Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ccbc6bca-f42d-337e-bd2a-7173886b7ae5.roa
File: ccbc6bca-f42d-337e-bd2a-7173886b7ae5.roa (raw, json)
Hash identifier: /zruBbCwOxx9uJAcy6i9rtVKH5CKcMqjkF5AQD0Njf0=
Subject key identifier: AE:38:A7:2E:3E:0E:02:35:D6:33:CA:08:88:5B:52:AB:CF:C5:A9:35
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285849203C87597D6FA8D7F01D6DC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ccbc6bca-f42d-337e-bd2a-7173886b7ae5.roa
Signing time: Sun 09 Mar 2025 02:00:39 +0000
ROA not before: Sun 09 Mar 2025 02:00:39 +0000
ROA not after: Sat 07 Jun 2025 01:00:39 +0000
asID: 7725
IP address blocks: 24.131.54.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:20:3c:87:59:7d:6f:a8:d7:f0:1d:6d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 9 02:00:39 2025 GMT
Not After : Jun 7 01:00:39 2025 GMT
Subject: CN=76ed22ba-989e-4fa1-a7a8-7844544d30c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9f:d8:36:f8:ca:d7:63:06:ed:99:a0:b8:77:
31:db:97:3b:6d:62:c9:51:dc:ac:62:38:b2:aa:5f:
e7:78:41:09:d3:e7:72:8b:b1:14:7b:aa:46:37:fd:
f6:6a:c4:0f:b2:46:bc:23:a5:d2:56:15:2c:2e:80:
4f:23:e9:63:4b:df:ac:0a:6e:66:03:1c:8a:ef:56:
b0:7a:7c:a1:9c:b2:de:5f:b6:52:5a:93:5a:ef:ee:
21:da:30:d8:c7:75:92:55:3d:0f:fb:6c:78:a7:f1:
2d:3c:8a:7b:13:ea:97:8b:cf:e6:fe:57:7c:f2:3d:
a8:69:87:bd:bf:a7:d2:53:4e:82:6c:6b:dd:11:3e:
66:1e:4a:e5:e6:8d:35:83:1c:17:2f:11:db:a0:dc:
eb:6c:db:55:f3:13:47:4b:fb:34:ee:64:6f:f6:10:
a9:64:dd:fa:64:6d:38:b0:82:68:1b:f7:38:97:aa:
db:bf:fc:71:0c:c1:bd:ab:d1:02:31:13:4b:27:76:
b4:6a:99:ae:75:d3:f9:41:c9:d3:78:b0:ad:f1:d8:
0a:a3:be:5d:29:c3:69:17:fc:99:10:9f:04:fb:ca:
f4:35:48:12:1f:6b:18:60:87:a5:c1:4f:97:f9:ac:
a4:db:6c:fe:7e:4d:6b:d7:7c:60:a3:c4:05:07:4c:
7e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:38:A7:2E:3E:0E:02:35:D6:33:CA:08:88:5B:52:AB:CF:C5:A9:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ccbc6bca-f42d-337e-bd2a-7173886b7ae5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.131.54.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:24:0c:f7:88:d3:c5:43:c0:c2:42:bb:50:4d:1d:02:1d:8e:
28:5d:7d:c3:6c:43:2c:0d:74:43:b9:0e:53:74:36:ba:e8:49:
cf:a3:0c:df:95:81:12:68:ce:13:cd:0f:b5:71:6e:f8:bf:b7:
e3:41:a7:8f:4c:9f:2a:2e:40:b0:3b:1e:fe:a4:14:a5:42:6a:
30:0a:b3:8a:16:35:65:1b:16:3b:f9:5e:85:c0:ff:07:e9:e1:
fd:ce:1b:e1:0d:6d:74:44:ed:60:76:61:85:6c:9d:98:3b:f0:
10:0c:04:14:32:f9:59:9c:4f:3e:11:a0:fa:1f:dd:d0:68:9d:
19:a9:50:56:de:77:2b:0f:60:a1:2d:3d:8f:e1:1f:1c:b9:e4:
2f:79:4d:c0:d8:7f:17:81:e8:20:f8:bb:8b:e6:c2:de:72:72:
55:2c:b3:be:5d:58:87:dd:3d:75:91:de:be:6b:2e:b9:13:b9:
bf:27:c1:79:66:33:c7:6a:49:dd:a4:49:d5:27:7b:e4:f4:29:
16:a9:a8:4d:0a:a8:83:65:1e:82:4b:b5:78:13:56:b8:92:2d:
24:5d:0b:e4:24:da:78:b4:8b:bb:d7:31:1a:4d:d6:cc:49:e9:
c8:53:38:ed:ca:42:70:12:4f:5f:cc:c2:1f:3b:37:c1:e2:8b:
b5:a5:d0:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:57:49 2025 by rpki-client