Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/cb2c90ae-ec42-3e2b-86fc-9309787cf195.roa
File: cb2c90ae-ec42-3e2b-86fc-9309787cf195.roa (raw, json)
Hash identifier: ln9lc3lBYoxDWS8rAhJCgYKCrwmtu1DW9YjiaRsdGBs=
Subject key identifier: 5F:6C:C5:DC:E4:59:53:FF:23:AF:1A:AD:85:14:3F:CE:3A:E7:6E:A1
Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial: 010D0C9F43285849244E76D8AE91998939E5DB00
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/cb2c90ae-ec42-3e2b-86fc-9309787cf195.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 14061
IP address blocks: 167.71.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:76:d8:ae:91:99:89:39:e5:db:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=3236c168-3b1a-4488-bbcd-692d4b340ed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:28:22:aa:a7:f3:8d:1d:29:b6:b9:11:12:cf:
bc:f7:8e:a8:8a:2f:98:9d:fb:65:6c:f5:72:4b:53:
0d:8a:3b:2d:84:76:0d:98:54:0e:72:23:b0:bb:b0:
99:39:f1:60:5f:87:9d:bc:c7:09:7e:69:e7:ac:0a:
5d:97:90:8e:cc:e5:23:6a:df:f7:5e:f9:46:fc:62:
08:bd:98:e5:1f:3b:d5:2d:eb:24:9c:50:a2:87:2c:
55:3f:97:3a:18:cf:45:be:48:c0:f2:f7:c6:fe:6d:
6f:c8:d1:fa:bd:3d:d9:98:5a:9a:33:e4:4a:d0:89:
57:64:ea:dd:b1:95:27:ff:92:80:1c:3b:3d:aa:10:
31:da:7a:06:34:9f:af:c3:66:b2:c8:e3:72:97:e9:
1e:41:05:13:48:2b:18:9a:bb:d9:8f:90:0b:10:49:
98:ef:8a:4c:71:1c:b0:25:37:54:f7:e9:8d:c9:5f:
82:a7:40:42:2f:f6:db:ba:7d:83:82:19:76:e5:40:
6e:1d:47:34:65:d9:4f:2e:fb:f6:a1:85:3c:62:1f:
5a:c6:37:47:ad:06:cd:e9:6d:a9:0f:2a:fd:4f:b1:
f3:7c:e9:26:57:93:b3:4b:43:6e:e3:a0:d6:b6:71:
2e:05:cc:0b:a6:0e:7a:67:e5:aa:67:fe:4a:a6:bd:
c2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:6C:C5:DC:E4:59:53:FF:23:AF:1A:AD:85:14:3F:CE:3A:E7:6E:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/cb2c90ae-ec42-3e2b-86fc-9309787cf195.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
X509v3 Authority Key Identifier:
keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
sbgp-ipAddrBlock: critical
IPv4:
167.71.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c9:fa:2a:b2:68:01:6b:73:a8:84:bd:df:70:4b:00:0c:95:55:
9d:de:48:fc:5b:26:72:11:6c:dd:09:16:bf:8d:25:82:24:20:
2b:21:14:c6:cd:53:b9:fb:45:0b:3d:0e:0c:5d:49:64:b4:e8:
4f:5a:78:68:c8:8b:79:f9:d8:d1:b7:e9:0f:5d:b3:3d:d2:bb:
b1:87:d0:7f:2e:b3:74:6a:ed:14:1b:c7:63:e3:14:f5:7e:4b:
73:7e:98:4e:93:66:a9:b8:45:20:44:46:50:14:3a:ef:f9:df:
19:9a:cc:ca:b0:e3:f6:c4:1a:61:02:3b:1d:6d:ae:e9:4f:ef:
4c:82:cb:c1:2e:5b:8f:c8:35:21:a3:d5:12:ff:4e:7d:82:51:
b3:8b:80:d0:b4:3c:2d:79:b1:bc:c2:cf:31:da:54:55:aa:8e:
ba:15:61:17:a3:36:6f:13:8f:17:aa:75:d2:37:3b:3c:84:9e:
8b:ba:48:0c:42:6e:4f:51:db:50:5c:5b:71:9f:3a:e7:3e:67:
57:4f:aa:bd:06:1f:a4:56:97:64:a9:7e:28:67:1a:f7:02:f7:
12:5d:ea:9d:5b:5d:d2:23:32:78:ea:e2:56:c5:6c:a0:ba:cc:
4a:03:fb:c5:64:5b:61:6f:fa:31:cb:ab:c5:cc:0a:86:b1:f6:
c2:8a:ce:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:41:01 2025 by rpki-client