Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/235cefab-f003-344e-a29e-ed3307aa2358.roa
File: 235cefab-f003-344e-a29e-ed3307aa2358.roa (raw, json)
Hash identifier: PQq5NpdkCp+pmD1leKadps3QeHB5Dp6/f9E5vhltYgQ=
Subject key identifier: BC:6F:1F:BC:CC:65:C6:55:59:3C:23:6B:A0:C5:9F:5D:95:AB:3F:E3
Certificate issuer: /CN=4d80daa5-79dc-4c2a-8879-248a3f3e339c
Certificate serial: 010D0C9F432858492ABCA9D9C13B81938BB33D20
Authority key identifier: 45:24:B4:3E:8E:13:30:ED:D5:96:0D:39:A0:C5:0D:3D:96:C0:56:FA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/235cefab-f003-344e-a29e-ed3307aa2358.roa
Signing time: Wed 12 Mar 2025 20:17:55 +0000
ROA not before: Wed 12 Mar 2025 20:17:55 +0000
ROA not after: Tue 10 Jun 2025 20:17:55 +0000
asID: 16509
IP address blocks: 204.57.240.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 05:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2a:bc:a9:d9:c1:3b:81:93:8b:b3:3d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d80daa5-79dc-4c2a-8879-248a3f3e339c
Validity
Not Before: Mar 12 20:17:55 2025 GMT
Not After : Jun 10 20:17:55 2025 GMT
Subject: CN=221d0444-afda-43e3-ade0-9429d2727afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c1:ed:57:80:16:8b:a4:d2:87:4c:5d:70:e6:
af:dc:8f:46:87:9a:0d:7f:00:4f:57:19:a0:17:cc:
af:87:f6:3d:74:d7:c9:b9:0a:a9:47:4c:20:37:fe:
85:46:83:7a:05:8b:e4:68:27:f7:50:f7:81:a0:7c:
14:90:88:c3:35:86:1b:bc:40:6c:f5:c4:f3:02:6f:
84:19:10:ba:3c:04:b7:fa:7f:0f:fd:42:25:96:e4:
18:17:39:4c:d7:c8:b6:b0:15:1d:d4:62:9a:7b:54:
ef:bb:7a:0e:c4:85:8e:9d:8e:5b:0d:87:5d:dc:dd:
ae:d9:60:b0:9f:e3:84:84:6c:c7:79:85:f4:77:b2:
57:67:b0:a5:74:51:8c:01:e8:04:cf:ae:6e:8f:81:
cc:63:45:3f:77:94:f6:19:cf:87:45:2a:39:cc:28:
65:8d:84:3c:68:19:04:f4:60:fe:5a:40:d7:2f:7f:
b4:11:3d:a5:d2:6c:79:cb:27:90:91:95:09:a5:f5:
fc:0c:93:0b:58:b0:ab:28:0e:90:84:b4:52:d2:0d:
07:1c:60:91:b9:65:92:e7:fa:80:9e:a6:35:60:e5:
40:7e:a3:2a:c7:c1:f7:39:57:c4:4d:2d:e1:19:e3:
03:a3:da:3b:42:af:cd:08:d6:1b:56:19:d8:04:83:
fa:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:6F:1F:BC:CC:65:C6:55:59:3C:23:6B:A0:C5:9F:5D:95:AB:3F:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/235cefab-f003-344e-a29e-ed3307aa2358.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.crl
X509v3 Authority Key Identifier:
keyid:45:24:B4:3E:8E:13:30:ED:D5:96:0D:39:A0:C5:0D:3D:96:C0:56:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer
sbgp-ipAddrBlock: critical
IPv4:
204.57.240.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:0e:3f:2a:39:e9:7d:98:e8:5c:61:ec:e9:bc:5d:5d:57:4f:
98:ca:46:89:9e:78:9a:ef:78:ec:d2:47:f3:31:a2:2f:cd:b3:
97:bc:c6:ab:16:a1:81:d0:16:84:a6:7d:b9:73:bc:06:83:d1:
ad:4a:52:ba:48:52:cd:5d:f5:a6:1e:c0:ce:a5:0a:6c:40:65:
18:18:f4:07:66:8b:ce:27:b3:68:2d:27:42:29:d4:e8:9d:2f:
1e:b9:6a:6b:43:80:03:e0:c4:30:97:c4:58:73:0c:5a:81:8f:
5f:6b:79:f2:9b:2a:d1:98:2b:fc:8b:56:4f:87:c8:33:a5:16:
a2:34:b0:c3:47:e5:7d:da:91:ee:3e:42:e5:29:97:ad:04:d8:
97:71:d5:b4:a0:2b:27:d0:3e:45:78:f1:cc:70:93:f0:c0:8c:
72:e2:19:40:09:9b:03:1a:95:db:ac:a4:10:72:3f:3f:bb:e0:
73:32:ab:fa:52:85:6d:c0:e0:8d:81:d8:9d:51:fa:72:16:92:
7b:b2:f7:2f:4a:4b:0d:eb:d4:66:b0:11:ef:8c:62:74:48:42:
44:d9:e0:18:f4:be:14:7c:09:22:ad:51:b6:09:81:47:ba:ec:
63:61:c6:96:8a:8e:b6:ff:5d:75:89:0c:a8:3d:a1:57:9a:73:
ba:49:e7:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:01:22 2025 by rpki-client