Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/753dbb59-6eed-37f7-b8e1-d9e66247e816.roa
File: 753dbb59-6eed-37f7-b8e1-d9e66247e816.roa (raw, json)
Hash identifier: 3eaXls5yxKXN2x45lEmCfs6eue0HcTuMvpRWHN2JNB0=
Subject key identifier: 0C:91:5D:52:57:55:A7:43:D3:0F:E7:53:7B:52:95:64:AD:8F:3E:F5
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6D5A9C0B5B36E1B4E2F044
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/753dbb59-6eed-37f7-b8e1-d9e66247e816.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33650
IP address blocks: 50.222.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:5a:9c:0b:5b:36:e1:b4:e2:f0:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=48824784-ccfd-4348-9bd1-919917e478d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0a:d2:1f:a6:0a:35:50:98:82:26:7c:2b:9f:
4c:04:bd:84:dd:49:05:a4:72:ac:f2:40:22:80:df:
49:04:6b:ff:5c:ff:97:1c:5c:47:83:d6:28:3a:3d:
d0:43:c9:e6:3d:4c:3e:f2:1f:37:78:1f:04:00:54:
5e:92:28:3f:d9:20:ae:4e:49:15:02:a5:b8:0e:ac:
11:b6:de:47:ac:f6:1f:4b:4d:38:d1:b5:e0:d9:b1:
6b:53:42:89:f2:98:01:bf:db:e6:a7:0a:10:eb:8b:
b9:a5:32:db:4e:08:3d:9b:03:55:b4:18:5d:cf:02:
78:a2:d2:77:f9:15:ea:01:37:d7:e4:e6:18:33:4a:
6f:f9:5e:31:4f:4a:7f:24:b6:22:d6:ac:ea:9b:d5:
75:08:fa:54:aa:a2:83:2d:0f:73:08:93:35:43:80:
03:6f:8d:d8:eb:ef:d4:ac:94:f6:31:e6:43:90:87:
7e:b0:12:85:f7:04:c8:d1:52:d4:65:51:d1:a5:a2:
1d:2e:5c:27:e9:03:b4:ce:dd:68:28:9a:db:0a:ae:
d8:b6:3a:87:9e:07:bc:9f:38:89:76:42:55:56:27:
d2:87:37:85:72:b5:8c:3a:89:60:30:d4:70:7c:c6:
71:76:ab:aa:89:07:5e:e4:4e:ac:67:c9:ea:87:46:
f5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:91:5D:52:57:55:A7:43:D3:0F:E7:53:7B:52:95:64:AD:8F:3E:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/753dbb59-6eed-37f7-b8e1-d9e66247e816.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
50.222.54.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:86:27:6f:68:48:bb:dd:0f:c6:fd:cf:9f:55:8a:06:67:9f:
c1:d4:d9:c7:0a:54:8c:3a:8a:32:ea:10:6f:30:2c:41:d3:6a:
04:9c:44:e2:34:83:13:6f:90:b1:9d:1a:0c:14:ac:ec:9f:ce:
7b:35:64:0a:2f:2b:ef:41:d6:a4:8b:86:a6:70:a7:9f:a6:0d:
94:d0:b1:2d:78:20:99:b0:e1:ed:09:4b:e5:3a:a7:61:3b:1a:
b4:3c:91:c1:36:27:06:68:2f:e0:c8:5a:c3:55:da:ba:74:4a:
bc:92:7c:e5:c5:1c:d3:94:f3:83:17:18:5f:5b:92:27:02:48:
56:08:96:18:3e:44:f7:03:c2:bb:d2:a8:bb:98:77:62:04:1d:
9d:d2:9b:2f:6d:56:2d:03:93:b3:8f:df:00:ab:a4:a8:fb:6a:
08:f6:35:a7:5a:b5:a2:3b:ed:c7:ca:d2:fc:fa:0e:97:59:38:
77:1a:36:f5:53:42:b6:41:ec:f1:1e:eb:af:b0:a9:4a:30:f6:
19:1f:58:af:01:f8:f8:5c:5f:12:09:84:1c:91:5d:de:cf:5d:
67:25:be:b2:ba:43:47:45:9f:a7:56:c5:d9:5f:10:d7:5c:41:
15:40:8d:0c:e1:a4:b0:1a:06:5d:ad:75:ae:19:15:03:81:94:
f0:73:c7:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:50:00 2025 by rpki-client