Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9d623f27-5389-3150-bc94-5a997e9872e4.roa
File: 9d623f27-5389-3150-bc94-5a997e9872e4.roa (raw, json)
Hash identifier: Ewl3RxCqD7hJxerMj1erDTNyfFlDD9E74NORMCgKhPI=
Subject key identifier: D5:35:AB:2E:F6:85:8F:50:F9:ED:16:89:77:EF:60:5D:33:CB:CE:D5
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB058750605BE51B48AF2C8
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9d623f27-5389-3150-bc94-5a997e9872e4.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33659
IP address blocks: 73.33.12.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b0:58:75:06:05:be:51:b4:8a:f2:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=3b31893e-8222-4081-98b8-694582c285fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c6:c7:4f:16:78:1c:72:81:97:00:92:c5:b1:
21:0d:91:8e:58:e8:bd:bd:48:cc:c2:34:f1:a9:c4:
83:b6:d5:b3:0b:61:c2:f6:3b:ff:c5:d4:c0:c6:f2:
41:12:f1:b2:03:7a:f0:46:e7:20:d5:b1:5c:18:1a:
fa:6b:f3:8e:52:73:89:4c:a8:b2:ab:51:22:87:b0:
82:d4:66:4c:e1:87:7b:50:9e:08:3a:8e:a6:b0:35:
a6:28:03:a9:3b:a5:83:2d:8f:6e:f1:7e:30:a7:67:
d0:f2:93:cc:e2:db:0b:7a:04:3f:be:59:ff:88:82:
03:b0:88:48:bd:b8:9b:4e:18:25:36:ff:f5:58:5b:
0a:77:77:49:6f:b7:85:cb:bd:ef:c2:fd:06:6d:26:
00:25:20:33:47:21:6c:fc:35:05:d5:82:2e:75:89:
81:3d:3f:15:dd:b3:48:d7:26:4e:f3:c4:9d:1e:eb:
50:3e:f3:31:73:28:f0:b1:be:46:5b:a7:33:de:da:
f8:4a:7e:73:79:b7:22:1f:b4:e7:0a:08:e0:5f:44:
fd:43:9a:d8:18:e0:01:aa:b7:ce:2c:09:8c:d3:e7:
ea:9b:99:3d:13:79:2f:92:5d:cd:26:99:d7:82:4e:
cb:e2:79:a8:3a:cf:fa:bf:eb:83:66:48:7d:84:d1:
64:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:35:AB:2E:F6:85:8F:50:F9:ED:16:89:77:EF:60:5D:33:CB:CE:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9d623f27-5389-3150-bc94-5a997e9872e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.33.12.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:c7:b6:b3:c5:b7:bb:99:0d:b5:45:97:30:12:5c:5f:93:e1:
ec:09:53:a4:59:17:c9:0d:84:06:5a:90:05:f4:a0:71:ff:08:
3e:b2:25:1f:c8:41:1e:bb:c5:2a:33:92:27:e3:48:18:68:a0:
f6:6c:09:47:92:04:61:ab:46:2d:06:6f:13:f0:bb:92:ea:31:
15:c7:77:aa:75:a7:75:f3:40:0a:0f:cd:19:11:7c:0a:48:64:
30:66:a3:27:e9:70:f8:08:da:ec:7f:b7:ec:57:eb:72:74:97:
14:c4:cc:ca:5c:76:3c:05:f6:2b:aa:cb:d3:94:99:86:29:2d:
4b:74:f9:6d:4c:68:bd:c3:e3:a8:0e:bf:20:07:5a:aa:61:43:
7c:fc:b4:3e:44:7c:7d:30:11:6f:05:ea:d9:71:90:67:a4:3d:
eb:2d:34:ef:63:b9:33:b9:d4:36:00:eb:82:88:b2:aa:a1:10:
00:20:7f:5a:e0:ff:75:1f:34:6c:56:6f:e5:aa:68:d8:41:4a:
e3:18:82:06:9b:7b:8f:8a:82:b4:96:60:7b:37:6f:b2:2c:cf:
38:aa:ed:7d:30:6c:7b:11:e9:56:c6:3b:52:8e:b0:12:3a:18:
67:a3:02:5d:49:a4:a4:18:5c:59:14:8c:4f:80:cf:91:53:66:
fc:55:65:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 00:20:51 2025 by rpki-client