Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/30a11fb7-660f-3565-ae4d-075facdf798a.roa
File: 30a11fb7-660f-3565-ae4d-075facdf798a.roa (raw, json)
Hash identifier: jgLZXNNNLEIvoSdvHK19z8M4SLznpTh9dTTYqR/xhoU=
Subject key identifier: 87:92:50:B4:9F:A6:08:DC:B0:C5:7A:ED:9D:72:C1:9E:BA:8B:E8:8D
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F22C1553C68F27B884DDE240
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/30a11fb7-660f-3565-ae4d-075facdf798a.roa
Signing time: Thu 20 Feb 2025 14:00:52 +0000
ROA not before: Thu 20 Feb 2025 14:00:52 +0000
ROA not after: Wed 21 May 2025 13:00:52 +0000
asID: 22258
IP address blocks: 76.107.106.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:2c:15:53:c6:8f:27:b8:84:dd:e2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 20 14:00:52 2025 GMT
Not After : May 21 13:00:52 2025 GMT
Subject: CN=a7b4e9ac-8f9d-45ca-9551-c7a5c6e2d65c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:95:3f:fc:0b:fa:f7:01:d0:86:24:37:55:8b:
21:d2:e2:86:4c:7b:de:dc:11:1d:b6:94:27:ae:db:
69:b0:d5:a9:16:7e:cb:e2:a0:b5:9b:1d:c6:a8:d6:
80:76:1e:b5:9c:1a:ed:5b:99:67:ea:74:7d:77:d1:
e2:73:54:29:5d:ae:7d:57:76:54:67:ee:79:df:87:
46:46:49:24:17:7b:b6:30:86:31:66:c7:11:5e:e5:
e2:5b:cf:25:c3:63:19:ba:ad:f0:c3:49:bf:25:e0:
6f:74:10:40:e6:9a:b6:7d:e0:29:72:2a:49:25:d6:
4b:a8:e9:ba:21:37:1f:e3:f0:68:8f:3f:8e:92:d7:
0a:d6:69:79:c4:81:c3:60:84:8a:21:e7:b1:a9:80:
eb:69:14:7e:03:36:0a:f2:5b:4b:da:10:6e:e7:f1:
b7:f3:69:53:2c:ae:2a:04:02:72:03:6e:58:4e:57:
6e:f1:4a:e2:03:06:67:61:a0:20:b6:2a:42:08:02:
06:c4:d8:09:c3:a4:ee:e7:99:87:ac:64:6f:3d:c2:
9e:9d:1e:7b:6e:eb:42:40:13:c7:3b:bc:10:fe:00:
46:e3:13:aa:ef:ce:f5:20:c1:7a:17:74:de:27:0f:
a9:d9:7c:26:6d:8f:a2:69:48:04:a7:04:c4:18:2a:
77:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:92:50:B4:9F:A6:08:DC:B0:C5:7A:ED:9D:72:C1:9E:BA:8B:E8:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/30a11fb7-660f-3565-ae4d-075facdf798a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.107.106.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:89:b4:3d:78:07:02:54:5e:f9:ec:1a:e1:e9:8d:6b:79:3d:
b1:00:59:3d:ed:97:59:b0:a5:fe:ef:e5:08:e6:c2:d8:a0:94:
85:de:2e:74:6f:be:7a:7d:4d:76:d0:e8:89:16:4f:4e:f9:dc:
50:65:26:8b:b0:42:73:1c:3d:c7:db:21:99:7a:89:97:b7:30:
db:72:5e:e2:03:35:96:e1:3c:60:7a:a6:7c:2d:43:49:6b:fb:
38:2c:5f:86:9c:06:2a:69:ff:3e:7d:79:02:2c:dc:da:f8:b9:
60:c3:80:c6:ca:77:09:2e:f5:db:8a:a2:8f:aa:77:f3:5b:41:
c9:b0:fd:88:17:03:45:9c:45:98:18:69:96:74:f6:6f:76:44:
ab:22:c4:b5:f5:06:c8:6a:f8:f6:d7:ab:b4:e1:ce:84:2c:75:
34:95:9d:c3:63:25:28:cb:e9:65:79:20:d1:c3:3b:af:d4:f8:
a0:56:77:37:ba:38:94:85:39:17:df:e6:17:70:4e:9b:cc:37:
e5:68:de:da:c7:1d:60:d2:8b:66:47:42:c0:93:5e:05:23:c1:
34:d3:b2:50:e9:29:77:c2:71:c3:f6:a2:fe:42:b4:8e:a0:e9:
eb:b8:a5:ed:13:04:67:9e:f9:0b:ea:50:82:90:4b:f8:40:d7:
8a:46:09:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 22:04:46 2025 by rpki-client