Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a25ec7f-23af-358b-b131-d41c75735160.roa
File: 8a25ec7f-23af-358b-b131-d41c75735160.roa (raw, json)
Hash identifier: tWUbhuQwlqgvrasWNoRZ8y746HY1KrNVlYEt6vL6p7s=
Subject key identifier: 03:FB:49:7E:99:98:6D:34:C2:D6:26:6D:67:DD:2E:A4:21:8F:1D:84
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CAF13C99417D5F781EE5900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a25ec7f-23af-358b-b131-d41c75735160.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33287
IP address blocks: 73.165.38.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:af:13:c9:94:17:d5:f7:81:ee:59:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=de9b1dbe-da5e-4bc4-9010-eaace00072f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e8:ef:07:8e:e8:2a:3f:1d:95:51:08:a4:d0:
c5:5f:bb:f1:7b:4f:cc:e1:62:df:2f:e1:c2:5e:8d:
85:c1:75:dd:34:0f:06:22:54:42:17:30:35:c0:de:
a3:e1:52:56:16:0e:76:09:9b:d9:e7:13:5c:7d:8c:
41:cf:c8:b1:19:e8:a8:99:69:4f:5d:28:81:3c:bf:
93:33:03:7e:69:e0:2c:af:f2:a5:8c:a3:22:58:44:
4b:ad:66:5b:88:b6:40:44:37:c5:0f:c9:b5:e5:05:
ab:10:35:23:b0:5c:8e:9c:ce:27:2e:a1:32:58:06:
13:4c:5f:c4:f8:01:14:5c:30:32:0b:0f:8a:f6:5b:
1d:9a:bc:02:bf:59:8b:24:73:a3:6d:e4:24:ec:47:
8b:09:02:e6:2e:51:30:55:34:14:a8:88:7c:0c:63:
00:62:99:e3:32:e9:1c:c7:24:02:24:fd:49:17:e3:
c1:77:d0:76:c3:75:41:61:2f:77:4b:40:a0:cf:82:
1c:73:4e:d7:3c:bc:0a:ea:b9:6c:81:c8:2a:81:1e:
76:c0:a0:2d:8d:c4:b9:d0:53:1d:c3:dd:3e:c8:c8:
e9:28:f0:c8:d9:4a:1a:d8:a3:03:d6:30:ed:d3:68:
ae:ae:09:12:59:bd:43:06:55:c5:8b:46:22:7d:4b:
ea:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:FB:49:7E:99:98:6D:34:C2:D6:26:6D:67:DD:2E:A4:21:8F:1D:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a25ec7f-23af-358b-b131-d41c75735160.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.165.38.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:39:31:a0:82:6c:a5:52:58:9e:27:be:62:e9:11:56:ee:f5:
c6:33:6b:28:19:ae:93:72:f1:d6:3a:b0:c7:11:03:f7:fe:0b:
7c:4b:03:a7:94:22:52:4e:fa:e2:70:59:3f:56:f2:cc:fe:6b:
00:dd:b0:09:5c:7b:ed:0d:31:43:58:b9:87:68:11:33:bf:9c:
2d:11:84:87:a6:31:5b:fa:22:d8:b7:16:85:66:5f:34:e6:24:
f5:9f:58:44:37:e2:6f:73:ea:c1:ae:6a:26:5b:f5:6d:e0:4b:
f8:8c:27:13:0e:8b:1e:1b:fa:8d:8c:02:dc:b1:b8:c8:37:2d:
a5:5e:fd:9e:62:b2:34:3e:0a:b3:5a:b5:2f:3b:e0:e1:66:84:
0a:a8:20:f4:7a:92:89:dc:f1:74:8e:af:d1:f4:d2:8a:c2:7e:
4d:e4:82:1c:1f:bc:f7:d1:f4:55:87:2b:b0:b0:e1:0a:34:12:
95:6a:3c:72:3f:49:f6:2f:e6:25:6a:4c:65:25:d9:52:60:dc:
14:64:41:fe:50:2d:a2:64:58:6b:40:cb:91:4f:60:4c:c9:7d:
be:d6:96:6d:9f:17:11:30:e7:63:47:1f:eb:ac:bf:38:17:a1:
9d:97:3a:0a:c9:78:fe:35:ab:7c:43:9d:d4:3a:1a:58:57:ed:
d5:97:59:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 13:32:16 2025 by rpki-client