Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cd0c76b2-6a86-3791-b3da-b5f3d01f2061.roa
File: cd0c76b2-6a86-3791-b3da-b5f3d01f2061.roa (raw, json)
Hash identifier: ROqkbiVfKeylQG94faW+RDhBVYbOX30HV+N1/Wbkglo=
Subject key identifier: 32:AB:A0:09:DF:33:F2:D1:51:38:B6:A7:3D:CB:C5:B5:11:23:BC:53
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB0AD9A62AAAA138F33DF00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cd0c76b2-6a86-3791-b3da-b5f3d01f2061.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33287
IP address blocks: 76.98.240.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b0:ad:9a:62:aa:aa:13:8f:33:df:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=cfc6225b-fe42-4b11-ac78-1e8c1522170d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:a2:e3:f1:2f:b1:c3:f3:4c:9f:bf:a4:75:d0:
47:b7:8d:dc:c6:f5:31:a9:49:50:de:51:d1:db:74:
40:db:bf:67:bb:d6:f2:c0:7e:df:20:93:76:f4:15:
93:f9:3c:cd:0d:87:a7:ae:1c:98:04:54:1b:3c:49:
53:9a:bf:74:2d:6d:8f:7a:92:f7:85:60:a0:46:e6:
94:0b:dc:f3:f9:9f:9c:bf:4a:7e:6d:16:34:e6:43:
a2:1d:f8:fb:e3:89:5c:61:9d:39:df:6a:9f:f0:d5:
48:e8:06:a6:6b:80:eb:e6:e1:22:3c:1e:a0:67:fb:
46:3d:68:bf:52:f7:86:6d:12:7f:fd:84:79:29:c7:
56:6b:2b:72:db:fe:ce:61:ed:a9:9a:a4:c0:dc:df:
24:81:75:9b:b4:20:68:a5:df:0e:33:c5:28:d6:f2:
76:2d:15:20:48:1e:ac:5f:b0:2d:11:ae:50:8d:8b:
94:12:9a:0b:06:c9:d1:aa:3e:b5:36:53:04:1a:73:
c2:3c:2d:95:26:5e:66:15:d8:22:1c:ee:0b:5b:d3:
3c:c7:db:05:96:72:51:37:33:be:05:24:ce:f9:ab:
81:8f:c7:d5:d9:84:c4:81:c0:50:ea:d0:d2:6e:7f:
04:36:fa:f8:01:6e:5b:5c:d8:a1:8b:55:72:1b:38:
fb:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:AB:A0:09:DF:33:F2:D1:51:38:B6:A7:3D:CB:C5:B5:11:23:BC:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cd0c76b2-6a86-3791-b3da-b5f3d01f2061.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.98.240.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:c8:2f:ee:4b:81:7d:ab:6c:c8:c9:a5:a7:5d:83:55:5f:98:
0c:12:0c:f7:c5:be:f5:f5:31:57:87:53:f7:7c:41:8d:a6:d7:
42:fb:0e:69:4a:3d:18:44:7a:7c:a8:b0:c7:42:05:b4:df:fc:
7f:f6:27:6b:a6:81:31:e3:1a:64:84:e9:9d:60:d3:c9:4c:d9:
1e:43:32:b0:24:30:98:b4:5e:0d:ba:13:0d:8f:6e:ec:57:0e:
db:ff:ae:60:a0:09:89:9f:ad:e1:10:c6:f2:7f:02:fc:b5:9d:
c7:d9:38:cf:75:8e:07:f5:57:ed:47:d0:db:9b:5c:04:f9:2c:
04:bf:53:78:d3:27:76:7a:db:10:4e:5f:72:30:fc:51:55:e1:
e7:0d:2a:dd:c9:7c:27:6a:ef:26:4a:3d:dc:f0:c5:3b:0a:7c:
0e:5c:80:2d:b3:f0:56:53:95:be:df:13:14:c3:03:f2:b9:f8:
77:1e:9d:4a:0f:84:cb:31:68:a3:b0:63:8a:bc:3b:c6:1a:3a:
2f:ab:6c:e3:b2:61:10:31:a6:0d:99:d5:26:78:b8:ec:df:03:
50:49:43:01:d8:5f:c2:15:63:8d:85:4e:e8:53:e8:ef:bf:d1:
34:73:98:d0:cc:cc:9c:c1:66:2b:e6:cc:48:9a:f4:48:94:3a:
74:16:2f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 17:25:22 2025 by rpki-client