
Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685/8b9911ad-f040-33b2-b95a-798133f79d2a.roa
File: 8b9911ad-f040-33b2-b95a-798133f79d2a.roa (raw, json)
Hash identifier: CuSUJ42q1EN1Dm9HRoAcNfWbvWRuCzR+frN6AQ3sCjs=
Subject key identifier: 3B:3E:98:0E:8C:2B:5B:9D:76:DC:F3:F2:1D:56:76:74:CD:2E:3A:B0
Certificate issuer: /CN=502018d6-5414-4889-b679-53ff6a9e5685
Certificate serial: 010D0C9F4328584968B4252D66979E84037F2200
Authority key identifier: F9:6B:8B:EC:BC:84:86:DE:93:EB:7B:24:1E:D2:4A:30:CD:4C:4D:48
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685/8b9911ad-f040-33b2-b95a-798133f79d2a.roa
Signing time: Fri 04 Apr 2025 01:00:47 +0000
ROA not before: Fri 04 Apr 2025 01:00:47 +0000
ROA not after: Thu 03 Jul 2025 01:00:47 +0000
asID: 28086
IP address blocks: 209.213.184.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685/502018d6-5414-4889-b679-53ff6a9e5685.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685/502018d6-5414-4889-b679-53ff6a9e5685.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:68:b4:25:2d:66:97:9e:84:03:7f:22:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=502018d6-5414-4889-b679-53ff6a9e5685
Validity
Not Before: Apr 4 01:00:47 2025 GMT
Not After : Jul 3 01:00:47 2025 GMT
Subject: CN=e57eab94-384f-4ff4-bd3d-7d6faf3a542c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:eb:c0:06:a9:d1:99:a0:a9:53:3c:3f:4f:98:
9b:d9:5d:0f:22:77:49:1c:15:57:91:72:c9:c5:02:
d4:8a:85:ac:13:c8:fb:ea:13:85:a4:8b:5c:14:8c:
02:08:0c:3d:4b:9a:54:9e:8c:23:ac:9c:69:8e:1f:
c1:97:94:8c:83:7a:e7:11:39:eb:1e:a3:15:59:fa:
98:57:f9:65:c1:69:ad:96:a2:c3:97:c2:4f:7f:06:
f3:36:bf:b4:56:61:4a:6d:cc:67:8c:61:6f:50:c3:
6e:a4:06:99:27:95:04:23:ec:53:89:54:2a:19:b4:
4d:ea:ae:f3:a1:03:8f:8a:58:18:60:c0:67:ef:75:
42:17:1b:c7:c7:36:2c:52:9a:e1:30:d4:34:6e:33:
86:f5:c9:d6:49:19:98:89:9d:c9:30:0f:53:ec:55:
6b:78:b3:6a:0e:65:05:57:6f:e8:1e:93:26:82:d1:
65:93:61:55:b6:8c:82:d0:d7:9b:3f:2c:9c:6f:fa:
02:27:f6:2e:60:4f:41:64:66:2c:41:de:53:a1:a4:
14:51:e0:b3:8f:ba:68:48:03:7e:7e:be:9f:fd:45:
a0:02:a5:0d:7c:28:4e:63:f3:a8:bd:1a:58:dc:6d:
a1:83:25:b9:47:3b:c3:e4:86:16:23:19:c1:d6:de:
ed:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:3E:98:0E:8C:2B:5B:9D:76:DC:F3:F2:1D:56:76:74:CD:2E:3A:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685/8b9911ad-f040-33b2-b95a-798133f79d2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685/502018d6-5414-4889-b679-53ff6a9e5685.crl
X509v3 Authority Key Identifier:
keyid:F9:6B:8B:EC:BC:84:86:DE:93:EB:7B:24:1E:D2:4A:30:CD:4C:4D:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685.cer
sbgp-ipAddrBlock: critical
IPv4:
209.213.184.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:17:11:a5:b9:f3:48:03:f6:12:31:a3:3f:9b:42:c7:49:a4:
d9:72:7a:8d:72:d3:a6:51:7e:38:3d:29:36:dc:2e:4f:6a:4e:
8d:1c:ee:fc:8d:32:d3:9f:1c:b4:33:b6:3f:80:16:bf:9c:bf:
c9:5e:ea:84:b7:fb:9d:14:63:d9:55:d5:f3:0f:aa:18:fb:00:
fb:8a:77:bb:60:80:1b:0a:e5:f4:fd:3b:b4:a0:97:50:27:3d:
12:69:67:6d:d8:1b:2c:09:6a:13:78:57:a3:7f:c1:74:9b:c7:
23:64:2f:0f:ae:d9:b6:58:18:a2:16:eb:2f:13:4e:b3:02:a4:
0f:4e:5a:b8:5d:d3:d1:4c:07:9d:ca:c6:59:ce:54:2d:ea:d6:
72:e0:d6:a3:90:15:03:49:de:e3:bd:66:28:a2:0b:33:e1:aa:
60:23:60:dd:3c:97:f9:2f:42:cb:2b:3d:a2:e7:ef:b6:a6:8b:
7f:72:ac:08:be:21:53:25:f8:c1:40:14:c7:56:34:fc:64:b7:
22:6f:0e:9f:b8:84:d4:c4:d7:12:f9:97:d2:72:7e:24:c0:f9:
e0:d8:b6:e5:ba:68:1a:ae:68:23:9d:c2:67:31:68:66:72:c6:
86:cf:34:dc:43:12:f5:17:40:9b:60:d1:03:05:06:83:a1:37:
d0:0c:01:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 11:20:26 2025 by rpki-client