Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/72b45f55-b282-3742-a294-33193f2c7f61.roa
File: 72b45f55-b282-3742-a294-33193f2c7f61.roa (raw, json)
Hash identifier: KF4d+pW7NYpxMEy/XYeIXtsK5fAibb6/N9QgykmQ/7k=
Subject key identifier: C6:FF:03:1C:5E:36:50:22:25:EA:AF:16:4F:CA:7F:2E:23:53:ED:7C
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848AF2B8C5F43885C50338D2994
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/72b45f55-b282-3742-a294-33193f2c7f61.roa
Signing time: Mon 27 Jan 2025 14:00:52 +0000
ROA not before: Mon 27 Jan 2025 14:00:52 +0000
ROA not after: Sun 27 Apr 2025 13:00:52 +0000
asID: 33661
IP address blocks: 69.139.170.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:2b:8c:5f:43:88:5c:50:33:8d:29:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 27 14:00:52 2025 GMT
Not After : Apr 27 13:00:52 2025 GMT
Subject: CN=e8627f78-ab52-4375-8e07-f94290eb4a04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d1:93:3c:4d:9d:77:ba:b2:2d:d3:f6:03:41:
d2:bd:70:6f:40:d9:f9:0d:77:b0:e2:94:87:db:27:
4d:f1:1b:76:aa:a6:75:16:0c:ae:57:4a:6d:22:dc:
4c:56:ce:d7:8e:ae:3f:52:40:97:09:5c:da:fe:09:
67:2b:9c:98:77:d4:cd:4c:75:4e:9a:0a:27:b0:14:
42:ab:5e:ab:1e:5d:b5:c5:dc:68:a4:bf:0f:3d:99:
cd:2e:25:1d:9d:a1:1f:fa:ee:8c:cc:a8:f1:2a:b6:
b9:19:cc:a1:3f:5c:8c:30:3c:91:80:4a:32:24:7d:
45:f9:fa:3a:5b:c8:83:99:3d:d3:29:ab:66:45:b3:
ad:93:5c:f5:0c:1c:ba:49:18:79:f2:e2:cb:ae:fa:
30:39:d1:d8:2c:4b:77:d7:30:0d:0a:05:bd:25:d1:
dc:ce:d4:78:c6:23:87:8e:5b:03:22:d9:fc:4c:e4:
3e:dc:ec:eb:21:82:2e:9b:5d:c7:d6:3c:55:a3:bb:
29:de:1b:61:8d:66:a6:82:70:a1:b6:ae:71:75:de:
67:1e:57:a5:03:50:54:28:30:8d:de:c8:8d:82:d4:
d2:60:24:6e:3e:30:be:9a:6a:38:7b:46:d4:a2:b4:
10:cf:f9:6a:e8:70:8b:88:20:7e:10:a4:75:2c:ab:
20:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:FF:03:1C:5E:36:50:22:25:EA:AF:16:4F:CA:7F:2E:23:53:ED:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/72b45f55-b282-3742-a294-33193f2c7f61.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
69.139.170.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:74:f1:af:d0:72:a7:cc:0c:77:c4:5f:fc:e4:57:98:04:38:
b0:d1:62:3d:44:be:cd:3f:be:a1:6f:d8:e9:51:b9:88:ba:f2:
a3:a1:6c:4b:b9:92:08:26:21:2e:c6:97:03:99:20:49:88:0f:
87:e4:0f:55:5e:ec:c7:20:ce:46:4f:d7:18:66:d9:64:30:b4:
81:96:d3:35:b3:1e:66:08:39:3b:28:45:3b:47:f4:af:c9:a6:
bb:75:27:b9:39:bb:19:36:43:cc:48:46:87:e3:9f:b8:9e:35:
d5:42:ec:13:9a:17:79:d8:e8:e5:ed:15:44:35:b0:db:7d:88:
49:9a:d2:1e:c1:65:b1:52:ed:62:dc:4b:de:17:c0:78:9f:6b:
88:25:79:18:2d:c0:17:5d:b7:29:80:f5:05:d1:53:27:c9:ac:
85:26:fc:4a:34:cb:53:8b:e4:cd:61:f5:7d:ee:c6:2f:14:8c:
eb:2f:0d:b3:2b:a3:38:87:44:d7:28:47:56:35:19:d8:00:49:
ce:24:5d:68:be:b1:85:05:38:51:94:45:e8:2b:9e:d1:3d:66:
76:ac:68:b1:ec:84:c3:97:fe:1c:da:3e:33:f5:13:90:93:f4:
78:30:58:51:2a:e9:e0:ce:67:69:4d:9c:34:87:ab:62:e2:d3:
e1:78:73:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:12:43 2025 by rpki-client