Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d869424d-d5bb-3658-9767-af1069f819c3.roa
File: d869424d-d5bb-3658-9767-af1069f819c3.roa (raw, json)
Hash identifier: RrnSpRllIoJXwO0VsVDnCCqRdD3mQHUCbEJ1ZUdeTzA=
Subject key identifier: 26:F2:C1:E5:08:AF:68:81:6E:86:98:F8:02:D1:0B:D3:49:19:12:83
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858497DA4993516722A721F43EC60
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d869424d-d5bb-3658-9767-af1069f819c3.roa
Signing time: Fri 11 Apr 2025 13:01:00 +0000
ROA not before: Fri 11 Apr 2025 13:01:00 +0000
ROA not after: Thu 10 Jul 2025 13:01:00 +0000
asID: 22909
IP address blocks: 76.114.78.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:7d:a4:99:35:16:72:2a:72:1f:43:ec:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Apr 11 13:01:00 2025 GMT
Not After : Jul 10 13:01:00 2025 GMT
Subject: CN=0c9bd8f0-361a-4355-8b2f-15a8297fec79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:67:fb:67:4c:4c:e8:74:45:a9:c2:2a:55:f5:
01:61:20:d1:a2:31:26:c8:49:de:a5:4a:32:26:a5:
e9:b0:4e:ae:7c:15:23:79:77:cc:5a:c4:49:40:3c:
5f:46:2e:a8:2e:be:6f:b7:af:45:bb:1b:fe:41:96:
b6:98:3e:cb:1f:d2:47:37:02:e1:6a:15:b3:7c:3b:
4b:ef:4c:40:fa:b1:45:04:a2:ff:42:7f:2c:2d:dc:
3b:b6:e9:9d:fb:37:2c:d5:8c:60:e1:d7:ea:a2:cf:
17:93:5b:c2:ca:d1:99:e3:dc:a3:31:d7:56:0c:9f:
dd:81:8b:0e:79:34:92:99:0c:f9:7c:2b:94:41:b1:
04:f7:bc:39:fc:b3:68:a5:d6:2f:de:73:d6:b1:f4:
9b:35:1b:a9:91:6e:61:a8:50:28:76:ba:25:47:d3:
e1:95:e0:18:af:75:56:b5:1b:d3:46:3a:fe:88:5b:
f7:85:9b:e5:a9:d4:2c:6f:35:a8:53:3f:34:66:49:
f6:14:69:c6:e9:68:73:38:47:66:4f:08:b8:f1:98:
7f:8e:ce:e9:3b:0a:59:67:80:63:c2:ff:bd:fa:02:
c3:bc:a9:6e:be:03:a9:da:43:0f:34:c9:b8:be:2a:
78:b3:db:d7:3c:7e:32:a4:7d:49:35:d0:1d:ff:ba:
31:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F2:C1:E5:08:AF:68:81:6E:86:98:F8:02:D1:0B:D3:49:19:12:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d869424d-d5bb-3658-9767-af1069f819c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.114.78.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:8d:01:1e:d6:dd:ff:6e:bf:db:22:5b:35:a1:76:38:2f:e6:
ae:8e:06:ae:37:03:2b:c6:31:bc:8b:a6:a1:0e:e4:93:5b:b5:
94:e2:f6:bd:55:dd:85:fc:f6:be:42:18:61:84:35:2c:84:56:
cc:54:e9:af:dc:82:a3:a3:c3:b3:90:24:8d:86:0e:0b:3d:ae:
b1:dd:f7:fc:8d:46:36:9b:aa:b8:6c:d2:cb:2f:6b:47:c5:a5:
3d:a6:2c:53:7e:62:43:0a:64:64:c2:f8:09:0f:be:30:dc:c7:
15:a9:07:95:27:33:a8:a1:1b:3e:3e:fe:8b:ac:e7:0b:c7:86:
07:eb:65:71:be:0b:cb:03:24:4e:ef:b9:c7:3a:ec:d3:0f:b1:
6f:0b:1e:c4:e0:ac:40:47:85:92:6c:20:cc:95:97:44:c9:4c:
a1:89:b7:ac:58:16:e2:41:fb:a1:27:8b:76:13:ec:0e:61:c1:
c9:bf:53:d9:aa:6b:67:17:54:74:d3:77:33:ff:85:40:46:01:
f6:76:12:1d:d4:f9:90:cd:be:70:16:6c:3c:b5:34:0c:43:7a:
29:2c:f0:c6:05:2b:c1:50:7f:22:32:8b:11:9d:05:13:38:0b:
18:0e:83:26:58:53:0a:2a:3d:a6:d0:e6:aa:0e:78:5e:71:4d:
b9:89:90:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 18:40:06 2025 by rpki-client