Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/53895827-d60e-3203-b385-41bf4259e789.roa
File: 53895827-d60e-3203-b385-41bf4259e789.roa (raw, json)
Hash identifier: julpd5Y8wzEeSVIBL2GkUdxYcteipMuoo/oaZYemszY=
Subject key identifier: 40:98:50:60:6B:6B:FD:CB:C6:04:76:0F:8D:A4:BD:CC:17:B8:85:A8
Certificate issuer: /CN=86fea470-b380-45c0-9f6b-033b7d884388
Certificate serial: 010D0C9F43285848E9CBEDD7993B52BC9DDE51F0
Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/53895827-d60e-3203-b385-41bf4259e789.roa
Signing time: Mon 17 Feb 2025 14:00:52 +0000
ROA not before: Mon 17 Feb 2025 14:00:52 +0000
ROA not after: Sun 18 May 2025 13:00:52 +0000
asID: 397423
IP address blocks: 69.42.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 18 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e9:cb:ed:d7:99:3b:52:bc:9d:de:51:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388
Validity
Not Before: Feb 17 14:00:52 2025 GMT
Not After : May 18 13:00:52 2025 GMT
Subject: CN=94721aed-1ecb-4987-815d-ba357f755d81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:5b:b1:bc:23:31:ea:78:33:a5:f9:a7:43:ab:
e7:3e:1c:66:77:85:5f:dc:2d:31:8e:15:3f:c3:4a:
21:af:0e:00:14:7b:4b:98:8f:aa:ea:05:a4:16:f5:
a8:35:b0:77:27:2d:4d:5c:19:28:ec:18:a3:8b:1f:
68:48:15:4f:b8:a9:98:c6:5d:e4:17:7a:9f:1a:c5:
61:28:5a:16:5c:94:36:58:93:d8:28:85:7d:53:82:
48:f0:2c:cc:86:1f:ad:00:34:ae:36:c0:3a:7a:77:
42:e6:75:45:f9:3e:1b:68:f0:13:d9:ee:79:4f:0d:
31:53:5b:bf:b1:ec:a4:04:28:3e:48:7e:89:3b:e3:
a6:19:55:e0:6b:2e:89:9d:31:37:84:a5:6d:54:0e:
ab:79:f0:7f:ac:22:98:ae:63:60:a2:9e:3e:d6:16:
75:e2:8c:6d:59:af:28:0b:ca:88:8c:38:d4:e4:05:
ec:cb:21:46:f9:1a:ea:d5:35:31:88:d6:97:a5:a2:
3b:a8:62:e6:0f:06:f4:21:1e:4d:6e:a4:ab:2c:5b:
73:41:87:2b:ea:9f:38:e7:75:ed:8a:fc:89:af:46:
33:bd:42:ab:19:11:53:57:3e:00:9f:5b:30:27:e2:
87:f7:c7:70:11:49:3d:db:a9:30:0a:14:08:d4:20:
65:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:98:50:60:6B:6B:FD:CB:C6:04:76:0F:8D:A4:BD:CC:17:B8:85:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/53895827-d60e-3203-b385-41bf4259e789.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl
X509v3 Authority Key Identifier:
keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
sbgp-ipAddrBlock: critical
IPv4:
69.42.221.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:ad:26:ad:cd:1e:64:6d:c4:2d:90:45:ee:d5:f3:89:59:c9:
c0:d5:c5:3b:93:5d:05:9e:45:ee:b3:97:f7:fb:50:63:8a:08:
1e:1b:05:52:b6:2e:14:f1:56:b8:ca:f6:a4:56:95:f9:3e:81:
0a:32:35:5a:d5:47:78:2a:93:c3:e3:a0:21:14:09:75:22:5a:
c5:b4:a4:41:28:55:ef:b6:8b:d7:9e:d6:24:1d:a5:5b:7f:5d:
7c:50:dd:25:4f:fc:c0:13:ef:e6:ae:ef:e5:b3:ad:44:c1:b9:
2a:9d:3e:c4:e8:06:16:d2:00:25:3f:10:5c:2c:63:03:93:39:
7d:2a:65:96:c5:d9:cf:56:6f:c2:c8:e4:a8:b1:4a:f8:f3:79:
5e:d5:36:e0:f9:40:f0:89:e6:83:3a:f4:25:b7:74:f9:41:4a:
58:17:89:5c:26:4f:48:92:e8:7d:54:bb:d3:46:e6:72:49:75:
cc:66:94:4b:ad:eb:5e:c4:27:5a:42:8e:ec:a0:b2:5f:f6:09:
1c:1d:94:3c:95:67:99:de:4f:00:3b:2f:ee:d1:54:19:4c:0b:
ac:d1:91:e9:f8:c7:0c:63:92:ed:dd:60:39:7d:e4:5c:f3:13:
6b:07:83:fc:76:fa:ef:f8:cb:6c:45:f6:72:ce:63:3e:df:a1:
35:3a:79:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:08:42 2025 by rpki-client