:80:2f:7b:6c:4f:a0:
f6:1a:30:0d:b8:51:29:0b:7a:06:3a:a7:92:42:e9:
28:ba:0f:87:44:d2:35:24:cd:7c:01:ca:db:d6:14:
6e:13:ed:5d:a2:70:4f:20:a0:bc:32:23:a8:da:df:
e1:08:65:3f:0f:e9:73:43:69:b1:34:a8:9d:8c:26:
a0:38:b5:bd:3a:31:1d:2c:29:a9:3e:29:35:3c:d5:
c9:fb:78:3a:3e:db:dc:63:9a:86:b9:9b:8c:74:36:
a4:0e:ba:ac:4c:72:9b:8e:4a:a5:fb:88:15:30:24:
36:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:1F:30:72:7B:31:46:8A:27:C6:5F:EE:F2:F6:49:A7:27:C7:FE:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b010230-a0e3-3436-b347-0f49266ca5ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.4.4.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:2f:09:8d:5f:33:ff:68:9e:dc:5b:34:fe:cf:fb:0a:7a:15:
66:ac:08:fb:ac:97:4a:ec:7c:50:04:45:cd:d3:41:65:27:a2:
d3:5b:7a:c6:a6:15:53:8f:2d:d6:fc:44:db:ae:cd:9b:f6:46:
9a:76:b9:1c:d8:d7:e6:db:26:b0:16:40:b2:de:31:52:df:96:
47:3b:58:88:58:c2:db:1e:73:60:0c:4d:be:c0:7a:67:8d:43:
de:bc:1b:ef:28:d5:0e:8c:cb:2f:8e:55:d6:d5:0f:9b:cd:71:
38:3f:fa:aa:73:4b:84:3d:e6:a4:88:09:08:c5:4d:79:13:02:
82:62:c0:ea:5d:6f:6a:2e:1d:a6:e4:b8:ce:98:4d:a0:c5:e9:
da:81:45:23:2d:39:50:23:da:f0:59:94:8d:8d:45:e0:c7:44:
28:63:a0:be:b1:b1:e4:62:8e:cb:77:b7:fa:2c:c8:c9:b0:2e:
10:5e:1b:dd:46:83:98:9f:76:28:64:ef:66:68:2a:88:7f:63:
9c:ce:e3:98:58:87:e9:06:35:2c:a8:42:9b:bc:33:4c:70:d1:
26:d1:28:03:4a:57:d3:77:a3:84:9a:3d:45:00:a8:75:95:67:
cc:47:a3:e5:6e:14:2b:46:31:d0:55:98:32:8c:b9:27:cd:14:
8b:39:78:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 18:20:45 2025 by rpki-client