Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/534f7be3-3efa-3332-8b13-8784d6ee80d3.roa
File: 534f7be3-3efa-3332-8b13-8784d6ee80d3.roa (raw, json)
Hash identifier: 1AOma+2n4CrO+1Xxw2vQZK81YTT8VW13kmkBpY3MTQA=
Subject key identifier: D1:30:59:C5:E5:05:99:DF:57:8C:38:CC:0C:33:EC:68:E3:7E:7A:78
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F88BF3631857AC0D739F80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/534f7be3-3efa-3332-8b13-8784d6ee80d3.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 7015
IP address blocks: 73.186.214.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f8:8b:f3:63:18:57:ac:0d:73:9f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=e851e215-0fbf-4f51-9d10-521de6865c2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:2f:78:ae:08:87:9d:3e:22:86:e2:49:c2:50:
fa:67:c5:68:8b:09:04:76:db:9d:cd:d0:e9:91:b1:
13:98:f3:af:74:e7:f9:b4:59:94:bc:8c:44:af:0f:
56:ec:0c:0a:ce:89:d6:d1:73:e1:4c:74:64:bb:6a:
91:4f:68:88:df:04:c4:bb:89:4f:46:34:48:6a:f0:
8f:ac:bd:3c:29:57:0c:77:ec:2f:26:b4:d7:16:bf:
65:d9:5d:a0:d8:57:9e:31:cb:dd:c3:8d:4a:5a:97:
32:e1:ed:fb:1d:c1:8f:ef:79:22:34:c6:fe:77:28:
7d:cf:bd:31:93:f3:21:27:1c:d2:e0:2d:7d:71:c3:
b2:79:62:4b:6e:6f:8b:0d:04:19:30:7c:01:5c:55:
51:f4:1e:ad:80:8e:3e:04:93:97:05:99:fb:a8:9c:
de:15:53:54:0d:49:99:82:69:b9:15:78:ea:59:96:
4d:70:f8:ab:67:c3:52:bf:81:03:d4:63:37:46:40:
ca:e5:2b:fb:33:e2:d0:27:d7:90:5c:37:db:68:d0:
cb:a2:dd:6c:56:63:18:0d:cc:d4:f6:92:fb:cd:71:
7d:a3:96:39:53:fb:1a:f5:24:7d:54:9c:fb:71:98:
03:b3:38:8f:68:54:ae:a1:15:b6:66:26:61:99:0e:
c7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:30:59:C5:E5:05:99:DF:57:8C:38:CC:0C:33:EC:68:E3:7E:7A:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/534f7be3-3efa-3332-8b13-8784d6ee80d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.186.214.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d6:bb:2f:33:ac:66:36:66:ce:58:49:ea:6f:d8:5a:08:7e:11:
18:10:f7:a5:cb:0a:4b:b2:3c:14:66:5f:2f:eb:a8:04:53:30:
a4:c7:6e:b5:88:06:84:7b:f1:ce:61:5a:98:68:f2:11:43:34:
b3:4b:c8:75:44:21:3a:7f:ee:e0:4c:72:18:84:96:11:4d:28:
41:48:1e:4a:98:15:fe:19:2c:ce:d1:57:27:d5:c2:4e:7d:4f:
dd:4f:67:1e:e0:13:80:74:92:58:22:9d:ca:cb:03:73:d7:0e:
74:c1:a1:74:d5:90:da:f7:0a:be:18:a2:0c:4f:79:2f:7a:df:
75:5c:9d:68:d7:b3:34:28:77:15:f5:e1:1b:7f:20:64:01:b7:
e2:cc:da:66:b4:8a:67:fe:21:7c:6c:b4:1b:56:3f:9e:d1:d4:
f0:7a:22:1e:3b:7b:46:1a:9b:a3:d2:03:3c:62:ad:e3:e0:f8:
be:33:0c:d7:64:f4:53:c3:0d:67:ff:c0:f5:df:76:2b:e1:7f:
30:46:27:d2:c5:4e:89:d8:18:82:ad:12:74:d1:31:5f:8b:3b:
9e:5b:f5:db:8b:8e:45:ac:a9:8f:72:28:ef:56:83:c8:b1:01:
10:f9:57:f1:17:c4:e2:48:18:63:3f:52:01:3b:9f:86:d3:58:
78:ec:44:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:31:37 2025 by rpki-client