Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e1ca383-982b-3808-830a-29072a6d2ee2.roa
File: 4e1ca383-982b-3808-830a-29072a6d2ee2.roa (raw, json)
Hash identifier: SJJ+yfN/UUtXrwAPG4ZKJ96Bi+dgIFc9QQKxf/+m3Bk=
Subject key identifier: E2:38:CF:67:81:5A:C0:86:BA:DA:5E:49:F4:49:1A:E4:09:D8:8C:F7
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F8F1417AADBCAD6080F140
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e1ca383-982b-3808-830a-29072a6d2ee2.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33668
IP address blocks: 68.60.188.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f8:f1:41:7a:ad:bc:ad:60:80:f1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=717fad84-2eee-4c59-9440-e544c896973a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2e:a9:fb:bb:4f:df:b4:b0:03:76:50:1f:0a:
f6:11:33:54:04:07:7b:c5:2d:31:ec:01:25:83:6b:
b3:40:0e:bf:41:b4:d4:5e:67:a5:70:50:16:9a:76:
9a:43:84:4c:36:bb:bb:c2:b5:60:29:7e:b7:40:92:
1a:7b:b1:e0:22:b4:54:97:c7:95:91:db:ed:75:c5:
a1:de:6f:f9:a7:a2:a3:2b:a6:91:ee:9a:38:02:9d:
3f:8d:fe:f0:ac:42:04:62:fd:47:ab:12:ab:d3:c3:
42:c0:ec:d4:31:2a:7b:95:4f:2d:05:83:f6:dc:28:
54:42:3e:f5:64:12:d2:b5:b8:39:65:23:01:9a:47:
85:77:3a:ab:46:d7:b5:e0:a1:0c:c0:59:81:73:6b:
b1:72:4d:78:af:8b:e8:85:74:80:c6:40:c6:be:53:
0f:52:4f:a3:af:78:9b:71:04:af:17:7b:f3:2e:2b:
ca:4d:a4:05:62:ec:64:2e:e0:a3:ab:f8:06:ac:7f:
b6:4f:31:1e:96:50:bf:09:90:71:c5:32:9f:27:43:
24:a4:b9:7a:11:3e:4d:b7:d1:36:03:4a:76:36:0f:
53:ef:bd:27:19:7b:b4:8d:fc:7e:a3:cb:54:06:a3:
6e:a5:c2:0a:e6:31:48:f9:ac:7f:ba:87:2b:02:12:
b7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:38:CF:67:81:5A:C0:86:BA:DA:5E:49:F4:49:1A:E4:09:D8:8C:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e1ca383-982b-3808-830a-29072a6d2ee2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.60.188.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:e7:75:08:6b:bf:fb:1b:a4:26:b0:2d:9f:5f:d7:5f:e5:23:
ce:4b:44:20:85:89:39:67:38:09:c1:5d:db:59:92:ff:42:0b:
c5:ed:2b:94:9d:55:42:77:7e:a1:17:4d:71:fa:d2:d2:9b:e0:
0e:ce:cf:23:89:db:47:13:b2:c0:b4:72:ff:bb:a3:be:59:48:
8f:84:27:3d:f4:72:38:0a:f8:cd:9c:db:44:85:0f:92:d1:fa:
3c:ac:7d:a6:af:77:77:5d:37:46:ef:3c:1d:6b:de:12:a1:bb:
d9:a4:c4:b5:8c:00:4c:8e:ac:a4:0d:aa:df:1a:f5:12:84:0a:
f2:eb:fe:82:7f:e1:ca:e9:b6:a1:e5:fd:2e:9c:a2:53:e7:4a:
c0:8e:d5:b8:ae:39:ef:01:51:36:cb:69:2e:6e:a1:12:45:6b:
81:49:40:ec:72:54:6e:21:c6:39:38:a1:d4:92:c2:32:0c:bc:
23:f4:7d:6f:95:3f:92:9d:b7:f1:5a:ef:2a:1e:23:44:43:2a:
42:7d:57:e6:f1:48:b2:81:ee:8f:0c:04:11:80:02:62:7e:05:
16:05:0a:37:58:a8:3f:b6:3a:0e:fa:1a:eb:9e:53:31:d8:e4:
d3:8a:ee:e4:1e:ab:21:b5:c7:f3:f3:d4:98:3d:1f:cc:4a:38:
dd:16:1e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 22:04:49 2025 by rpki-client