Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9b29b8e9-d17f-3104-81af-a06abc2ddf29.roa
File: 9b29b8e9-d17f-3104-81af-a06abc2ddf29.roa (raw, json)
Hash identifier: xUFaKeuG3gQUiuQVZo8/dhgxcsXh1Yxi4wna1vln/R4=
Subject key identifier: 04:2A:4B:44:7E:57:9A:F1:CB:C5:43:33:21:56:18:8D:7C:8E:F2:EE
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285849203C9B7D66F20A9443054A40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9b29b8e9-d17f-3104-81af-a06abc2ddf29.roa
Signing time: Sun 09 Mar 2025 02:00:39 +0000
ROA not before: Sun 09 Mar 2025 02:00:39 +0000
ROA not after: Sat 07 Jun 2025 01:00:39 +0000
asID: 7725
IP address blocks: 71.207.208.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:20:3c:9b:7d:66:f2:0a:94:43:05:4a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 9 02:00:39 2025 GMT
Not After : Jun 7 01:00:39 2025 GMT
Subject: CN=5af0d472-a884-4d6a-8554-deec660b95a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e0:dd:97:bf:60:8d:09:32:18:74:4a:26:8c:
46:a8:fc:84:7e:13:61:6c:3f:34:90:e9:7e:e3:85:
40:65:b5:b8:31:6e:cb:17:e8:bb:f3:96:0b:b6:61:
b8:03:36:3b:f7:8a:c7:2f:80:35:4f:d8:fe:62:16:
d4:5b:70:bf:fd:eb:64:7c:6e:80:76:63:68:60:4d:
30:39:7c:ed:a6:af:3e:75:10:d5:cf:6f:85:e6:95:
cc:87:48:5d:25:52:3f:d8:80:26:f9:98:5f:b4:03:
e7:1f:b7:a0:a4:55:f3:27:59:06:cc:a6:aa:f1:25:
12:e3:b2:4f:7c:e4:fa:91:3d:1b:55:8d:9c:50:03:
32:6f:18:12:58:d9:87:17:1a:f9:b2:3b:bc:5a:e6:
e1:73:fb:d1:41:95:ed:a8:51:b5:53:1f:43:5e:5a:
49:7b:5e:1b:2f:c6:b6:40:0e:17:a7:31:f3:2e:cb:
c9:2e:5e:39:0e:c6:bb:5c:cb:a6:31:6f:e2:99:16:
0e:4b:b1:e4:4b:de:24:d6:4c:3b:73:c4:6a:1a:ec:
24:d9:62:2a:59:ca:b3:05:db:b9:88:d6:c9:76:a8:
05:93:0d:3e:c5:cd:af:cc:12:39:d6:86:2b:36:f8:
0d:49:4d:6c:47:db:3e:44:5e:9e:e0:a6:6b:b1:84:
57:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:2A:4B:44:7E:57:9A:F1:CB:C5:43:33:21:56:18:8D:7C:8E:F2:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9b29b8e9-d17f-3104-81af-a06abc2ddf29.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.207.208.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:13:80:a4:f1:19:af:04:1a:82:05:c8:d4:dc:e7:c2:f0:0b:
ae:45:ba:b9:ee:83:01:cb:13:af:3d:e8:3f:95:14:86:c2:3b:
e2:16:2d:cb:84:fb:19:2d:b1:0f:d0:5d:c1:7c:ff:c8:02:ae:
e5:c2:fa:d1:9c:8b:3b:6b:a5:4f:13:b2:16:ad:ff:36:f0:8c:
f0:6a:25:84:ad:e0:f0:0f:7a:0c:3e:15:bb:40:16:df:48:74:
65:96:b3:ca:1b:f2:e4:96:0f:27:5c:e4:28:ef:85:e2:ae:07:
fa:95:dc:85:fb:0c:6c:0f:e1:07:61:db:c9:07:88:bc:3f:83:
9b:f4:1e:f4:77:de:61:13:72:39:7e:e6:65:8b:69:34:c1:15:
e0:cd:de:7b:08:2e:f5:3d:5b:2e:ec:d1:d9:38:81:1d:d3:97:
4a:ef:c0:f5:09:8a:e2:31:e9:c6:15:ae:99:bf:37:c5:35:bb:
4f:d4:c4:a4:f3:f2:22:d8:c7:a5:18:70:9c:5e:00:35:37:60:
36:af:82:35:1b:70:52:a2:cf:f4:3e:82:b7:cb:3e:fc:da:a0:
27:88:5d:ca:d0:28:c5:97:8f:59:3e:95:f0:19:65:e2:32:34:
cd:b9:00:6b:03:67:66:50:a9:48:9e:c9:b4:dd:83:f0:3c:15:
98:0e:b1:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:42:20 2025 by rpki-client