Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b488090c-ad89-3c11-a1b0-ed91779afc04.roa
File: b488090c-ad89-3c11-a1b0-ed91779afc04.roa (raw, json)
Hash identifier: aKaTfjo7K1eJQZD8cD/NdTJi/YqaBZWvLhyRzFPbWbI=
Subject key identifier: 63:76:BA:7E:B5:E2:15:A5:0A:E7:51:D1:C4:6F:7B:9F:B1:D1:BC:6F
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6C76D4F3FA9847F9FBCBA0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b488090c-ad89-3c11-a1b0-ed91779afc04.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33287
IP address blocks: 96.114.60.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6c:76:d4:f3:fa:98:47:f9:fb:cb:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=7457cfa2-c176-4c2f-8211-4b41ae262645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:11:31:55:38:90:c3:e3:63:8f:55:f7:c4:8a:
4c:4d:9e:7e:fc:7a:dd:d5:cf:98:92:e8:5b:35:56:
46:e4:f2:02:24:e0:e7:79:cf:18:79:9b:32:13:db:
c2:ba:76:b7:13:72:48:50:58:b3:f0:e5:be:d2:8c:
91:a1:74:7d:4e:14:80:a1:10:b5:b1:61:5a:80:5b:
e8:bc:8c:15:8a:e1:05:d7:fd:48:28:71:37:fc:53:
af:48:6a:ba:1a:74:2e:94:a6:17:df:41:5a:97:13:
60:8b:ad:bb:ea:9c:3e:60:9f:53:40:da:31:2b:a2:
6e:7e:91:24:38:e8:9b:84:3f:94:9a:62:a1:f5:6f:
89:87:3e:47:1b:2e:7a:ff:43:e7:af:88:48:5e:de:
cf:c1:4f:69:cc:fd:e6:a3:ca:90:48:30:02:03:3a:
0e:5c:f8:06:f8:b7:39:da:ac:16:04:16:9c:f7:96:
d9:8a:55:5e:c3:4d:d1:70:20:d7:42:c1:b1:de:f2:
3d:08:ce:b7:be:a6:c3:96:83:ea:a0:e9:30:f7:26:
ec:fe:de:78:ba:ff:3f:76:ac:4c:a3:88:59:cb:a7:
63:1d:d8:64:b7:7e:6b:02:08:a9:2c:ef:0e:ba:67:
53:5b:ad:d1:31:b7:09:cf:72:21:d3:3c:a1:c1:d5:
cb:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:76:BA:7E:B5:E2:15:A5:0A:E7:51:D1:C4:6F:7B:9F:B1:D1:BC:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b488090c-ad89-3c11-a1b0-ed91779afc04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
96.114.60.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:d7:19:d4:cf:b0:39:46:11:15:8c:c2:7e:0b:03:db:f6:03:
7d:62:96:d4:e4:8e:d0:f1:eb:e9:09:32:c7:f5:c3:0c:7c:88:
f6:81:c2:9d:65:4e:2e:d8:24:b1:24:e8:c4:05:e6:b4:2b:39:
10:27:f5:dd:8b:0c:5b:a6:8b:4e:d9:54:33:38:f1:fa:51:dd:
d7:28:e6:89:c9:52:69:72:9b:31:c8:f9:f3:a6:31:b4:72:88:
c4:73:07:6e:a5:0e:b3:29:ce:f4:a7:b5:b5:28:80:6d:0b:f7:
97:ae:c1:5a:ca:b9:28:6d:f0:04:31:d8:5a:16:ff:70:c5:bc:
3a:e0:15:8c:64:79:9b:90:1f:9c:7c:83:ac:3f:d0:13:64:30:
49:29:45:ab:69:2d:2b:8e:8f:38:94:48:f0:ca:fd:2f:00:d9:
99:c2:5d:47:89:97:1e:f1:d1:66:53:3f:28:ee:81:ae:e0:c7:
4d:f8:ba:3a:bf:44:78:00:a9:5d:3b:67:a3:34:b1:9d:3d:fa:
c0:fb:11:2b:67:9b:68:d1:6a:eb:b8:64:b4:c7:21:cf:1a:4c:
10:b3:20:a2:e7:1e:38:f4:79:7b:d2:d1:6d:23:62:3e:98:e4:
d5:c3:f7:a1:1a:14:e1:34:5d:48:a2:be:48:f6:10:34:27:6b:
e8:a3:60:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:48:06 2025 by rpki-client