Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7c0486fa-4d37-3460-bebf-65315e32145a.roa
File: 7c0486fa-4d37-3460-bebf-65315e32145a.roa (raw, json)
Hash identifier: IiIO9B9tvroGDwr0j0WxJ91uMWL59nfYD2kYS6SZ13o=
Subject key identifier: 47:BB:CA:92:29:A5:3A:16:9E:C7:30:80:C9:49:1D:9F:68:E1:9A:F4
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858497DA60CDE5C0703693B1E7E80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7c0486fa-4d37-3460-bebf-65315e32145a.roa
Signing time: Fri 11 Apr 2025 13:01:00 +0000
ROA not before: Fri 11 Apr 2025 13:01:00 +0000
ROA not after: Thu 10 Jul 2025 13:01:00 +0000
asID: 20214
IP address blocks: 23.31.0.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:7d:a6:0c:de:5c:07:03:69:3b:1e:7e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Apr 11 13:01:00 2025 GMT
Not After : Jul 10 13:01:00 2025 GMT
Subject: CN=de76e7b9-d524-4a98-ac6d-9ed6d77e2e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d9:53:6b:06:36:b2:84:5d:db:45:9d:a6:18:
29:19:c3:a8:43:01:a4:cc:ab:da:fa:14:9a:4a:f8:
7b:d5:83:74:1a:a5:fb:1d:8a:2d:3b:fd:58:e8:c3:
47:f9:a2:5b:2c:98:41:c5:b0:06:eb:42:22:ae:43:
a3:85:c9:70:6e:ea:5a:97:6f:99:e5:4f:9f:1c:1f:
35:13:13:ec:32:28:34:4c:ed:13:c2:1f:b3:cc:da:
4a:d7:0b:d8:b2:a8:d1:89:fe:fc:21:d3:88:d6:55:
02:ca:df:b2:01:57:c6:12:12:31:12:65:26:66:88:
eb:50:0d:fa:1a:84:7a:72:7d:98:96:37:d2:af:ec:
7f:c8:e5:d2:e6:bb:6f:23:de:56:02:06:ab:3b:41:
17:17:10:9d:31:11:ff:0b:c3:df:e7:e2:12:cf:cc:
06:dc:4a:ad:cf:cd:3f:6f:3a:38:c7:59:de:7e:dc:
59:c8:c5:e3:34:5e:30:ac:d8:15:85:5f:e5:d1:06:
1f:02:2a:9f:b6:4c:49:81:6c:90:2c:d4:81:f5:2c:
c2:3e:65:fb:be:19:8c:da:72:6a:d1:69:60:b7:c7:
62:64:09:06:5d:91:3e:54:c8:4d:55:46:bb:42:77:
7f:74:fc:51:31:58:f0:21:01:6c:b4:3a:8a:70:34:
33:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:BB:CA:92:29:A5:3A:16:9E:C7:30:80:C9:49:1D:9F:68:E1:9A:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7c0486fa-4d37-3460-bebf-65315e32145a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
23.31.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:85:58:2b:06:c7:a2:76:52:cb:13:4c:7c:c4:ff:8c:99:46:
a0:04:71:e3:28:2e:b2:1c:1c:b5:d6:34:6d:d5:63:d6:23:35:
2f:75:92:07:4b:af:97:3e:19:75:a6:8d:82:b2:86:65:d1:9b:
05:e6:39:9e:ff:8f:b2:f2:61:2f:18:70:c0:f5:61:86:4b:1d:
46:cd:e2:b4:64:c3:38:26:33:c1:18:70:e3:d3:56:de:e7:71:
56:bd:b3:97:05:7b:e4:9a:9d:a8:70:5e:aa:0a:49:29:44:d9:
2d:99:9a:81:77:c1:57:78:63:88:9f:82:ba:70:ab:db:1c:d7:
bb:10:b6:de:4e:4b:22:64:a2:8b:e0:7f:d8:63:bc:9a:76:6a:
bc:43:29:0d:ba:2e:26:9a:e9:f5:c2:11:c1:b1:5b:f8:d4:3d:
37:0e:9a:e5:98:56:f9:f4:4e:89:87:6a:b1:6c:c7:0a:7b:11:
c2:bb:08:51:16:4e:5c:7f:c9:b9:d4:ab:74:9d:49:01:a1:59:
13:76:1a:9c:02:fa:18:73:64:e6:73:d9:83:8e:c2:67:69:32:
d5:82:49:cf:ad:03:dd:12:33:cb:fa:d3:ee:cc:7b:7c:e8:88:
36:fe:7e:38:37:30:43:31:ca:9d:c9:3a:0a:d2:6a:a8:3f:7f:
82:4a:54:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 00:45:50 2025 by rpki-client