Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2cae370b-52a4-353a-87ff-514048b205b2.roa
File: 2cae370b-52a4-353a-87ff-514048b205b2.roa (raw, json)
Hash identifier: GpBCXYCYjyJXRFkmuOZpeRmwqNniuGcN+1I8I9RvZL0=
Subject key identifier: 5A:E1:05:12:07:9C:36:A9:7F:9D:B0:AD:48:93:4A:B9:18:C0:4B:CB
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584960541FCD627F6339369780C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2cae370b-52a4-353a-87ff-514048b205b2.roa
Signing time: Tue 01 Apr 2025 01:00:47 +0000
ROA not before: Tue 01 Apr 2025 01:00:47 +0000
ROA not after: Mon 30 Jun 2025 01:00:47 +0000
asID: 55286
IP address blocks: 23.26.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:60:54:1f:cd:62:7f:63:39:36:97:80:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Apr 1 01:00:47 2025 GMT
Not After : Jun 30 01:00:47 2025 GMT
Subject: CN=db00cd70-b208-4bbb-9908-a8addbc5ddf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:76:78:e8:8b:62:d2:33:3b:dc:b4:31:75:8c:
3c:72:92:09:4e:3f:5f:c7:19:5c:3d:83:7e:6f:0f:
66:5a:66:00:30:dc:dc:cf:45:f2:90:47:fc:1d:2a:
6c:c0:c2:75:a2:76:a2:08:b5:a8:6d:ad:5c:96:0f:
39:90:ca:b9:a3:37:74:5b:2b:cc:95:6a:e3:26:b3:
2d:cf:5f:87:b6:27:c9:da:2a:0c:fd:e8:98:c7:39:
12:3b:62:ef:b6:01:c9:ac:70:a9:e1:e6:4f:2d:60:
bb:92:3a:ab:5f:16:34:f9:67:3f:ed:56:b0:32:7a:
2e:30:f3:60:31:26:d4:1d:cc:21:cd:aa:f5:10:90:
cc:be:7e:a7:cf:52:b0:77:68:87:67:d2:8d:76:23:
23:c3:7a:8b:53:bb:5a:8a:1d:de:61:2c:b1:52:07:
c7:88:b0:00:75:bd:4a:b4:43:7c:e1:5f:53:a6:2b:
be:a7:ed:3d:15:c0:fc:97:7b:1d:45:b5:61:b9:fb:
6c:36:d3:9d:15:78:a9:3a:45:63:8d:64:ec:81:0e:
35:4c:aa:06:b4:dc:e6:64:98:d0:fa:b4:6f:85:a6:
a6:37:2b:33:de:86:72:93:c1:c7:c5:d5:67:19:fe:
33:ab:53:ce:6b:55:a6:f2:64:ab:12:0a:f1:2b:62:
ed:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E1:05:12:07:9C:36:A9:7F:9D:B0:AD:48:93:4A:B9:18:C0:4B:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2cae370b-52a4-353a-87ff-514048b205b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.118.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:04:62:43:95:be:8a:52:27:55:9e:7d:29:bc:25:56:22:a9:
37:8a:83:6d:3f:a6:e0:48:a5:43:9a:57:65:e2:26:c5:1a:44:
00:7c:5c:fe:38:8d:29:4d:73:95:57:ae:ea:8b:d7:f6:54:ff:
58:b6:8a:1a:a1:27:e0:4d:d3:fd:eb:1c:db:99:b4:14:88:4a:
10:85:64:b8:c5:29:68:85:bf:bd:bb:cb:f9:2f:13:ec:20:c9:
59:a5:d1:19:6f:90:60:f8:cf:a4:f8:e3:f8:20:71:0a:02:26:
3d:d8:fd:95:ef:09:10:c8:b5:61:53:f0:b7:38:98:5d:72:03:
5e:f6:54:d4:f2:dd:60:3a:2b:a6:f2:81:72:d1:db:4b:c4:de:
c7:33:9c:9e:8e:cd:b2:60:28:75:5e:f3:9b:db:b2:63:2f:cf:
ec:69:0e:1c:47:3b:8b:c0:66:88:d9:52:61:a5:14:53:16:7c:
a3:6f:17:84:94:1f:89:61:8d:d5:56:fa:d9:a8:18:e5:29:ba:
14:b4:ef:26:20:19:40:8a:70:92:eb:b0:41:72:bd:8e:95:84:
c6:bd:39:16:d1:4d:42:c4:1d:81:6e:bb:c4:42:20:7a:bf:11:
f8:3c:29:c0:67:3b:27:1c:21:11:af:85:fd:3c:c3:e6:dc:93:
3d:cc:00:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 13:40:25 2025 by rpki-client