Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9dcf0fe7-dd06-357d-88bb-898aff90368a.roa
File: 9dcf0fe7-dd06-357d-88bb-898aff90368a.roa (raw, json)
Hash identifier: PN9ccTvSeBqsEVGcDbfkMvel4G8yIqJ94JjxOukdB5s=
Subject key identifier: 66:D2:23:47:5E:EE:0C:6B:A3:9D:9D:A4:A0:1B:5D:A0:2C:24:AD:A2
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F22C38A7A662480A1B0C3140
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9dcf0fe7-dd06-357d-88bb-898aff90368a.roa
Signing time: Thu 20 Feb 2025 14:00:52 +0000
ROA not before: Thu 20 Feb 2025 14:00:52 +0000
ROA not after: Wed 21 May 2025 13:00:52 +0000
asID: 22258
IP address blocks: 73.127.112.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:2c:38:a7:a6:62:48:0a:1b:0c:31:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 20 14:00:52 2025 GMT
Not After : May 21 13:00:52 2025 GMT
Subject: CN=2fdc5371-abed-4c97-8ad7-2576c622cd77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:51:da:5c:3e:4f:c0:11:33:1b:32:c6:4f:0e:
e4:bc:23:0c:21:6e:fa:1d:5a:69:71:23:e3:56:bc:
3c:c7:16:cb:66:0c:ae:7a:79:15:44:2c:55:e9:e7:
2f:ba:bc:f9:da:8b:4f:b8:d8:18:49:55:57:71:5d:
71:58:cd:20:23:d8:9b:4a:58:bd:93:43:a5:19:82:
6a:ea:67:0f:3b:01:fa:16:85:15:2e:43:64:72:a5:
7f:ea:32:8b:69:d1:47:6a:32:e0:08:79:f2:9d:a1:
aa:1b:9e:53:85:7b:8f:20:33:e3:3f:16:3e:92:cf:
03:b2:7e:2f:1d:ae:17:17:25:77:fb:04:b1:2e:c4:
dc:9c:73:78:e2:e5:76:89:81:d7:ef:74:dd:22:af:
6c:3d:4b:a2:bb:bf:88:da:69:f3:8d:5d:cc:04:22:
bf:56:d4:05:e3:95:f9:11:06:52:9b:b0:7c:1a:48:
cd:df:6f:ea:c5:bb:95:bf:d0:16:04:88:c5:93:53:
f8:65:b4:9a:42:42:1e:14:9d:46:48:f2:97:3a:b2:
4a:7e:ad:8a:07:d2:92:3a:7f:c3:61:8c:65:d6:09:
6c:fa:6c:00:33:89:a2:ff:de:3c:a3:f1:18:69:cb:
e0:7e:1e:49:c6:41:7e:46:6b:19:7e:d2:dc:d9:0f:
be:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D2:23:47:5E:EE:0C:6B:A3:9D:9D:A4:A0:1B:5D:A0:2C:24:AD:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9dcf0fe7-dd06-357d-88bb-898aff90368a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.127.112.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:ee:26:97:40:7b:87:24:be:63:42:42:c0:14:3f:56:54:9d:
41:87:f8:8a:cb:0f:e0:ad:14:30:5e:13:28:9f:58:7f:37:f6:
95:39:5f:b8:d3:07:32:ea:f6:d0:25:96:17:8b:b5:45:9b:ed:
dc:06:19:64:53:33:7e:af:42:88:f3:15:f2:8b:14:e1:a4:90:
ee:38:a6:77:35:fe:8f:0f:e9:b2:9f:cb:75:d5:b7:34:b5:a9:
99:fe:d9:6f:dc:b9:37:6d:9e:02:4e:fa:70:d9:4d:80:76:d8:
44:9d:21:15:66:6c:48:bd:1b:f3:b1:53:a5:01:6f:69:2f:66:
fe:19:c6:ec:e8:24:f9:62:4e:16:19:42:ad:cd:a0:46:d6:6e:
35:b9:5f:33:a2:b9:e6:94:47:d3:f8:f4:f4:33:78:76:be:52:
2b:6e:47:59:b8:a9:ba:2e:e4:f9:86:6f:c8:57:24:3b:70:1e:
69:19:3f:f2:58:af:ce:0a:09:db:d8:d6:c5:9f:77:3f:94:be:
61:68:11:e0:77:7b:06:9a:88:ca:68:7b:3e:69:a6:70:54:ea:
7d:c1:8a:94:62:a4:9e:74:fe:4d:22:06:ce:41:9e:59:e9:86:
71:3a:6f:31:7c:06:4a:05:d9:34:54:27:27:1d:21:40:54:3a:
99:3d:fd:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 21:40:05 2025 by rpki-client