Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/34e05ef6-c267-3ae1-b734-fdcdd69f8680.roa
File: 34e05ef6-c267-3ae1-b734-fdcdd69f8680.roa (raw, json)
Hash identifier: q32EqbwDW4EMZlBt3U3VN8SE7xDiWdzLjJ0RukeZRQw=
Subject key identifier: 51:95:6D:10:9A:87:78:A9:58:4D:9B:05:19:EE:C7:48:82:85:CB:53
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB094B342A46D66E83A3810
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/34e05ef6-c267-3ae1-b734-fdcdd69f8680.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33287
IP address blocks: 71.225.80.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b0:94:b3:42:a4:6d:66:e8:3a:38:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=764eb824-cb8f-40f9-9802-a8e51b2c75fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bc:05:a7:d1:3e:2f:05:30:8a:a4:30:82:e4:
31:8a:1c:36:83:ef:ef:cc:1c:73:e2:ce:27:23:4d:
85:31:4a:67:22:11:e9:4b:77:ff:c2:cc:68:3b:de:
60:20:aa:b3:1b:fc:7b:76:2c:2e:a7:7e:89:21:1c:
42:72:a5:0a:9c:99:11:8a:8b:ac:32:a7:a3:ab:d0:
08:cb:fa:76:35:c8:3a:0c:3b:7e:b9:54:f5:b6:0c:
7d:96:06:66:8a:44:47:73:1f:02:25:8e:1a:f7:3f:
54:03:8e:4e:80:06:78:fc:9e:87:47:13:56:0c:65:
64:c8:b4:7b:92:27:13:fa:72:a2:04:53:e0:88:9c:
63:c9:09:55:9e:5a:fd:20:ed:05:1b:70:7c:89:a6:
d7:7b:63:7b:a1:13:24:66:19:55:eb:6f:32:48:8f:
1a:40:f5:58:4c:57:90:8e:e5:86:a8:9b:aa:46:33:
86:23:42:6b:12:86:16:a4:53:94:f8:e5:b7:2d:08:
24:37:6b:66:92:a6:1c:8c:9e:07:fa:1e:d8:9d:fe:
ae:e8:02:fc:45:6f:5d:c5:4a:47:d9:c4:f6:2d:b3:
ce:51:49:bb:e7:d5:ba:35:b7:3c:1b:02:85:99:01:
f3:d9:b4:32:14:b8:d9:e0:e7:74:b2:63:57:1b:1a:
0f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:95:6D:10:9A:87:78:A9:58:4D:9B:05:19:EE:C7:48:82:85:CB:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/34e05ef6-c267-3ae1-b734-fdcdd69f8680.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.225.80.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:be:e4:1a:a0:55:cb:d7:26:2d:ec:d3:35:1f:ea:82:fb:25:
bf:87:d7:ec:2f:be:db:01:48:d8:1c:bc:e1:16:68:e5:d9:4e:
63:fb:80:ad:ba:20:af:69:d2:19:a6:4b:74:23:24:75:19:6f:
89:b9:d8:c2:7d:98:28:28:7e:89:1d:2b:8e:87:5a:0c:18:ac:
85:7e:ca:9f:0e:19:42:8e:f9:0e:2b:c7:49:68:e4:a2:ab:2d:
cb:5f:8a:5a:d3:09:fd:f3:84:c3:2c:9f:35:cb:0c:ad:03:49:
48:1f:7a:79:37:59:12:f6:0f:af:4b:df:2f:c2:50:a0:70:d4:
41:8c:2a:36:b0:c5:ce:16:3b:42:40:e9:9b:0a:c3:63:20:ca:
1f:ba:4c:d8:59:30:40:96:f0:ad:3a:29:36:b2:a4:04:fa:45:
ff:d1:83:e5:1e:4b:2e:83:01:77:fd:9c:6a:72:f3:3a:be:d9:
26:d3:b6:52:98:9b:c4:f1:84:88:49:48:ed:c6:6e:5d:56:88:
a1:42:cf:8d:ff:42:fd:e6:b0:f9:19:1e:e5:db:60:45:1c:a2:
d3:4e:c7:2f:07:3a:f2:f3:cc:29:98:91:93:dc:8e:a2:1a:ce:
75:01:27:85:78:6f:e3:02:3c:6c:44:dd:21:16:c5:84:e7:41:
5f:1d:7f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:58:35 2025 by rpki-client