Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/871f7103-b473-3405-a714-a50f5df1ae3d.roa
File: 871f7103-b473-3405-a714-a50f5df1ae3d.roa (raw, json)
Hash identifier: Ue49UXXlMuRTkMB/h8Vo5CgHdBEFngYY330CMmB0V5k=
Subject key identifier: 79:35:ED:48:76:6A:44:52:AE:85:F2:37:DD:4C:A6:A6:A8:6A:16:CA
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F8F9E53CE0085E6AEFDB10
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/871f7103-b473-3405-a714-a50f5df1ae3d.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33668
IP address blocks: 73.161.8.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f8:f9:e5:3c:e0:08:5e:6a:ef:db:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=6001545f-048f-405b-b743-8fd883c9921e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:89:9d:39:9e:66:8c:e0:02:ff:97:07:b4:60:
c5:6f:db:44:2d:e6:b4:00:5e:b8:44:40:8f:88:1f:
17:d5:05:f8:59:53:c3:1f:f3:d3:f2:eb:1f:9c:a5:
bb:32:95:2c:b6:89:c7:23:7f:4e:fc:36:81:d6:97:
e8:d3:a9:b5:17:81:12:ac:00:56:68:52:61:ca:93:
39:0b:0b:61:cc:93:2e:e3:cb:33:a6:f1:f5:27:aa:
cb:5d:eb:c9:8e:0d:4c:f9:91:bb:d2:2e:6a:59:81:
3e:30:a0:99:82:d8:11:e8:da:46:93:09:6e:30:18:
73:a5:fe:9a:e5:a4:de:68:ca:f1:1c:12:c7:95:03:
9a:e3:ef:bb:e9:c7:3f:61:29:3c:55:fe:44:8f:c1:
06:dc:97:45:1e:26:f8:d9:2b:26:3a:c3:e2:14:f1:
52:2f:aa:07:9e:d8:86:0f:c0:89:37:84:a0:a5:ea:
b6:ee:be:8b:07:39:3a:be:2a:2d:5c:e0:0a:68:e3:
8b:4d:7c:0e:fe:5a:42:f3:25:ea:2c:18:96:1e:bd:
4f:37:f0:4d:58:e7:23:a6:92:91:af:51:17:db:04:
1a:79:e0:5e:04:79:fb:f0:4c:30:35:c1:19:c7:b7:
5d:84:fc:db:cc:7f:5e:4c:e0:4a:fa:26:f7:dd:0c:
db:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:35:ED:48:76:6A:44:52:AE:85:F2:37:DD:4C:A6:A6:A8:6A:16:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/871f7103-b473-3405-a714-a50f5df1ae3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.161.8.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:42:e3:d2:4d:59:d2:05:31:44:a7:a1:8e:d0:e2:f5:4b:57:
18:3a:a6:0f:11:4e:d1:13:eb:40:71:94:98:0f:d5:34:e0:d4:
d0:0b:95:33:c1:db:d3:a6:d8:59:06:92:58:72:24:59:a5:48:
96:18:ea:5d:04:67:a8:d5:63:60:0c:8d:4d:1f:5f:1b:5f:90:
e2:3c:5f:22:82:d2:2d:36:3d:a2:e9:96:b2:11:8f:e2:e9:72:
fb:e8:c4:86:02:0a:35:4d:a5:fd:86:ca:47:db:94:39:71:5b:
69:81:e5:73:f4:6b:f7:97:b5:7a:77:8f:a9:57:4a:8e:36:4f:
5a:17:4d:2b:a5:39:da:c5:af:1f:ef:fe:07:ad:5d:08:f6:08:
e5:11:35:44:cf:ca:2a:41:d9:95:d2:a8:da:26:dc:9b:d3:49:
9f:9e:84:f6:52:4a:d5:16:22:27:c4:8b:cf:2b:ff:5d:1f:76:
7a:41:aa:a0:53:b6:87:5d:27:c7:d9:49:e9:3a:77:26:86:a0:
ab:85:0e:ec:32:e8:09:cf:23:cb:6f:0b:56:3c:02:c5:d5:02:
4c:df:d4:6a:36:62:23:e7:e1:2e:00:69:31:a4:42:09:82:48:
bc:38:6d:e6:39:1a:cf:cd:8c:ed:de:7d:71:90:9f:36:9d:71:
f2:1a:c3:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:15:53 2025 by rpki-client