Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/95366fd2-39e1-36cf-bf1d-12cac6b84422.roa
File: 95366fd2-39e1-36cf-bf1d-12cac6b84422.roa (raw, json)
Hash identifier: fEBH1ceWvlUmag67ZQysURyz7jPxNj23vKPC8V/n+Ps=
Subject key identifier: 1B:2D:37:15:55:7B:99:13:2A:6D:07:E1:2D:DF:9C:00:E1:90:3B:E8
Certificate issuer: /CN=036d6da4-f590-4da8-a22f-55511da98ee5
Certificate serial: 010D0C9F43285848E2D1117398C31751457BEC80
Authority key identifier: 69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/95366fd2-39e1-36cf-bf1d-12cac6b84422.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 16509
IP address blocks: 52.128.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:11:73:98:c3:17:51:45:7b:ec:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=036d6da4-f590-4da8-a22f-55511da98ee5
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=c76fda2a-1a91-44f8-a317-5db76ba07248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e0:98:08:c1:a8:6e:d0:96:45:96:f9:3a:a2:
14:02:fa:91:0c:c2:6a:27:58:0a:8d:2a:2f:b7:20:
32:c4:30:ac:c6:28:82:0b:59:8c:c7:c1:1f:61:99:
61:8f:31:23:dc:37:4b:ea:53:80:bb:82:7b:78:58:
46:02:bb:7c:ee:16:f9:89:f7:03:4d:1a:67:31:61:
f9:a7:e5:ca:85:a9:78:e3:37:5e:6c:8b:de:d0:a5:
55:aa:87:e7:17:88:c3:79:3e:64:16:70:5a:d2:13:
f3:26:7c:8d:9c:45:99:99:10:81:4d:bd:8e:ef:b3:
98:c6:be:a7:68:64:bc:f4:17:7e:aa:b9:95:c7:96:
e0:94:f7:02:58:81:44:23:ae:ef:d3:b1:36:eb:b9:
0b:dc:02:7c:05:72:8d:19:2a:30:76:f0:7c:f3:6e:
ad:fe:19:d8:fb:cf:dd:f2:fe:dd:32:b9:91:73:4a:
f5:f8:b3:93:88:77:d1:eb:f2:a4:29:8f:ba:b9:ad:
d4:6c:7d:55:b7:e8:d1:a8:ee:bd:a9:bc:d9:ed:f8:
07:bb:16:6e:3e:aa:74:2b:7f:aa:64:e2:22:a9:fc:
e4:82:80:cf:a4:56:74:73:11:16:52:f6:ba:c0:44:
83:dc:15:f8:2b:0a:d2:90:47:f3:4b:89:50:30:68:
94:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:2D:37:15:55:7B:99:13:2A:6D:07:E1:2D:DF:9C:00:E1:90:3B:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/95366fd2-39e1-36cf-bf1d-12cac6b84422.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl
X509v3 Authority Key Identifier:
keyid:69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer
sbgp-ipAddrBlock: critical
IPv4:
52.128.43.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:c4:be:66:95:4e:2b:39:58:93:20:8f:af:58:2e:f4:2b:1c:
9b:ac:65:fb:49:37:e4:ca:59:94:10:8f:56:5f:5f:57:bb:cd:
92:a2:a9:4b:cc:cc:04:e0:46:8f:2e:7a:ca:c4:bc:1e:0d:a2:
e3:11:85:13:6a:6d:0e:03:5f:af:cd:80:e4:49:c6:79:d5:df:
96:6a:5b:1b:3b:56:a9:2d:f9:b9:b4:d4:b6:c8:8b:72:69:20:
fa:0d:ce:da:76:ba:5d:ab:96:e4:6e:d1:de:98:95:a6:95:27:
4f:c9:e9:dd:25:ef:bd:31:fa:89:cf:a2:9d:58:09:ed:ad:7b:
b0:a8:c9:eb:38:01:bf:e9:d9:58:5e:25:25:e6:4b:24:41:c6:
ca:a7:88:fa:d8:f9:56:ea:94:5e:ae:cd:40:bc:fa:93:87:8d:
11:bd:f0:c7:42:2c:93:4b:c7:4d:7e:09:32:d5:22:62:8f:ae:
e2:2f:77:70:0f:6f:2c:61:fe:ed:20:a1:b4:86:c2:7c:3b:4d:
ab:9f:f0:1b:f7:5b:b1:a1:71:8f:ce:3d:59:6c:50:d0:18:cd:
3c:ce:90:4f:09:e2:d6:e0:6b:f6:34:e7:8c:43:61:8f:c6:28:
04:35:b4:7b:66:43:07:2d:b6:db:bd:e3:ef:7b:b1:a8:72:ff:
34:a5:61:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 04:49:35 2025 by rpki-client