Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af7b786d-8ad8-38d2-97c2-8e470e2fa8a1.roa
File: af7b786d-8ad8-38d2-97c2-8e470e2fa8a1.roa (raw, json)
Hash identifier: wR6gJK9xMVQjG8t9TJed8CrXkYj5wPCWHEGQ+zTJ+4I=
Subject key identifier: 32:50:EF:64:B1:C6:04:C6:88:EE:FF:CF:A9:40:83:46:6D:15:EA:EB
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F8E64E4C9033B5DB330700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af7b786d-8ad8-38d2-97c2-8e470e2fa8a1.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33668
IP address blocks: 68.43.250.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f8:e6:4e:4c:90:33:b5:db:33:07:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=f0dc1f52-46e3-4c5b-97a0-088fd6784902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4d:49:fe:7f:02:85:28:29:3e:64:48:48:79:
d3:57:1a:06:22:13:e1:f6:8b:cb:13:fb:f2:cb:11:
4f:e1:ee:f7:60:86:21:8b:a2:0b:04:5f:7c:65:cc:
d5:0b:50:e2:11:16:5a:82:38:81:a9:f5:19:e5:56:
b7:00:be:68:83:e8:35:c3:dc:e6:bc:e2:69:09:b0:
0c:d2:e7:d0:23:65:40:0e:53:21:21:bf:77:c5:e5:
63:e6:d0:86:43:0b:bc:ec:ce:ab:b8:a8:24:f0:d1:
25:d0:34:0c:dd:3c:65:1c:d4:2c:4f:90:be:01:dd:
e0:e3:d2:92:b4:7e:c2:2b:13:cf:20:e3:0b:7c:70:
b4:3c:18:3c:24:af:8b:df:96:a8:e6:d0:d5:04:71:
ac:ca:d1:76:82:5e:b4:e6:46:68:78:70:af:8b:02:
c3:e7:c8:89:19:46:78:c8:6c:80:1d:a8:cd:95:2e:
70:63:96:1c:1d:6e:f8:78:bd:8e:51:c5:bf:de:cb:
a1:75:7c:4b:b9:09:cc:64:00:b7:13:5f:65:b4:fe:
42:95:5c:e5:b8:34:dc:26:2e:9f:f4:5d:59:71:dd:
74:7b:e3:84:09:0b:f7:32:0a:dd:a7:91:2c:5d:b5:
85:6c:0e:ed:86:49:b4:86:c1:fd:b1:51:b9:89:2e:
f2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:50:EF:64:B1:C6:04:C6:88:EE:FF:CF:A9:40:83:46:6D:15:EA:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af7b786d-8ad8-38d2-97c2-8e470e2fa8a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.43.250.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:11:2b:ae:eb:44:9c:57:21:0e:fb:fe:87:1f:dc:f9:6e:66:
80:74:73:85:50:58:cb:51:42:24:01:65:a3:70:ae:89:cd:17:
13:7d:cb:c9:95:b5:83:64:f0:52:9c:76:a1:3a:e2:79:a4:26:
24:d7:cd:0b:87:0d:a5:14:66:ad:12:ca:1e:d9:0c:22:f7:3f:
fd:a6:58:b7:89:f1:9d:8e:37:c8:b2:35:a0:81:2a:00:0f:51:
ed:bd:9f:23:e7:8e:b8:83:b9:49:ea:4a:4e:31:49:2f:d4:26:
2c:ff:4e:1a:62:3a:ab:aa:47:6d:fc:60:5e:da:9a:4c:a9:24:
57:a8:ec:ff:c8:70:75:39:48:54:30:ec:23:24:c9:4b:c9:9d:
52:7a:1b:88:c5:d9:a4:fa:8e:c7:50:2e:bc:9c:eb:ce:b1:69:
9a:d0:09:fa:b2:65:98:95:84:e8:e5:da:b1:6b:95:23:f4:43:
8e:0a:64:8c:ba:22:5f:5d:e4:62:0d:7e:ef:d4:45:2b:fe:77:
e2:54:04:43:e5:1f:4f:6a:5e:68:9f:d1:a4:1a:a7:7b:ed:c7:
6a:ec:ba:d9:dd:c5:06:4c:9e:e5:df:49:f5:6e:8b:c4:cb:84:
4b:e5:82:4f:45:27:02:fc:4b:33:57:1c:63:88:36:cd:1c:44:
64:1e:50:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 11:28:04 2025 by rpki-client