Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6c7f8d7-4c06-4480-bbd8-71cf97b216b6/219b3fbd-2aed-3074-9013-b5dd8c75cd42.roa
File: 219b3fbd-2aed-3074-9013-b5dd8c75cd42.roa (raw, json)
Hash identifier: x/83x0YP9WmFx82or/LPnUoOH2QfdkXQJ9Nl6fcCUT4=
Subject key identifier: 6A:98:4D:61:D3:78:43:79:2F:F0:F2:FC:26:86:6C:46:9F:A8:5C:00
Certificate issuer: /CN=e6c7f8d7-4c06-4480-bbd8-71cf97b216b6
Certificate serial: 010D0C9F4328584919418901F6470F1F84029400
Authority key identifier: CF:13:24:EB:7E:8B:4E:D8:7D:25:7D:FB:0E:78:8D:71:59:0C:52:28
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6c7f8d7-4c06-4480-bbd8-71cf97b216b6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6c7f8d7-4c06-4480-bbd8-71cf97b216b6/219b3fbd-2aed-3074-9013-b5dd8c75cd42.roa
Signing time: Thu 06 Mar 2025 14:00:52 +0000
ROA not before: Thu 06 Mar 2025 14:00:52 +0000
ROA not after: Wed 04 Jun 2025 13:00:52 +0000
asID: 35829
IP address blocks: 45.250.60.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6c7f8d7-4c06-4480-bbd8-71cf97b216b6/e6c7f8d7-4c06-4480-bbd8-71cf97b216b6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6c7f8d7-4c06-4480-bbd8-71cf97b216b6/e6c7f8d7-4c06-4480-bbd8-71cf97b216b6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6c7f8d7-4c06-4480-bbd8-71cf97b216b6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:19:41:89:01:f6:47:0f:1f:84:02:94:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6c7f8d7-4c06-4480-bbd8-71cf97b216b6
Validity
Not Before: Mar 6 14:00:52 2025 GMT
Not After : Jun 4 13:00:52 2025 GMT
Subject: CN=b42fa6bc-8318-45b4-82b6-751f9a5b6df7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2c:46:cb:d3:f7:0d:45:c0:4d:cd:61:cc:48:
76:20:ef:0d:1c:54:40:ab:87:8a:57:67:ac:b1:d3:
29:a7:8b:14:d7:c4:36:75:c8:91:27:3e:04:b6:ab:
56:87:f5:83:ff:6f:ab:57:eb:6c:bf:3c:49:cd:f7:
aa:7f:7f:52:d4:14:69:af:27:b5:69:29:af:68:43:
86:4e:07:10:a8:ef:1b:d4:45:e4:46:45:f4:a7:38:
b9:e7:12:4b:97:12:e6:9f:82:88:11:4b:d4:72:69:
9f:5b:33:57:9f:97:26:a6:c1:77:6e:1f:57:7e:6c:
0a:3f:b7:0e:97:f8:55:99:d1:52:f6:a0:77:d1:68:
c7:b1:7c:1c:cd:06:d3:cd:b5:bd:72:d5:f4:b6:02:
62:04:74:34:13:1c:0d:be:92:d6:8c:a0:b1:cb:83:
42:78:b3:db:1f:5d:b6:31:7e:58:c4:f0:1a:ac:6e:
2e:69:eb:c4:b6:2b:03:67:78:8e:bc:14:af:21:6e:
ae:9d:48:f7:c5:a3:3f:ca:b3:68:9c:2c:cf:2c:32:
ce:94:81:10:72:5d:6c:13:ff:61:45:dc:4a:3e:93:
8b:50:7a:4e:2d:2e:1b:a0:e8:b5:8a:73:02:c8:90:
7a:3c:45:8e:46:aa:c8:d7:b8:eb:54:b2:a6:a0:de:
42:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:98:4D:61:D3:78:43:79:2F:F0:F2:FC:26:86:6C:46:9F:A8:5C:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6c7f8d7-4c06-4480-bbd8-71cf97b216b6/219b3fbd-2aed-3074-9013-b5dd8c75cd42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6c7f8d7-4c06-4480-bbd8-71cf97b216b6/e6c7f8d7-4c06-4480-bbd8-71cf97b216b6.crl
X509v3 Authority Key Identifier:
keyid:CF:13:24:EB:7E:8B:4E:D8:7D:25:7D:FB:0E:78:8D:71:59:0C:52:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6c7f8d7-4c06-4480-bbd8-71cf97b216b6.cer
sbgp-ipAddrBlock: critical
IPv4:
45.250.60.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:49:4d:f4:88:39:b9:a9:f4:17:f8:b0:e7:8c:72:61:ab:8e:
84:85:2e:0c:0f:7a:d7:ac:5f:98:55:0e:1c:f7:82:24:13:d5:
d8:d6:85:2a:ec:92:52:12:f1:17:8a:4e:0d:64:95:fb:6c:b4:
76:c6:e8:9d:94:9d:22:d2:e2:6d:3e:28:8c:39:7b:a0:d4:80:
4e:87:76:38:a5:c8:13:d3:65:3f:11:39:62:58:84:66:28:3a:
2e:de:6a:9c:7e:dc:e4:87:0d:14:4f:9f:24:97:fb:5d:25:8f:
fc:ba:0b:c7:78:b5:57:ac:fa:1c:01:f3:17:0b:e5:62:fd:04:
10:d6:65:8d:7e:9a:37:c8:ec:85:ef:41:1e:f6:dd:d0:98:97:
10:3a:be:5c:9d:10:7d:95:b7:2d:cd:43:5e:2a:40:8f:4b:dc:
b9:fd:4d:e3:68:01:5e:0b:08:c7:58:49:d3:6a:fd:a8:2e:b3:
d5:a7:de:14:2f:70:0f:8c:e8:ff:07:00:0d:78:0b:5b:9c:cd:
ec:27:98:40:22:6c:87:d0:49:bb:4a:28:3b:84:75:de:a6:fe:
42:42:9e:40:21:13:0b:5a:5f:c5:4b:7e:ff:1e:74:a7:c2:63:
82:09:a2:0b:ce:db:d7:1d:a7:d3:34:ba:0a:b4:db:bd:a3:b3:
54:3d:d7:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:35:59 2025 by rpki-client