Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e3cb798-1627-3e0d-91fe-5474b8e2544e.roa
File: 3e3cb798-1627-3e0d-91fe-5474b8e2544e.roa (raw, json)
Hash identifier: 22GY6JE/OzDpUyZ2WW9wW/znfdnwWKL0SUThgcPDFpc=
Subject key identifier: 4F:E4:E0:B6:E0:0E:64:ED:6D:A5:26:47:61:74:44:EA:70:AB:81:FF
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285849203C391233A0C77CE8BF6E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e3cb798-1627-3e0d-91fe-5474b8e2544e.roa
Signing time: Sun 09 Mar 2025 02:00:39 +0000
ROA not before: Sun 09 Mar 2025 02:00:39 +0000
ROA not after: Sat 07 Jun 2025 01:00:39 +0000
asID: 7725
IP address blocks: 68.63.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:20:3c:39:12:33:a0:c7:7c:e8:bf:6e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 9 02:00:39 2025 GMT
Not After : Jun 7 01:00:39 2025 GMT
Subject: CN=4f4577ac-3d7b-49c0-9c37-86a3018361a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a8:3c:a3:06:ff:dd:3a:91:5f:6c:b8:86:1d:
60:b0:2e:2e:01:e9:9f:3e:98:c9:60:f6:2a:32:62:
3f:28:c0:39:36:09:1c:ce:4d:f7:da:68:7a:85:e9:
5e:4e:5a:d6:b6:38:97:1f:b3:5c:6a:96:cf:83:ed:
13:b3:11:af:ae:55:3d:1f:cd:f8:1c:95:89:75:f6:
4f:2f:4d:c9:8d:d0:70:14:00:af:02:35:1c:3c:41:
8d:ed:6d:5a:d3:68:6c:8a:e5:52:3f:72:c3:6f:07:
f1:35:14:e8:24:ab:81:89:f1:f6:10:a3:4e:90:bc:
11:60:fb:4f:5e:ca:a7:15:57:84:63:f0:8f:7a:c1:
c5:05:f5:e6:e2:a5:21:31:c3:27:d0:28:e6:0c:5e:
f3:e5:d5:06:43:45:df:d6:57:50:dc:0a:36:04:8b:
a0:21:3c:82:42:7b:05:81:0f:33:a1:3a:b7:c6:41:
e4:7e:d6:50:78:9f:6c:4a:d1:51:86:25:ef:35:4f:
d6:9d:69:d0:60:9f:98:1b:ec:d5:ea:f1:37:61:89:
88:af:57:05:5f:9f:4f:d8:21:f4:38:74:1e:2c:cf:
2c:83:d8:3a:3e:00:0d:e3:3e:9a:5f:12:7c:e2:e4:
59:0a:07:61:77:dd:ac:9e:a1:36:be:dd:50:b9:16:
40:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E4:E0:B6:E0:0E:64:ED:6D:A5:26:47:61:74:44:EA:70:AB:81:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e3cb798-1627-3e0d-91fe-5474b8e2544e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.63.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:ad:9b:7d:ea:9d:a4:19:98:be:ba:aa:6e:1c:10:8e:0b:a2:
13:52:e5:e2:41:ae:95:21:45:bb:2f:83:cc:a1:c9:b4:5b:c7:
b2:a9:0d:75:73:97:d1:da:16:82:66:92:32:bc:bd:4f:ee:21:
47:d5:5d:b7:79:66:1a:35:85:d6:96:a9:15:aa:13:f3:95:8d:
ad:48:b6:7c:95:7f:dd:40:ed:7d:a2:ea:18:6e:2f:f2:0d:2b:
e3:20:15:b1:5a:f7:e7:d0:1b:fa:93:e3:c5:00:d1:1e:69:66:
2a:24:53:1a:79:dc:f1:59:cf:d7:2e:18:21:cc:c3:e6:e1:53:
da:8a:33:b4:54:25:f9:77:a0:92:20:f0:f0:b9:ef:db:a2:43:
eb:14:3e:ac:43:7a:0c:17:49:b5:75:0b:e8:b6:00:49:55:62:
38:4c:3e:ae:fd:f2:2d:48:b0:99:8a:fc:59:61:c2:d3:57:22:
8f:1b:30:e0:44:ba:2a:06:39:0d:76:43:e7:d8:d4:d3:c4:66:
44:16:0d:36:e7:ca:56:b5:48:15:54:f8:1d:57:e1:b9:ae:9f:
18:cd:75:3f:a3:79:32:9e:95:bb:b5:da:4f:8b:f2:83:73:b6:
e7:40:6d:63:49:c4:ee:cb:8f:a5:17:aa:cd:e2:d3:43:13:18:
01:6c:80:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 18:39:59 2025 by rpki-client