Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b850561f-fc00-32af-9771-13c630b18e3c.roa
File: b850561f-fc00-32af-9771-13c630b18e3c.roa (raw, json)
Hash identifier: 7emOA0G5Nl5uZ/xqsFrR2K2mV0TBaY3GbP/C0ZA6Qgc=
Subject key identifier: 4A:0D:A5:41:E4:AE:3E:F5:06:E1:2F:C1:6B:C4:F7:F3:81:A9:81:4B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858497DA5376BAC3DF3A371F20E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b850561f-fc00-32af-9771-13c630b18e3c.roa
Signing time: Fri 11 Apr 2025 13:01:00 +0000
ROA not before: Fri 11 Apr 2025 13:01:00 +0000
ROA not after: Thu 10 Jul 2025 13:01:00 +0000
asID: 13367
IP address blocks: 73.65.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:7d:a5:37:6b:ac:3d:f3:a3:71:f2:0e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Apr 11 13:01:00 2025 GMT
Not After : Jul 10 13:01:00 2025 GMT
Subject: CN=0287f512-15ae-44e6-beee-82ac0ee899c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:47:c0:99:c5:90:c2:e2:41:1d:f9:59:0f:98:
e5:33:de:a2:ae:72:fb:c1:8d:73:fa:93:1f:17:16:
00:7c:14:68:35:de:7d:40:87:bc:9b:17:51:5f:ba:
17:53:be:92:1f:b6:d1:68:2d:a0:97:16:4e:49:02:
79:c4:9b:61:3f:67:72:6e:f9:77:43:f6:e8:22:eb:
6f:32:e7:09:90:0e:24:53:ea:43:4b:6e:bd:6b:28:
b3:88:25:4e:25:8b:9a:9a:10:b2:6c:86:a2:64:7d:
55:46:40:37:e2:06:ca:77:2f:0c:ef:ef:84:b2:46:
4f:e7:9e:b9:86:1f:34:dc:a3:1d:7a:c3:74:02:1c:
98:34:ae:1e:3a:a0:d9:09:29:61:64:aa:b1:be:3c:
04:00:72:97:23:8b:ad:9f:39:ce:35:63:eb:65:3c:
8f:c2:a6:c6:9d:97:94:af:84:29:b3:f2:61:08:90:
16:28:f9:1d:8e:e3:70:bb:72:1f:98:75:9e:53:dc:
61:21:64:e9:e9:3b:66:0b:c3:07:5e:c3:c5:f7:68:
de:b7:ad:7f:d8:cc:e6:b3:fb:03:cd:ce:a4:0e:fd:
6e:37:58:73:47:5d:2f:94:90:a7:c6:a0:44:fe:50:
be:31:90:f3:80:8f:4d:47:d5:3c:be:cb:fd:e5:ac:
8a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:0D:A5:41:E4:AE:3E:F5:06:E1:2F:C1:6B:C4:F7:F3:81:A9:81:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b850561f-fc00-32af-9771-13c630b18e3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.65.52.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d6:58:c8:cc:be:6f:c4:e8:dc:fa:ca:7f:98:9b:6d:07:6c:96:
8d:71:be:30:15:d3:36:60:8c:82:15:0c:cc:f5:87:2b:32:cc:
64:7e:06:5e:d3:40:03:9b:b4:d4:c8:44:87:e4:9c:64:5e:11:
76:c6:de:d4:89:85:ea:1e:e4:68:26:f6:14:b8:10:3f:7e:6b:
83:d2:c6:6c:c8:84:70:41:78:8b:0d:d2:44:97:98:67:ae:e3:
54:4b:fd:9f:01:2e:45:50:93:2f:2d:00:45:f2:9c:e4:17:44:
68:14:3c:15:ab:ce:c5:dc:8a:94:23:36:0b:1a:75:b3:37:d1:
35:a6:14:b0:1a:cc:05:46:c7:21:46:28:bd:12:5b:8f:94:80:
8a:97:c0:55:d6:81:fa:85:81:12:ab:23:00:00:72:8d:7d:d0:
b8:7c:06:b0:9d:08:e2:8f:bc:7c:ff:93:65:0c:cc:03:50:62:
40:9a:b0:30:52:9b:90:89:38:2c:c0:bb:b9:7c:10:60:59:02:
ca:52:a7:d7:1d:ad:63:18:20:50:5d:b2:df:f7:97:20:8c:5d:
03:d6:a0:9b:4e:7b:d0:2a:ca:cc:62:5e:c6:1e:b1:b3:0f:1f:
18:e0:51:57:54:79:75:9b:8a:ed:12:f0:d7:b9:7e:98:7f:ae:
9f:d7:7b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:33:34 2025 by rpki-client