Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b89f17c6-aae0-33c8-81a4-b60af4ce54fa.roa
File: b89f17c6-aae0-33c8-81a4-b60af4ce54fa.roa (raw, json)
Hash identifier: LkDau4vkS2vjyah8z2YbW79JZTs9loNUa9B9RfHsprg=
Subject key identifier: AD:54:E2:CB:42:BD:A9:90:4C:55:C6:5A:4B:42:EE:2A:8D:C2:84:A5
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F6D8D9DB20A7B4CD375380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b89f17c6-aae0-33c8-81a4-b60af4ce54fa.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33490
IP address blocks: 73.96.180.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f6:d8:d9:db:20:a7:b4:cd:37:53:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=4832a434-5213-4d97-a73e-24f8714f86e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:84:0e:ba:b6:77:58:5d:be:a1:80:91:a6:7a:
bc:76:23:c0:f8:5a:40:24:47:3c:82:ac:3b:a6:3c:
f2:51:b3:c3:1d:33:0c:0e:c5:fc:10:21:cb:37:b4:
6a:ac:7e:61:2f:73:c1:ec:25:72:ea:1a:cc:1d:95:
3c:4e:91:6d:7c:9b:5d:f8:f5:6c:60:bf:ea:ad:2e:
98:70:07:1d:3d:b1:f5:7d:35:68:02:a2:65:93:a1:
8d:e8:b4:3f:c5:ca:87:c3:7a:ae:ea:38:aa:dc:68:
22:5c:07:5c:a6:f6:fd:eb:40:18:7c:bf:a1:dc:80:
a1:84:1d:bf:16:85:98:e9:24:78:50:c8:7d:0b:c6:
69:8e:4c:05:c5:0c:fa:34:38:31:68:aa:0b:a4:76:
e4:2c:ca:1f:f0:08:80:c4:55:e7:3f:23:2d:a2:59:
7d:a6:7f:49:25:4b:af:72:5f:8b:da:a4:23:cd:e8:
7f:61:e8:34:f9:df:87:1b:25:4c:5d:df:8b:52:8e:
87:7e:a1:24:3d:03:57:1a:0b:f3:55:5f:cd:6c:0c:
65:f6:d5:a1:e3:63:f3:62:95:ae:23:9c:23:a2:31:
27:99:44:b5:0d:9c:45:25:da:5c:28:85:58:25:d9:
b2:e4:da:40:94:58:1f:18:e1:aa:bf:9a:a7:91:56:
6c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:54:E2:CB:42:BD:A9:90:4C:55:C6:5A:4B:42:EE:2A:8D:C2:84:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b89f17c6-aae0-33c8-81a4-b60af4ce54fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.96.180.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:aa:48:bd:7c:45:42:80:6f:04:2c:da:48:3d:81:16:94:ff:
bf:66:20:6e:92:12:87:32:df:d0:84:14:5b:2b:54:5d:70:f5:
0a:80:9d:e0:99:0e:c7:7c:bd:2b:b8:2b:4c:98:83:2b:07:e6:
e8:06:4f:c7:4f:2d:88:d7:5b:9e:49:b1:11:9d:6f:70:0c:2a:
7d:32:2b:44:36:ba:fa:b0:27:ee:78:c3:da:50:94:ea:a7:05:
76:3d:2e:fc:42:30:84:15:15:d6:26:97:c4:a1:21:7e:a6:df:
d9:fc:fe:3d:d5:59:43:65:e4:e8:c4:2b:aa:c3:81:e9:d5:31:
71:61:b4:87:fa:20:d1:98:ec:96:d6:0d:aa:9b:ec:56:8e:e0:
1a:04:5c:e8:44:4f:e7:4f:8f:72:60:38:f0:5d:59:23:54:6b:
03:60:c9:77:75:87:a1:74:51:43:a5:14:80:7d:87:78:08:2b:
42:3b:31:95:e0:01:32:1a:38:2b:34:98:70:50:53:73:f2:0e:
ba:de:c1:55:ea:84:6d:5e:a7:3b:1b:a5:67:a9:7c:30:4a:63:
6b:86:34:dc:31:9a:94:cc:7b:dc:30:61:94:d2:51:d4:f9:cf:
64:c7:d0:4b:9c:9a:1a:f9:d5:66:c4:34:f6:f5:56:4a:e4:d9:
8d:54:98:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 18:20:42 2025 by rpki-client