Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39cc3add-0660-4c1d-a230-c78f7b4b3105/ff08130a-60bd-370f-9c41-0c5923a1b9cb.roa
File: ff08130a-60bd-370f-9c41-0c5923a1b9cb.roa (raw, json)
Hash identifier: yzyfDk/yDlSlqX0PdN03BBx6Jw/+PBG+PvKFyag/J7M=
Subject key identifier: 12:BC:83:DE:87:AA:A5:CF:05:E4:06:7E:F4:05:D5:97:16:D9:52:0E
Certificate issuer: /CN=39cc3add-0660-4c1d-a230-c78f7b4b3105
Certificate serial: 010D0C9F4328584917DC276150B7E84A9CA22640
Authority key identifier: AA:F7:8E:82:F3:94:3C:FF:D3:C2:88:CA:9B:67:D7:36:2A:08:62:5A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39cc3add-0660-4c1d-a230-c78f7b4b3105.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39cc3add-0660-4c1d-a230-c78f7b4b3105/ff08130a-60bd-370f-9c41-0c5923a1b9cb.roa
Signing time: Thu 06 Mar 2025 02:00:39 +0000
ROA not before: Thu 06 Mar 2025 02:00:39 +0000
ROA not after: Wed 04 Jun 2025 01:00:39 +0000
asID: 44356
IP address blocks: 172.110.88.0/22 maxlen: 24
2606:3e80::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39cc3add-0660-4c1d-a230-c78f7b4b3105/39cc3add-0660-4c1d-a230-c78f7b4b3105.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39cc3add-0660-4c1d-a230-c78f7b4b3105/39cc3add-0660-4c1d-a230-c78f7b4b3105.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39cc3add-0660-4c1d-a230-c78f7b4b3105.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:17:dc:27:61:50:b7:e8:4a:9c:a2:26:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39cc3add-0660-4c1d-a230-c78f7b4b3105
Validity
Not Before: Mar 6 02:00:39 2025 GMT
Not After : Jun 4 01:00:39 2025 GMT
Subject: CN=fc06fd74-2f1b-4957-8c83-341c114de88e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b5:82:5f:20:b4:71:66:2e:d8:56:21:9c:0b:
c8:f0:c0:ee:85:a5:04:02:bc:c1:5b:e6:e8:84:69:
ec:fb:52:41:ab:a3:0e:82:59:e7:0a:b7:ff:4f:ce:
9d:24:98:b3:38:32:cc:77:71:28:01:7e:a7:fc:0e:
2c:4f:b7:49:82:2f:fa:02:ad:86:a5:7c:ed:e4:2e:
0c:8e:a6:99:2c:0e:27:1f:cf:77:ea:9d:a8:60:5d:
6c:a1:fe:f8:99:ee:04:2f:9e:77:47:3c:67:54:5c:
cc:31:2c:b8:b5:cb:09:36:e2:21:f5:33:48:f2:41:
b4:26:d2:61:b5:57:40:91:c3:fe:2e:1e:69:e6:e3:
04:1d:00:ca:c6:f1:46:ba:f8:6e:22:c2:ba:a1:96:
13:6a:0b:7d:f0:17:8f:7f:35:ff:f8:b1:39:3d:ff:
73:81:98:9f:43:18:d0:15:de:e7:40:06:58:86:c1:
e2:17:8f:fc:dc:35:40:11:22:ff:e1:e2:b1:60:de:
40:13:19:58:7c:43:ac:64:ac:e6:5c:ff:48:20:39:
e1:0f:41:00:49:2e:ec:65:b7:7b:78:1d:cd:ac:f1:
8b:7a:17:02:f0:2f:52:ad:c7:2a:7b:1f:a9:ca:45:
20:2c:f1:6f:38:8a:93:d1:1e:89:57:eb:92:d1:06:
49:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:BC:83:DE:87:AA:A5:CF:05:E4:06:7E:F4:05:D5:97:16:D9:52:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39cc3add-0660-4c1d-a230-c78f7b4b3105/ff08130a-60bd-370f-9c41-0c5923a1b9cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39cc3add-0660-4c1d-a230-c78f7b4b3105/39cc3add-0660-4c1d-a230-c78f7b4b3105.crl
X509v3 Authority Key Identifier:
keyid:AA:F7:8E:82:F3:94:3C:FF:D3:C2:88:CA:9B:67:D7:36:2A:08:62:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39cc3add-0660-4c1d-a230-c78f7b4b3105.cer
sbgp-ipAddrBlock: critical
IPv4:
172.110.88.0/22
IPv6:
2606:3e80::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:0f:10:12:63:96:40:22:9c:61:47:e8:18:f8:5f:09:05:31:
8c:be:80:02:c9:04:d0:dd:6c:e4:9e:6a:3b:d0:17:19:75:f4:
f3:26:38:46:f4:86:ba:d2:ff:d5:ef:3e:1d:6c:31:7e:07:d4:
ca:ea:f6:3b:c9:58:26:d4:9c:cd:87:5c:be:3c:8d:e1:e0:26:
db:89:24:1f:0a:35:e7:2f:21:13:08:92:b5:81:3e:bb:26:e5:
31:2e:1f:f4:c7:9d:99:c0:91:d0:37:24:8c:d8:cf:94:81:b6:
7a:cd:3f:c0:87:c8:7b:75:4f:db:22:f2:ba:6b:1f:9e:26:e6:
ab:83:bd:d3:30:e2:74:de:4f:b1:ef:ea:34:a5:99:09:e5:71:
42:6d:b5:f8:d7:cc:6a:2d:27:15:b6:6a:c1:8e:0b:89:90:99:
c2:d4:fe:c9:01:c3:05:ab:d0:49:c2:d8:8a:2a:35:a0:a4:73:
00:e3:6e:16:02:01:ea:8b:5b:3b:5f:10:72:8d:27:93:92:48:
62:26:36:8f:73:8c:e7:91:fd:30:eb:3d:d8:c0:fd:06:47:9d:
dd:d7:58:6e:de:1c:b1:06:0d:0f:1e:98:c1:d3:61:c7:aa:ca:
db:1f:f0:01:fd:15:2b:7a:6c:b3:5a:22:c0:93:bb:71:b3:c2:
86:76:e5:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 15:18:45 2025 by rpki-client