Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6b004deb-3777-3020-9af0-9c60a17b10fa.roa
File: 6b004deb-3777-3020-9af0-9c60a17b10fa.roa (raw, json)
Hash identifier: hkOjeCU++lXzzqniNgs6Ki2+Zryat5Aun3Yv+xWJkPE=
Subject key identifier: CB:20:10:06:B6:D3:4F:5D:A3:D2:80:16:9B:1B:0F:04:45:CB:86:05
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F845FF9AF2CF943B637D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6b004deb-3777-3020-9af0-9c60a17b10fa.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33490
IP address blocks: 76.115.248.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f8:45:ff:9a:f2:cf:94:3b:63:7d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=d76307cd-316c-4d87-be6c-c128d8027f68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e0:f9:68:00:3a:7f:de:79:94:e3:51:7d:1f:
86:0d:b1:ef:35:e7:73:c1:57:f1:e1:65:64:00:d3:
c9:0b:df:53:29:ed:4c:b2:4c:6c:71:3c:55:a2:23:
42:fb:cf:a1:40:1d:58:2a:1a:c1:ac:89:20:61:62:
14:21:43:42:29:ad:08:1c:23:fa:57:90:b6:9b:0f:
53:ad:d6:61:b9:c9:55:c0:6b:21:bd:e0:95:e7:66:
04:d4:62:6f:1c:57:2c:53:22:a5:26:fd:1d:90:26:
32:bd:65:7f:ee:c1:2e:9e:de:4e:cd:1c:ec:3c:67:
3b:3f:18:72:a6:be:38:3a:0c:38:5f:0c:43:a2:69:
f7:e1:0f:16:a2:c1:d7:51:9b:57:1b:1a:71:30:70:
3e:af:fa:e2:e6:35:2f:e2:49:86:16:48:4f:6b:8c:
74:66:77:67:8a:dc:20:e1:f6:62:d2:60:96:06:ff:
a3:43:71:65:d0:0c:71:1e:b4:b2:15:3c:ba:71:05:
0b:67:90:fc:75:3f:26:ee:c9:77:7c:e8:b6:aa:d3:
ae:76:d4:dc:d0:f0:f0:4f:32:e7:67:4a:f3:bc:b4:
fd:73:4b:8a:b9:41:0e:a8:30:2b:d3:af:e6:1d:9d:
ee:a3:3c:e2:6c:a6:fa:e5:c2:ba:38:88:6c:19:23:
a0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:20:10:06:B6:D3:4F:5D:A3:D2:80:16:9B:1B:0F:04:45:CB:86:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6b004deb-3777-3020-9af0-9c60a17b10fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.115.248.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:aa:6f:4a:c6:d7:f2:f2:e9:e9:53:f1:9c:45:97:00:f5:26:
77:26:b9:c8:2f:7d:37:f6:09:2a:8e:7e:c7:96:d5:9f:38:a0:
88:3a:41:60:1e:46:57:9d:bc:83:48:85:ae:f5:62:72:c2:8c:
65:84:a0:da:21:c3:cb:75:13:c7:a2:52:da:1e:d8:aa:76:b8:
89:42:28:e6:d9:fc:8d:e7:e3:a0:54:35:80:ef:d6:83:df:32:
ba:40:66:77:f0:42:ca:fa:e0:3c:f8:20:08:69:23:c7:5b:6a:
e2:b5:e5:6f:33:75:bb:17:9e:f9:bb:f5:a3:6e:87:5e:96:ca:
96:ed:a6:cf:91:86:a2:41:77:6c:7a:5b:19:6d:bd:51:33:7d:
47:1b:bc:48:f7:39:b1:6c:d7:be:7d:72:19:03:bf:07:ce:47:
fc:27:a8:f2:31:aa:14:45:a5:4f:74:7f:24:d8:b4:72:67:dc:
9d:a0:dc:f1:71:6a:4e:c3:77:ef:44:fd:54:73:cb:4f:14:68:
de:dc:88:71:43:80:73:94:61:a7:26:39:09:d2:b1:a1:86:9a:
dd:e9:c3:2c:05:f4:22:20:c4:db:59:9a:29:61:ba:b8:58:25:
c1:27:5d:96:9e:88:41:3e:09:68:5f:53:d1:4e:29:9e:b6:37:
ff:f8:d6:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 04:37:33 2025 by rpki-client