Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/cbb47c14-2799-3b64-87d8-2264da5e3862.roa
File: cbb47c14-2799-3b64-87d8-2264da5e3862.roa (raw, json)
Hash identifier: fh4BKyyoZ7F89WNUPV081b43KXlQRi87TllMGJ3fVls=
Subject key identifier: 7D:7C:CE:5A:A2:E3:E3:0F:79:C0:4E:42:9C:DE:68:44:02:E7:CB:C4
Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial: 010D0C9F43285848F22C720DD602322360532D20
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/cbb47c14-2799-3b64-87d8-2264da5e3862.roa
Signing time: Thu 20 Feb 2025 14:00:52 +0000
ROA not before: Thu 20 Feb 2025 14:00:52 +0000
ROA not after: Wed 21 May 2025 13:00:52 +0000
asID: 16839
IP address blocks: 149.96.180.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 13 Apr 2025 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:2c:72:0d:d6:02:32:23:60:53:2d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Validity
Not Before: Feb 20 14:00:52 2025 GMT
Not After : May 21 13:00:52 2025 GMT
Subject: CN=cbe5ccb5-e0a9-49bf-8ff5-c66e6783a593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:4c:df:09:0e:66:cf:35:ca:72:70:11:11:0c:
c6:07:9b:97:fe:88:92:2d:93:00:67:3d:c3:7a:a5:
4d:21:a4:8f:20:ff:de:79:5e:4a:3c:c2:9d:89:2d:
f9:3f:d7:c3:b8:31:c6:cc:2e:25:7f:9b:a4:50:84:
d2:22:12:9e:ae:48:57:f5:38:26:7b:0c:51:cc:a1:
cb:58:b8:24:44:25:0b:18:b2:45:79:a3:94:1b:12:
22:b4:92:a1:ae:c6:b2:d3:e1:b9:75:72:72:f7:53:
70:cc:35:ed:67:08:59:92:04:a7:ab:56:31:66:88:
f3:45:10:13:e3:e3:45:40:fa:17:93:21:a7:ee:3c:
c4:56:e1:49:6a:8e:7a:97:4c:dd:61:e9:40:f1:14:
f1:bf:80:0b:b4:80:bb:b9:7a:67:f6:ca:03:34:0c:
1a:65:96:fe:a4:43:fa:91:0c:31:e4:9c:8b:9e:17:
cb:f6:d3:86:e2:09:02:e5:6d:f4:05:86:f5:3c:9a:
c4:5c:93:7b:5d:e6:46:b5:66:c2:e6:96:a9:0e:1b:
b0:a8:2d:39:2a:a9:9f:ef:a6:c9:e8:35:8f:7c:eb:
df:e7:cb:e0:5e:1b:6f:58:61:36:7f:ae:5a:d6:0a:
a6:b8:fb:35:5c:28:9e:d2:10:a9:84:68:c9:f0:99:
b7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:7C:CE:5A:A2:E3:E3:0F:79:C0:4E:42:9C:DE:68:44:02:E7:CB:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/cbb47c14-2799-3b64-87d8-2264da5e3862.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
X509v3 Authority Key Identifier:
keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
sbgp-ipAddrBlock: critical
IPv4:
149.96.180.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:36:e6:ed:7d:e1:5c:66:a2:06:52:14:c9:72:38:f1:c3:5e:
e3:6c:1b:47:a9:66:82:34:f7:ff:3f:2b:75:6f:2a:76:65:53:
4c:b6:a6:65:9f:c3:d6:f2:cd:98:62:cf:f1:77:09:46:f0:4b:
17:30:ca:0d:96:9c:1e:0d:df:ba:97:23:31:10:6e:c9:5d:d9:
9d:a6:af:a3:6f:e5:0f:4e:db:bf:ec:44:f5:69:95:aa:de:02:
a3:c0:3d:01:98:6d:8e:e4:88:c8:f8:dc:dd:62:b3:f5:16:28:
25:21:9c:4a:73:6d:c2:dc:77:69:66:7d:67:7d:48:7f:66:39:
c5:ae:77:65:51:bf:a2:1c:2d:86:ab:3e:7c:f0:4a:d0:da:24:
e2:8d:4c:6f:d9:26:b6:c8:8f:95:eb:a9:01:d3:32:73:9a:d5:
ae:e0:d5:bb:40:19:bf:cd:85:29:9d:56:99:05:f9:5c:71:e8:
d6:c3:6e:83:75:13:9c:1f:96:2c:cd:0d:28:84:dd:1d:89:78:
f0:61:ca:f6:64:17:3b:c9:bf:ef:c5:fb:0c:37:c2:74:dd:d2:
b1:61:7e:e3:f1:21:20:8b:66:86:1c:ec:37:7a:45:b2:f5:d6:
01:ce:14:cd:b0:39:f5:0c:c7:30:95:8e:a7:31:71:4f:d0:51:
42:ef:ee:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:49:19 2025 by rpki-client