Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/821a5104-0561-3b12-b790-ed4a4e444c02.roa
File: 821a5104-0561-3b12-b790-ed4a4e444c02.roa (raw, json)
Hash identifier: 9RJbopN27lIP+gU2MMGd153mi3qBqCzbwh70DbpYGvU=
Subject key identifier: F5:01:38:80:45:3B:4D:D4:24:A1:F3:95:DA:5A:91:78:E3:2F:E6:26
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB1611A1B33F0F284CA7DF0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/821a5104-0561-3b12-b790-ed4a4e444c02.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33491
IP address blocks: 98.34.16.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b1:61:1a:1b:33:f0:f2:84:ca:7d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=2e739aa5-e88c-45c8-92ca-b48cc4cd5e68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e2:ae:fc:85:d2:03:9e:51:e1:6f:c4:ba:92:
76:62:95:7b:d0:af:5d:ea:ff:12:50:c0:f3:76:29:
81:81:39:05:05:ed:91:ea:11:2d:aa:ee:76:ca:e5:
61:a7:b7:13:ed:67:b6:3c:7c:80:23:c5:6a:0b:37:
ae:17:73:e1:e2:14:08:f7:44:f3:90:92:fe:73:d4:
83:52:dd:31:d0:09:dc:24:27:ef:71:22:dd:67:a5:
09:92:a9:49:60:b8:d9:7a:a0:8d:48:56:0e:71:92:
ed:bc:03:4a:fd:c8:57:b1:e6:34:9a:b4:31:6c:32:
c1:a1:74:da:c1:64:27:df:34:a0:e2:5b:b7:6b:bd:
fd:2f:93:c3:87:3a:26:40:e6:c1:a1:82:9a:fe:cb:
3c:d9:76:20:ac:a2:35:79:f6:e3:2f:66:ee:8a:9c:
6d:e3:b5:0b:1e:30:0e:32:98:97:75:e4:f0:16:4e:
05:7d:08:e6:78:3e:a5:bc:34:0b:45:e6:4b:f0:b0:
97:82:d2:44:da:68:9e:18:0f:00:1c:15:08:56:d1:
f9:1a:14:8f:1b:3e:14:e9:22:d0:d0:cd:a3:1c:8f:
20:7c:94:ae:59:0b:d9:16:d2:55:82:36:71:af:c2:
ce:fa:79:73:48:14:8b:ab:3a:17:d4:d9:83:ce:a7:
dc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:01:38:80:45:3B:4D:D4:24:A1:F3:95:DA:5A:91:78:E3:2F:E6:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/821a5104-0561-3b12-b790-ed4a4e444c02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.34.16.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:27:cc:9b:1e:43:57:66:c3:d1:d1:65:98:02:8d:18:35:6e:
3e:a3:58:80:38:a7:dd:f7:71:16:1d:e5:9e:12:a7:78:8a:fc:
ff:4a:e2:d6:65:6d:3e:5e:13:5d:69:69:1a:af:76:04:de:c5:
33:42:18:87:73:26:56:a2:8e:45:94:c7:e7:a0:e2:d4:6d:66:
04:f9:1b:1f:22:41:ee:80:32:08:81:8e:a2:96:f2:0a:28:b8:
fa:a1:81:bf:9c:65:93:d0:8b:25:78:31:a6:14:d5:37:03:26:
18:2b:7b:3d:0d:8a:f0:c5:68:65:79:83:d8:2e:76:16:a2:9c:
19:85:43:e8:5e:31:2f:a1:30:40:28:a8:4d:84:d9:bf:d3:88:
79:f1:28:14:f2:e5:26:6b:63:7d:e9:09:4d:ca:1c:a0:8a:b8:
db:f5:0d:59:27:d9:f1:db:48:03:d8:35:69:a6:23:b1:89:60:
1c:d6:3f:e0:65:fc:de:ee:06:6d:79:68:47:5c:d5:fa:03:92:
cc:03:0e:59:99:99:b3:ef:43:61:d0:21:2e:ce:62:05:bc:5d:
12:0c:13:d6:67:c0:3a:46:b8:40:e4:94:00:8c:36:5e:79:73:
1f:41:90:a7:70:97:64:73:19:c1:80:41:14:b0:99:a6:05:98:
a1:6d:98:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 23:16:57 2025 by rpki-client