Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c602d90-a361-3382-8451-f6d0eab05ec4.roa
File: 8c602d90-a361-3382-8451-f6d0eab05ec4.roa (raw, json)
Hash identifier: fZTc3AZpbi8RP3N8GWIhef5STpLg3QV2/HxazN8tciU=
Subject key identifier: 33:9F:A8:12:0B:F3:6E:5F:55:AC:E7:C3:1E:43:AE:AC:7E:B1:59:CC
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CAF6AC4EB2937624C5C3380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c602d90-a361-3382-8451-f6d0eab05ec4.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33491
IP address blocks: 73.176.228.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:af:6a:c4:eb:29:37:62:4c:5c:33:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=f6bd1fcb-b07c-48f3-90f0-a2caee911ed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f6:2e:1b:f8:d4:f2:25:76:0f:03:85:e6:98:
84:c2:60:0e:3a:f1:c9:24:c3:df:57:b4:c6:da:fb:
eb:73:90:ea:71:b8:54:c1:67:53:89:20:09:7b:b5:
9b:de:e0:77:fd:22:bb:46:73:5e:09:a7:17:4d:17:
df:9e:88:81:1c:54:fb:3d:20:46:d9:aa:66:f4:31:
65:cc:38:ed:ce:3c:97:5d:e2:5e:49:13:ab:1b:61:
7b:4c:a9:42:5c:dd:f8:61:4f:31:00:28:39:32:b5:
3f:36:64:49:21:51:12:08:a3:c3:df:75:d2:6c:ad:
b0:83:ab:cc:6a:6c:3d:e2:64:ca:e8:0e:f0:28:8f:
c8:47:5e:ec:27:de:49:d1:4a:6b:de:8e:64:74:70:
14:f2:c5:62:96:f7:e2:b9:2b:60:a0:56:a6:2e:83:
7f:27:2e:46:c8:e5:83:28:2d:9f:6d:14:c9:ef:5b:
57:40:fa:46:8a:b5:65:e9:d2:98:ef:00:eb:49:04:
51:ca:ea:bc:98:39:b8:43:9e:c4:47:40:22:51:f0:
43:00:09:df:20:45:4b:62:46:b6:55:b5:4d:c6:e8:
94:2e:9e:c5:de:4c:6c:61:48:d6:7b:ed:27:c8:10:
dd:13:3c:d8:2e:41:48:d0:c9:cb:50:22:ac:3a:e7:
dc:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:9F:A8:12:0B:F3:6E:5F:55:AC:E7:C3:1E:43:AE:AC:7E:B1:59:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c602d90-a361-3382-8451-f6d0eab05ec4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.176.228.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:f0:0e:bf:13:ec:1e:57:91:28:71:f4:dd:72:a6:0c:ba:24:
be:81:3b:9f:a1:0b:17:78:80:31:52:9d:13:2c:c8:94:d5:c5:
b6:bb:4e:ce:ae:61:7e:c1:e3:c5:f0:cb:48:54:af:83:0e:9f:
8f:d3:fe:d2:a1:ed:0b:41:9d:60:3e:9e:08:45:ff:dd:d1:f1:
db:c7:24:19:8f:50:19:90:e1:1c:a9:6a:74:cc:57:6a:c7:b8:
69:a2:a9:7e:f8:5b:ce:9a:cb:d4:04:2e:6c:26:79:48:e6:14:
0f:0b:07:0c:b0:68:95:a1:ca:56:59:68:5c:67:36:46:88:ee:
49:55:0a:79:fa:e8:e6:cf:ab:77:0d:17:39:36:f8:8a:b1:a6:
26:23:65:06:6e:67:e5:2d:7c:e1:fa:0d:90:ea:65:f0:5e:57:
8c:de:60:23:5b:79:30:47:2c:4f:6c:10:33:2e:2d:39:60:5b:
fe:d6:4f:8e:63:80:4f:1f:a9:df:88:0f:39:ad:48:d8:c5:fd:
03:fe:20:c0:35:5b:70:b5:9d:a4:3b:b0:28:5e:c2:8b:64:f0:
80:b4:b6:a2:e3:d0:4b:46:cc:d7:96:f0:59:04:ed:e2:be:bb:
4b:ed:42:09:0d:45:3a:13:9c:c8:54:1e:40:de:d9:30:ae:9c:
ad:9a:a0:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:00:35 2025 by rpki-client