Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ffb6a52f-7ccf-3286-bd9c-fa7e2ba2bb4c.roa
File: ffb6a52f-7ccf-3286-bd9c-fa7e2ba2bb4c.roa (raw, json)
Hash identifier: 9VqXJmIXIfVPPlo8WVjuMBwA8pDKxY8FmCDG4XAoJf0=
Subject key identifier: 36:BF:7D:58:72:36:B1:71:EA:5E:FA:03:43:90:6D:9D:43:2A:96:36
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F797087C428AFCAEE1F780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ffb6a52f-7ccf-3286-bd9c-fa7e2ba2bb4c.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33668
IP address blocks: 68.55.208.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f7:97:08:7c:42:8a:fc:ae:e1:f7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=e3cd633e-a163-4cb8-93ce-5b5c7cb3689d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5c:4c:a3:c3:46:f7:43:d8:f3:87:84:96:49:
20:14:b8:3a:f7:bf:52:2d:c3:68:62:16:4e:20:a9:
3f:e5:45:7f:06:36:1d:87:d2:95:4d:72:67:96:13:
a7:72:ce:a3:56:1f:5c:cf:aa:d4:39:9c:0e:a1:60:
a3:f7:90:20:b0:ab:5b:56:1b:40:0d:bd:73:4f:45:
30:8e:05:35:e9:f7:28:4f:40:28:42:a0:61:dd:c8:
81:c1:b8:da:12:1a:39:95:00:9d:8a:c0:4a:04:98:
9f:d7:3f:70:f9:ae:a3:e2:f0:6c:86:2b:39:5b:6a:
2a:fc:a4:9e:9b:8d:c4:9c:e1:cc:8d:c4:a0:90:87:
92:de:38:f5:a1:2c:af:19:78:74:89:9a:32:bf:18:
f9:59:94:f1:bf:96:dc:f4:8f:39:70:4d:ae:1e:93:
25:d3:74:d6:cc:0c:cf:51:26:52:c6:11:f7:0b:e2:
13:23:66:94:95:5c:a4:f7:cc:a5:53:5b:d3:c6:18:
6c:1f:eb:65:3c:38:24:1d:10:70:e1:39:fa:40:a1:
3f:ef:2d:84:2b:1d:89:96:d5:0a:1e:4d:f8:b4:cf:
5d:25:60:89:eb:43:12:2b:90:2d:8c:21:4c:c6:3d:
7f:f6:07:c3:ac:33:6f:42:73:d8:de:21:47:5e:8f:
b2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:BF:7D:58:72:36:B1:71:EA:5E:FA:03:43:90:6D:9D:43:2A:96:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ffb6a52f-7ccf-3286-bd9c-fa7e2ba2bb4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.55.208.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:b7:57:b3:46:fd:a5:6c:1e:d8:b1:50:32:1c:15:7b:53:88:
33:b3:39:92:af:e1:20:e0:5a:ef:a4:82:f3:de:3a:04:d5:8d:
58:c2:19:83:9b:89:5e:d6:3d:ec:1d:ab:65:99:e3:76:58:fa:
2d:c8:e9:ec:a4:39:a8:26:13:b8:20:4f:a4:d1:ad:ef:06:7c:
ff:b9:71:14:04:0f:2e:8b:65:96:4d:22:57:a0:99:e5:9d:e9:
b0:02:5d:5d:48:d2:ae:eb:7b:64:26:33:73:7c:2b:0c:6a:2c:
03:07:26:df:b3:7a:4d:8d:6e:30:35:ed:c1:a4:c2:bf:d0:27:
21:5a:9d:05:d1:5e:4a:a3:fa:fb:c1:76:8f:ce:e9:5a:8b:7a:
f0:54:09:37:aa:16:1f:15:43:20:a6:b4:2a:2d:9a:69:0f:4d:
9a:dc:d6:28:41:3d:3e:27:c1:45:f3:cd:46:e4:e9:8b:28:fb:
ab:53:85:8e:89:c9:d9:7e:74:79:a1:1d:53:eb:31:2b:91:7c:
c0:4a:3e:d6:65:f3:ff:09:02:e4:55:a4:97:fa:8e:7a:82:bb:
f8:70:5b:a2:54:98:14:96:6f:a9:33:08:29:a5:e6:b0:7e:b1:
a0:ba:66:77:c4:46:43:14:8d:65:f7:f1:bc:34:5f:e0:cc:b5:
22:94:b8:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:42:32 2025 by rpki-client