Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfa18ba0-35fa-316a-94a8-ea57a1ce80a4.roa
File: dfa18ba0-35fa-316a-94a8-ea57a1ce80a4.roa (raw, json)
Hash identifier: Hcz20GBriP9cDaacsk4MMVlurvTS1Cx2Fnz2fySU38c=
Subject key identifier: 17:63:06:00:27:09:67:CD:8A:8F:8C:09:81:BA:77:94:0D:E5:27:18
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CAEE7E9C4025BFBD0517300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfa18ba0-35fa-316a-94a8-ea57a1ce80a4.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33659
IP address blocks: 73.199.108.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:ae:e7:e9:c4:02:5b:fb:d0:51:73:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=52041804-2a70-4095-b680-97ca34f38be6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:50:e4:f8:14:db:12:b8:d4:f6:62:92:50:bd:
f6:b4:80:13:e8:f9:0a:59:0f:53:21:6f:db:62:ef:
29:60:d8:6b:69:d3:bb:e5:7e:46:64:88:15:fd:ea:
27:89:25:26:b7:a7:48:d0:18:81:d4:a5:0e:65:8f:
a0:89:e9:e3:6c:f9:e1:37:91:38:ff:6e:1a:08:8d:
b2:5e:06:cd:11:e5:aa:bf:5e:30:a1:3b:57:4b:c6:
76:0d:ac:40:32:21:40:05:19:10:0c:10:bd:43:5b:
8b:6f:1f:47:79:89:c9:9d:5a:3e:0a:ac:3d:38:c0:
da:6c:ed:dc:89:ba:20:24:27:b3:d0:76:44:71:83:
56:f8:91:cd:79:49:20:87:e7:41:58:dd:d6:84:51:
79:89:fe:79:a0:88:e7:e7:ad:b1:bd:0d:bf:61:e1:
4c:3d:5d:e4:0d:f9:7d:a3:7b:db:be:c6:eb:33:a6:
a5:2f:07:16:c5:02:4c:89:75:a7:db:d6:6e:54:fe:
f0:d1:02:e6:51:17:2f:83:6b:cd:fa:e2:e4:6a:b3:
9c:5b:28:31:15:97:a7:6f:be:b9:36:f6:d3:d3:eb:
00:d0:74:82:d1:e2:09:24:5e:4b:ff:ae:53:84:b0:
7c:a6:de:35:e6:03:19:88:d0:3b:5e:20:84:29:ee:
33:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:63:06:00:27:09:67:CD:8A:8F:8C:09:81:BA:77:94:0D:E5:27:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfa18ba0-35fa-316a-94a8-ea57a1ce80a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.199.108.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:cf:fe:e2:5e:0e:73:8b:c0:0b:59:6d:ca:e2:2e:34:b6:b3:
69:1a:b6:9f:32:c3:7f:29:d5:3f:7f:42:ad:62:3a:3b:51:b7:
b3:9e:37:43:4a:7e:d4:02:50:78:66:58:c6:34:df:0a:bb:e9:
14:06:0a:bb:ab:b6:f4:b9:1b:0b:f8:8f:f0:86:e7:b2:1f:32:
ff:61:13:5b:23:a6:c6:0a:1e:de:27:0d:fa:46:69:b0:11:81:
8a:51:d0:6e:5e:fc:74:28:58:1a:56:5d:29:12:25:06:0c:8b:
c8:e0:1c:be:b7:0a:6e:2a:67:51:63:aa:d5:44:3b:a5:65:3a:
9d:b9:2e:6d:c1:70:84:3c:ec:7a:b2:c4:bd:d9:95:4c:93:c0:
49:1d:73:3e:87:35:6e:e4:18:31:17:06:0c:9a:93:1f:2f:c6:
43:7d:c8:1a:17:f2:0e:56:65:ab:aa:93:40:0d:2d:3e:48:82:
30:ec:6f:0c:a9:44:10:7c:50:fb:33:99:a0:e6:ea:8a:a9:95:
0f:7d:d1:b1:a8:f4:69:e5:0a:30:4b:ee:53:fe:1a:a8:6c:ab:
50:f2:33:6d:da:05:32:64:c3:37:fe:13:19:fe:6e:82:ba:d4:
57:55:a1:7b:5e:d8:13:47:88:8a:cd:5f:4c:27:95:94:2c:a9:
c9:32:7d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 11:46:22 2025 by rpki-client