Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/56c6f27c-81e8-3aa1-9931-90496c6e7468.roa
File: 56c6f27c-81e8-3aa1-9931-90496c6e7468.roa (raw, json)
Hash identifier: uVKQdyFkAh3s5SWCeBG6LUIqlZerDYmUETnpTfZ74Lc=
Subject key identifier: 07:F6:65:3E:C0:59:20:8B:F8:97:37:C4:89:36:47:FF:DA:0D:AA:B7
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CAEE0691EEC6DFDE013A800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/56c6f27c-81e8-3aa1-9931-90496c6e7468.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33659
IP address blocks: 73.196.102.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:ae:e0:69:1e:ec:6d:fd:e0:13:a8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=f7955aeb-d8b5-4286-bb5f-4f8dc334b932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b3:4f:c3:a6:f8:6e:1c:56:18:07:16:f6:7c:
7a:51:bd:d7:26:d8:1d:95:0d:dd:4e:9f:ea:85:5b:
01:00:60:88:8a:63:7f:c9:4f:b6:3f:56:29:60:fd:
99:ff:7c:72:45:01:69:4c:70:da:b8:b3:92:40:6a:
dc:b4:d5:ec:a5:07:5c:3c:2c:66:d2:bf:17:eb:52:
d9:bb:95:f3:63:92:f5:29:24:2e:41:b6:24:b7:2d:
5a:55:e9:32:d4:7b:dc:67:6b:1e:4a:ae:03:f7:68:
7b:df:ca:5c:14:3c:30:41:5e:9a:b3:3d:aa:f7:f5:
e5:58:4e:f7:44:fb:60:75:97:c0:86:59:d2:50:55:
9f:5e:d8:21:12:b9:85:cd:2c:fb:5b:f3:b2:4d:e2:
e2:74:6b:5a:2a:2d:94:c0:8b:d3:d4:a6:76:29:55:
e1:07:00:ea:07:da:d9:bd:d7:9c:ce:9d:cf:85:13:
bd:89:b8:f4:95:87:27:0a:ca:45:46:c7:6d:46:74:
a9:95:db:21:e5:ec:64:5c:c3:1c:12:19:d5:69:9a:
98:1c:ca:49:99:2f:4a:d1:56:0f:68:61:0b:00:8c:
f2:76:61:cc:20:c7:84:63:93:8b:67:79:45:9e:2a:
61:4c:b5:35:c3:64:3c:51:9d:cd:0b:85:3b:91:a3:
4b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F6:65:3E:C0:59:20:8B:F8:97:37:C4:89:36:47:FF:DA:0D:AA:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/56c6f27c-81e8-3aa1-9931-90496c6e7468.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.196.102.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:1a:75:d9:ef:6d:12:36:51:07:ec:02:cd:6d:2a:86:c2:b4:
ea:14:75:37:f4:12:33:48:75:ec:a0:5f:39:08:c4:c9:f0:ba:
ab:3b:23:6c:bf:c3:49:0e:7e:9d:b7:bc:70:37:82:4e:68:96:
5e:cc:c6:b9:a9:3d:91:4c:09:55:c7:bf:d2:01:bf:f9:4e:b1:
eb:93:a0:25:66:6d:76:c8:da:ca:29:b1:87:2d:38:4c:95:4e:
6c:fc:35:12:f9:9b:af:72:c9:7b:82:fc:bc:5d:fe:05:f9:73:
47:6f:dd:d4:3c:9c:55:9a:99:42:a9:c4:3d:92:f2:a1:05:7a:
86:79:77:26:2b:2f:44:85:68:c8:3f:79:ed:f0:fe:e5:0b:35:
20:9f:2e:bc:e2:0c:49:7a:b4:64:be:56:32:7b:4a:56:32:a7:
47:28:0c:16:31:6b:33:3f:d3:fc:89:23:42:ed:f7:6f:39:2f:
7a:9f:64:04:50:3f:a0:22:5a:e6:1a:00:12:64:8a:b2:c0:cf:
f8:ba:3f:70:7e:4c:e8:57:37:65:7f:0c:a4:d8:d1:83:29:8d:
74:11:46:a8:69:8f:24:a6:0a:b2:6b:ed:b4:b1:44:63:7d:3e:
bd:26:fe:e2:43:0a:91:38:ab:47:b6:d2:38:7f:a5:ed:d1:80:
5e:1c:98:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:58:17 2025 by rpki-client