Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4c607f4b-e430-39ed-8bac-c971c9537dbe.roa
File: 4c607f4b-e430-39ed-8bac-c971c9537dbe.roa (raw, json)
Hash identifier: uoiJIW/bXAVl53RCaVwSM5s62nLrxjYkx82JpuV/rDg=
Subject key identifier: 12:B0:8D:D7:F1:2F:CD:FA:91:4E:EB:F0:1D:52:CE:8D:3E:99:47:57
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CAF1E598E3ADEB566EAB5C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4c607f4b-e430-39ed-8bac-c971c9537dbe.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33287
IP address blocks: 76.99.124.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:af:1e:59:8e:3a:de:b5:66:ea:b5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=72d1312f-cbcf-4691-8b54-decf4c26096c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:62:26:27:c7:ed:90:35:b1:96:b6:d1:7d:ba:
e0:9e:01:ff:33:5b:6d:86:77:74:d7:e8:ec:dc:bd:
ee:27:34:d1:f0:1d:ab:46:91:6e:e5:05:51:c9:80:
b4:ea:b2:a4:c9:d9:ce:22:07:dc:f1:9c:fb:30:63:
b1:80:b6:81:b5:4f:1a:ed:d1:ac:47:80:8d:60:00:
64:40:bb:04:ae:e1:39:32:d9:2f:6b:ff:14:3b:01:
16:c3:c8:cd:65:5f:ec:ed:3f:c3:f7:f8:84:40:f6:
43:67:ca:e0:7b:3b:97:e1:52:dd:01:9c:12:d5:b7:
9e:50:bf:10:2a:46:ef:d6:40:c5:87:4f:54:f8:05:
e3:c0:56:5d:0a:14:03:d7:4d:da:37:93:1c:67:1c:
bc:82:b8:cd:fa:33:f4:45:12:47:fb:ab:27:81:41:
1e:21:e4:a1:bd:73:3b:a8:df:31:96:db:06:a7:24:
52:32:c3:b2:75:85:56:73:f9:b3:8e:63:2b:5d:bc:
f6:15:62:f0:8a:44:02:09:8d:0c:60:3a:86:82:59:
74:ad:1f:1f:e5:a1:cb:d4:d4:55:3b:ad:09:89:6c:
6a:2f:4b:c6:cf:b9:a9:ba:dd:16:6b:bd:1d:e8:b8:
67:ed:e0:14:b5:82:88:19:40:48:66:fa:b6:ed:10:
7d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B0:8D:D7:F1:2F:CD:FA:91:4E:EB:F0:1D:52:CE:8D:3E:99:47:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4c607f4b-e430-39ed-8bac-c971c9537dbe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.99.124.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:05:ba:04:eb:5d:18:da:3a:44:89:f8:1c:38:e8:51:0f:c2:
4c:1a:9e:29:6e:af:2c:e3:fd:91:c4:3d:c6:0e:a0:98:51:8c:
24:54:47:b1:2e:3d:5e:e5:39:10:a8:6f:e8:d4:fb:01:44:a2:
7b:2d:5f:76:e6:d9:b9:2a:ff:28:a8:82:a2:c9:c8:b0:c9:0d:
9a:06:3e:55:76:28:79:d5:22:58:81:b5:77:db:1e:f2:4e:95:
e3:81:14:52:d5:16:50:41:ed:b8:df:f2:25:52:c1:61:b5:be:
84:76:6b:cf:cb:49:59:29:64:f2:be:75:88:48:55:d3:c4:93:
69:32:68:f7:17:0f:2d:ab:ad:ff:ff:79:6e:32:c2:f1:60:f9:
c3:83:f8:d4:dc:89:36:9f:9a:aa:b5:21:61:d8:6c:c5:3c:72:
84:e5:b5:01:27:ad:23:7d:f5:61:cf:e3:57:79:93:11:63:65:
4c:4e:dc:6d:1c:c0:65:dc:cb:4d:1a:81:f6:87:ab:d7:c0:de:
54:b1:b1:93:9a:ce:73:f8:38:60:a9:78:42:8a:22:f9:bd:6d:
ce:ee:a5:4b:94:98:a2:62:fc:78:f6:09:94:31:1b:77:c2:ac:
d3:06:76:d8:ff:f2:72:a4:39:d7:c0:f2:e8:be:27:81:ff:11:
d2:31:a5:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 03:20:48 2025 by rpki-client