Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa571aa9-5022-3512-9ecc-0ad326ce7dbd.roa
File: aa571aa9-5022-3512-9ecc-0ad326ce7dbd.roa (raw, json)
Hash identifier: DtxZ7KfP179f9HVeS5KvPqy/WOB0YveA5humk/V+GwI=
Subject key identifier: DD:1D:05:61:5C:EC:BF:71:AF:61:BA:F2:22:BE:81:04:3C:A2:2E:94
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848B261A5E36B610F9182252480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa571aa9-5022-3512-9ecc-0ad326ce7dbd.roa
Signing time: Tue 28 Jan 2025 17:37:31 +0000
ROA not before: Tue 28 Jan 2025 17:37:31 +0000
ROA not after: Mon 28 Apr 2025 16:37:31 +0000
asID: 33491
IP address blocks: 71.239.64.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 17 Mar 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b2:61:a5:e3:6b:61:0f:91:82:25:24:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 28 17:37:31 2025 GMT
Not After : Apr 28 16:37:31 2025 GMT
Subject: CN=53f221af-d23b-4307-b006-74f388fdbffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:34:fc:40:a3:a1:75:63:66:59:0a:36:87:76:
f9:04:dd:72:ca:98:2c:78:43:4e:5b:57:25:d6:5c:
e6:67:d8:f6:17:9c:51:b9:82:85:be:2d:48:96:2b:
21:25:9e:1c:0b:c7:96:10:52:95:65:73:fa:c8:aa:
e7:18:e7:c5:68:df:bb:a7:ef:0e:86:8d:05:30:09:
c3:67:56:7a:1c:e8:b5:c7:d4:02:b2:1a:41:72:11:
0a:92:f7:08:87:96:f6:af:dd:3b:70:26:9e:28:41:
60:84:bf:27:f2:9b:f2:55:09:fd:31:d6:2c:d0:da:
ae:9a:64:58:59:db:0a:48:96:c7:04:81:ef:14:ee:
0e:b6:dd:34:6c:ee:70:27:0e:cf:be:2b:a4:54:6c:
82:74:cf:30:dc:be:41:ee:ea:2d:92:48:e2:26:a8:
67:a9:02:ad:1d:c1:62:a4:26:6b:01:fb:7e:f4:18:
ed:61:c1:b1:a4:03:ab:c1:38:8f:76:03:b4:66:e8:
e2:d6:a0:b1:17:d9:96:d3:96:5b:18:24:91:dc:af:
1d:af:2b:c4:08:0a:9d:84:ef:83:6d:c0:ad:e4:a0:
b3:0c:c5:dc:79:c4:78:fa:23:9e:39:50:ff:54:bb:
17:01:d7:49:94:5a:7f:6c:f2:dc:66:31:23:ad:af:
74:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:1D:05:61:5C:EC:BF:71:AF:61:BA:F2:22:BE:81:04:3C:A2:2E:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa571aa9-5022-3512-9ecc-0ad326ce7dbd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.239.64.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:1e:6e:9b:a4:ba:f4:ab:0b:db:b4:37:e9:08:42:c4:1c:75:
98:1b:b1:05:48:6c:b2:7f:60:3b:e1:e8:e8:76:58:84:a7:23:
b2:af:58:a2:11:9f:db:f7:ab:57:b0:c1:00:ae:69:6f:31:94:
50:81:d4:55:93:87:e6:5d:a7:95:4e:f9:34:c8:89:46:fc:c1:
2e:de:c9:9e:8d:4f:6c:62:30:7d:06:2a:94:51:34:3b:d8:99:
0b:4e:20:f7:72:7d:bf:3b:4b:ab:15:0d:4d:51:db:28:85:4d:
8b:5d:a6:99:c3:f8:b9:a1:cf:79:99:f6:03:91:a6:14:77:11:
db:c4:34:ef:c3:4b:ec:14:57:6a:a9:2c:dd:c0:c8:3a:f7:62:
f9:3b:94:b0:6d:78:d7:28:5c:50:77:99:8f:89:de:45:77:1d:
c0:70:cd:3f:87:31:36:b7:d2:d1:a6:1e:60:9e:62:3b:22:91:
6b:fa:c5:43:38:f3:1e:fd:07:66:cf:b5:1f:86:b9:4f:2b:cf:
cb:67:6c:64:61:41:75:2f:d9:cf:e2:d5:ae:3a:46:05:d4:78:
73:5d:4f:9f:1c:17:ed:ed:d3:0b:fe:3f:da:5b:c1:3d:f6:7a:
e3:47:34:42:0e:ee:14:54:05:46:d7:0f:c4:cc:2d:1c:1e:74:
1a:c4:ac:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 15 00:20:28 2025 by rpki-client