Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a6a4e0c5-7c26-34a0-8e76-6623e93bb520.roa
File: a6a4e0c5-7c26-34a0-8e76-6623e93bb520.roa (raw, json)
Hash identifier: ZGwNw7NPv12HNClamwCaAVSWLinwG58qwsqD47v72aU=
Subject key identifier: 42:F9:0B:60:89:12:DE:35:2C:89:34:1D:D1:1C:B5:63:7C:91:B3:39
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB0975B9EAF74CBA811AD40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a6a4e0c5-7c26-34a0-8e76-6623e93bb520.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33287
IP address blocks: 71.230.150.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b0:97:5b:9e:af:74:cb:a8:11:ad:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=2d609495-c63a-4c12-9375-0906c0682286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9d:46:46:b3:34:c1:3c:04:13:6d:e3:66:65:
bb:57:9a:a8:0f:25:ee:3b:85:c3:9d:89:21:02:fc:
c3:fc:2c:67:e9:62:2e:84:16:b7:3e:8e:2c:53:28:
3e:46:92:c9:3e:63:42:2e:89:0b:e3:10:5a:da:57:
c1:9f:25:99:04:da:c1:ce:09:a2:a7:bc:28:66:a7:
ac:e2:62:1d:f5:7a:13:a2:2b:4b:8a:c0:51:9e:bd:
7c:28:92:b7:31:f7:c5:62:ac:0f:9a:30:2f:67:ec:
c3:ce:6a:c5:fb:c6:d5:da:b6:d1:a3:dc:e9:13:16:
94:02:21:ae:5b:43:e6:04:16:8e:0c:ad:8a:95:42:
14:39:da:0c:dd:d7:f0:11:07:c5:57:16:5f:00:5a:
21:a6:b2:16:b6:03:66:b1:04:09:71:08:25:30:b1:
59:b4:01:d1:ff:c7:49:8c:0d:c5:03:70:ba:eb:6e:
35:37:d3:b5:bb:91:0d:d1:03:af:12:75:6f:ae:ee:
e4:dd:25:1a:0d:86:90:4a:81:03:17:b2:48:9c:14:
9a:73:39:d6:a5:65:67:69:fe:3f:2a:de:73:90:4f:
67:92:ab:d4:eb:3c:5b:34:78:39:33:0f:1b:27:c6:
5a:e8:dd:db:b0:b2:41:6c:07:31:a4:23:9f:53:7d:
80:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F9:0B:60:89:12:DE:35:2C:89:34:1D:D1:1C:B5:63:7C:91:B3:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a6a4e0c5-7c26-34a0-8e76-6623e93bb520.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.230.150.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:0e:59:5e:95:a2:0c:88:3b:51:91:78:00:2c:89:c2:a1:9d:
63:37:f8:0b:fc:5d:48:c6:74:e3:3a:cb:b2:54:0c:2e:0b:c9:
dd:2b:95:68:b8:b5:c4:14:57:62:4e:f7:d4:79:21:07:d4:d1:
16:fb:ed:e7:12:b6:b4:9f:91:77:5c:8b:bb:d5:ec:be:73:6f:
23:dd:dd:1e:c9:dc:1e:f7:cb:c1:a7:61:e7:9f:5c:7a:97:b3:
76:ce:c3:d8:1a:b2:64:d5:90:f2:ec:a7:9d:4b:05:60:26:fa:
4a:e9:dc:1f:b7:42:fe:2f:6e:82:3b:39:15:79:00:46:db:d8:
e5:15:f3:25:6a:15:4f:66:12:91:88:09:8d:52:91:44:97:ca:
21:b1:dc:26:09:08:3c:d3:bf:38:1f:65:1f:b0:0a:7e:95:bd:
bf:9f:a4:9b:86:35:43:b2:c1:05:c4:66:a4:6b:2c:21:87:7b:
2a:c4:db:e4:aa:c8:87:02:c3:8d:08:17:6c:62:f9:84:23:ea:
d0:30:4d:ef:ca:c0:69:0c:3e:80:f1:1d:c6:6c:75:d5:bf:6b:
ee:22:7e:81:00:29:79:8f:f1:dc:a2:f7:e4:b9:f7:a6:e2:c5:
17:6e:7f:91:34:01:48:c2:c7:25:a8:fe:52:9c:eb:cf:72:ef:
8f:28:d0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:59:53 2025 by rpki-client