Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35f233b9-8498-31e9-acd4-34835bc67592.roa
File: 35f233b9-8498-31e9-acd4-34835bc67592.roa (raw, json)
Hash identifier: QTyIc16US9OucdUaEOKEl3PpOffQQCCtsgBBukJ33LM=
Subject key identifier: 54:21:2A:23:BB:03:DC:41:60:53:68:9B:22:95:E1:73:D1:CB:F7:9B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F6C8D79B036A2802DFB500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35f233b9-8498-31e9-acd4-34835bc67592.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33490
IP address blocks: 73.164.252.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f6:c8:d7:9b:03:6a:28:02:df:b5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=615271a3-5cf6-4d32-8aa4-961ecb8c7455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cd:bb:b1:91:43:86:5d:ad:89:0b:af:20:45:
4e:53:c2:8a:c3:d6:34:86:61:f4:cf:40:e5:63:a6:
6e:9f:61:f7:4a:36:b7:97:a2:47:f9:a6:2b:9a:ff:
b7:63:44:99:27:8a:a0:cc:fd:bf:46:eb:80:5e:c6:
4d:f4:ff:17:bd:53:36:c7:05:77:77:c4:08:e0:14:
41:77:3b:b1:fd:3a:30:6f:c1:3c:a5:88:1f:58:e9:
56:48:8a:e2:e3:2f:5a:42:8d:1b:e8:c0:e9:b9:ca:
7f:7d:9e:e5:04:9a:b0:9e:9d:ff:02:76:5c:ef:e9:
d3:1b:05:4a:db:e3:72:ac:3b:3d:81:c1:92:21:b4:
12:32:be:7b:d7:5a:54:c3:b5:80:f2:d5:d5:5a:94:
47:26:c3:bf:2b:2f:b8:51:d7:8e:a1:73:b3:78:1b:
be:6b:0e:a4:75:3a:5a:7f:01:d5:ac:e8:bd:8e:b8:
d4:4c:53:fd:aa:cb:ca:c4:2f:e0:83:74:e3:ea:a8:
8e:2a:a5:50:40:5e:f9:ab:26:15:c1:72:32:5d:c0:
d0:51:69:9d:a9:69:18:19:e6:09:78:28:ce:06:6f:
23:ec:7a:f5:65:7c:18:50:13:56:1b:f8:3b:f9:1f:
17:c4:0c:98:aa:97:2d:07:90:8a:1c:c0:93:00:66:
43:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:21:2A:23:BB:03:DC:41:60:53:68:9B:22:95:E1:73:D1:CB:F7:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35f233b9-8498-31e9-acd4-34835bc67592.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.164.252.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
be:b9:52:09:1d:3c:d7:ba:c5:e3:66:39:78:f8:b7:e8:eb:b1:
66:b2:91:04:fd:56:5d:e6:32:f5:97:fc:13:33:2f:25:31:a5:
c3:47:7b:98:8f:b9:c1:d8:86:ce:f1:29:3d:23:b7:16:ab:a2:
c7:2d:cb:b6:14:f6:37:b2:f4:49:09:99:35:be:0e:3d:5b:8a:
7f:5e:2a:ea:5f:51:21:18:87:3f:37:94:27:90:22:66:83:eb:
b1:72:ad:65:3f:8f:7c:fd:09:92:d9:ec:11:9d:c3:6f:3c:eb:
85:e3:2e:25:05:da:9e:86:ab:76:b1:a2:f5:6a:bd:9b:d7:53:
1f:f1:fe:f6:1f:cb:85:dd:09:a1:c3:26:01:94:31:f8:a4:8c:
25:70:79:75:31:c2:37:ec:97:51:66:1d:12:21:fa:a8:2c:21:
20:81:4b:a3:ac:9d:19:8c:af:82:77:ef:95:4b:32:ab:9a:63:
1a:f3:f7:3b:79:e9:fc:9f:6f:69:71:8b:7b:88:bc:09:8a:c1:
70:90:b9:32:2c:9d:07:0c:e0:eb:f1:bc:08:2b:79:38:13:c9:
a5:63:f0:fa:13:44:c1:bd:a3:5e:91:0e:20:a3:8a:d5:57:c4:
81:50:ae:6b:5f:09:9e:79:aa:85:bc:8c:05:5e:c0:90:0a:42:
d4:2d:bd:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 00:19:27 2025 by rpki-client