Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bc08ea97-8797-3922-a4f1-9a41b4b0e4ef.roa
File: bc08ea97-8797-3922-a4f1-9a41b4b0e4ef.roa (raw, json)
Hash identifier: qYcqIHXbwJxBUEkzxzEXgoizp1uEZgGLSKzMECAyOn8=
Subject key identifier: C0:52:EE:52:27:D6:C2:8D:74:CE:76:7E:0A:3A:2C:66:5D:4E:21:27
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB18F81BC5E3D8DB3029100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bc08ea97-8797-3922-a4f1-9a41b4b0e4ef.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33651
IP address blocks: 73.189.210.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b1:8f:81:bc:5e:3d:8d:b3:02:91:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=b8c54599-4656-4d41-bd3b-56dec5a6308e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:24:c1:f3:a4:d8:a1:96:e8:36:29:80:38:24:
1a:65:bf:b0:bf:22:5e:bd:6a:df:15:8b:99:68:76:
b7:28:48:df:40:25:f7:28:b2:e2:7a:97:d2:00:12:
0d:a1:3e:e2:e1:76:14:1b:a0:00:f7:b0:75:e0:e7:
b3:05:f5:3e:ca:d2:39:da:71:35:8d:21:e4:f6:85:
b4:af:f0:4c:40:0f:4d:47:53:5c:4a:86:20:9d:21:
a5:b2:c8:92:c2:a4:d6:fb:3e:c1:37:f7:2d:a0:d1:
fb:e5:e1:62:53:25:37:e9:25:80:87:30:12:22:64:
ce:72:f4:e1:ab:08:83:9b:d6:51:4f:eb:ae:e2:54:
51:b9:a3:35:d1:50:9a:e8:6a:3b:c7:fe:fc:48:75:
9c:85:2f:0e:53:5b:24:90:b1:79:91:23:9c:8a:88:
43:97:c1:69:95:53:25:2e:2f:43:50:ef:4f:6c:c8:
e3:73:be:26:9f:1d:ff:74:93:36:1c:31:4a:e7:3a:
14:9c:85:2d:f8:a9:9a:f6:81:2d:e5:d1:9b:59:cf:
6a:5a:1e:c0:8f:f5:18:99:99:f7:3f:0d:dc:7d:c0:
13:7e:d9:6e:cd:a0:cc:45:cf:80:60:dd:47:a9:dd:
4b:3c:f3:65:04:df:c1:e6:ba:33:6c:36:a6:eb:2f:
95:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:52:EE:52:27:D6:C2:8D:74:CE:76:7E:0A:3A:2C:66:5D:4E:21:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bc08ea97-8797-3922-a4f1-9a41b4b0e4ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.189.210.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:b3:25:71:c1:db:72:a1:8b:ce:36:3c:76:a7:5c:72:50:63:
e9:5d:78:3f:f0:04:a1:5f:5c:67:e1:a1:a8:74:4c:d6:e2:37:
1d:8f:b7:56:76:9a:79:0c:d4:55:a2:9d:45:f1:a3:95:e5:a6:
62:a0:b4:94:b7:87:1a:6d:d9:e1:ee:26:65:d7:42:d3:ce:13:
80:56:26:60:04:6b:9c:06:93:50:82:c7:5f:1c:14:f9:76:90:
4c:5f:7e:b6:4f:8e:f4:53:0a:b1:bb:b7:36:29:83:2b:83:0b:
fa:fd:db:66:c2:40:37:28:30:18:4f:7c:89:df:a1:8b:ca:49:
30:ea:a3:df:c7:ba:d4:d8:5e:bb:af:3e:82:e6:2c:2c:de:01:
f7:ca:b1:a7:59:27:11:73:fd:5c:9f:d1:1d:ec:07:19:f6:da:
00:cc:92:f5:30:8a:2c:7d:7f:72:dd:f9:9e:03:d4:95:d7:17:
29:ac:20:13:00:9a:98:63:0c:1a:2c:d6:2a:1f:24:7f:5e:59:
d8:f8:04:0e:f8:c0:07:d0:ee:be:a9:46:9a:e4:c7:e1:ba:c1:
3b:05:b0:e2:33:be:24:6c:48:f3:73:58:2b:23:0d:83:1b:40:
20:59:d6:ed:f7:f2:d0:62:ec:7d:42:62:27:97:49:d2:24:a3:
90:da:74:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 18:39:52 2025 by rpki-client