Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8148453f-7571-3fe3-8061-64e09f60d461.roa
File: 8148453f-7571-3fe3-8061-64e09f60d461.roa (raw, json)
Hash identifier: sZJ3Pdjf6MBUibIL2VSDWpE2a2KtclPzWa8LNyOJNXg=
Subject key identifier: 3F:EE:CE:89:FC:48:D1:B7:2B:E2:8C:FA:9B:F3:99:EB:40:4A:A8:B1
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F806251976ABABA9C35600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8148453f-7571-3fe3-8061-64e09f60d461.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33662
IP address blocks: 98.195.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f8:06:25:19:76:ab:ab:a9:c3:56:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=e8f46bb1-13b7-4c43-a2e2-7c056f08e70c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2b:f2:5c:7b:9f:1d:28:d7:55:81:f7:a3:c6:
00:95:fa:da:5e:c5:ce:2f:c9:d8:79:93:db:8c:73:
6a:d2:9e:db:85:56:42:a8:99:74:40:49:27:1c:c0:
37:83:6c:78:68:04:4c:b6:2f:78:9c:2d:42:34:76:
85:33:21:05:f7:9b:9f:53:e8:3d:a8:d9:9c:e6:42:
ee:43:1f:94:3f:be:d5:a9:5a:52:04:c4:47:76:ee:
ad:b4:bb:68:78:7f:8f:dc:f5:cd:58:51:9e:39:26:
cb:36:fc:ef:a8:d7:66:b6:48:6d:ac:26:b8:49:ca:
fb:39:d0:fe:89:29:3f:d2:85:58:40:56:0a:35:1c:
01:28:45:86:f2:40:95:1d:3d:4b:b1:1a:3b:ea:8b:
32:75:72:14:e3:20:e9:67:79:12:25:65:65:75:4a:
6e:60:6a:09:9d:4d:2c:51:ec:3b:5b:02:d4:b1:31:
7f:76:c1:47:91:09:28:93:d3:fd:f8:7c:91:ec:28:
4a:af:d6:d9:23:59:71:35:8d:2d:c0:c0:27:1e:e7:
e8:e6:82:54:b8:6d:b6:09:a3:0e:e0:5d:5d:2a:6e:
13:69:68:60:9a:bd:2a:3c:cb:42:3b:3d:18:7f:b1:
33:66:01:2f:a7:a8:a5:32:62:33:72:6d:dd:bc:9c:
68:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:EE:CE:89:FC:48:D1:B7:2B:E2:8C:FA:9B:F3:99:EB:40:4A:A8:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8148453f-7571-3fe3-8061-64e09f60d461.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.195.202.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:b7:33:86:ae:f3:17:bb:95:95:ff:3f:80:de:2e:4e:40:ae:
22:f7:03:4d:bf:7a:df:00:90:a1:b1:6b:ed:1e:5d:21:40:8a:
b0:52:18:d2:c2:04:92:71:62:66:db:79:e8:ed:5f:e4:76:b6:
3a:2f:f2:db:95:ce:f2:a8:c0:64:17:d5:19:9f:19:b5:6f:72:
9e:ab:ee:5b:f1:09:46:14:d9:0e:76:af:61:18:3b:bf:21:cd:
79:da:ba:ee:57:f3:30:26:99:d1:ff:c8:a8:76:5c:2c:da:cc:
7e:61:9e:c6:f3:e9:28:f8:7d:8d:e8:2e:b1:cc:5c:a9:26:de:
21:fd:f8:72:56:f4:8c:35:a0:44:77:22:74:52:3a:77:05:30:
6e:74:1d:e1:7b:03:e5:79:49:ea:e6:08:9e:0b:56:f4:84:36:
90:14:75:d8:58:74:76:de:9b:7e:60:83:a1:44:e2:c1:73:3e:
81:37:34:e5:5e:eb:ce:ad:13:dc:f4:e8:ea:65:dd:09:63:87:
81:18:cb:45:e2:c5:99:44:c5:29:66:a4:c1:99:f6:ed:28:a1:
66:c8:5c:dd:02:69:44:01:9a:72:30:95:35:27:84:95:a0:23:
f3:36:3d:a2:0e:28:d0:f1:26:37:d2:25:fe:47:c7:65:23:60:
c1:45:22:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 05:48:14 2025 by rpki-client