Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/61f3e7bb-3cef-3819-a71f-ff3645a33210.roa
File: 61f3e7bb-3cef-3819-a71f-ff3645a33210.roa (raw, json)
Hash identifier: AKDAJ+Pm3gM6UuMIDtCqqWGw2qkyIvbkBFgU/EVwjK8=
Subject key identifier: 55:D8:2E:8A:A7:BD:E3:DE:0E:79:3D:12:79:CD:1C:08:4B:EC:27:99
Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial: 010D0C9F43285848FD56BB444CBA853685AB45C0
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/61f3e7bb-3cef-3819-a71f-ff3645a33210.roa
Signing time: Mon 24 Feb 2025 14:00:52 +0000
ROA not before: Mon 24 Feb 2025 14:00:52 +0000
ROA not after: Sun 25 May 2025 13:00:52 +0000
asID: 20303
IP address blocks: 69.91.128.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Apr 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:56:bb:44:4c:ba:85:36:85:ab:45:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Validity
Not Before: Feb 24 14:00:52 2025 GMT
Not After : May 25 13:00:52 2025 GMT
Subject: CN=3ab15d85-044d-4fac-8ee5-3a32db6c5426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:3f:44:1e:6d:eb:a9:0d:d3:bc:8b:aa:ba:f0:
1c:0b:43:1c:47:aa:6d:4e:92:9c:66:03:c6:22:c1:
68:8b:b7:52:40:40:5f:e1:3d:11:78:30:6c:66:b1:
9a:c2:5c:f7:9e:67:e3:08:d5:00:4a:4c:88:8e:0e:
f0:f1:ed:86:f0:4c:94:34:dc:37:51:2e:b8:8e:29:
9d:8e:5d:f7:99:ed:d7:3f:a4:8a:a7:09:91:6c:2a:
44:40:28:e4:40:90:ff:a4:00:89:a5:b4:99:9c:d5:
42:2b:c7:e8:a0:ea:40:07:d4:c9:1b:9f:ec:59:17:
7f:ba:97:3f:cf:49:f9:4f:58:c5:f7:ab:da:63:29:
3b:11:e8:75:55:7a:fa:48:1c:e1:57:74:49:11:b2:
4c:7d:c1:8e:11:cf:32:00:b9:a9:23:b2:ba:3b:eb:
de:94:75:66:46:30:21:61:cf:ba:2f:45:fa:50:60:
fe:39:e3:9a:e8:ca:c8:13:03:91:0e:95:f5:eb:bc:
e5:13:9d:cb:b4:c3:28:dd:59:1c:78:06:66:e0:b8:
aa:64:7d:bf:d8:5b:f7:8f:7f:9e:5c:1a:c7:81:1d:
2f:8e:7f:3d:00:09:81:c0:10:d6:6d:19:80:a6:f4:
9d:c3:52:4d:f4:aa:c8:4c:47:ed:e2:5b:9c:ed:67:
6b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:D8:2E:8A:A7:BD:E3:DE:0E:79:3D:12:79:CD:1C:08:4B:EC:27:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/61f3e7bb-3cef-3819-a71f-ff3645a33210.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
X509v3 Authority Key Identifier:
keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
sbgp-ipAddrBlock: critical
IPv4:
69.91.128.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:c8:32:60:2d:af:87:75:71:6a:00:1a:a0:6d:9c:df:24:ee:
70:5c:3c:3b:9c:47:c9:13:cd:0e:7a:c1:7f:d4:44:e8:8b:6d:
ea:4d:09:e0:c4:1d:f4:47:e8:49:66:e4:92:92:08:41:74:0c:
f4:59:eb:99:a4:5c:ed:fa:92:38:e6:de:2c:e2:bb:e0:38:0a:
d6:b7:97:09:6a:ec:f0:7c:4c:cd:51:c6:ed:8a:82:ff:95:d0:
fd:5e:25:78:95:1c:c3:fe:68:02:3f:c7:47:88:6f:b5:f4:d0:
7d:98:b9:9a:46:9b:99:ba:d1:18:ac:42:28:c8:37:9c:04:c3:
1d:48:21:42:09:ac:03:57:e2:24:fe:ab:3a:dc:bb:d8:6c:be:
60:f0:6f:76:e6:97:df:70:94:6d:5c:26:f7:d9:2e:27:dd:e5:
9d:7d:32:63:6c:47:98:12:4a:72:78:63:ef:2b:2b:70:3d:41:
78:7f:8b:97:bc:3e:5e:3e:34:83:e9:79:6a:78:1f:40:23:54:
14:bc:a7:3c:d5:42:0a:36:c4:96:93:76:4a:a1:ab:3c:79:83:
43:c3:90:6f:f4:0f:2c:3d:8d:2b:d6:a9:d5:d3:dc:a9:b5:40:
e8:c2:6f:b3:86:52:67:ba:75:20:6c:cb:b9:1a:25:ab:97:b4:
ce:96:b6:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:59:41 2025 by rpki-client