Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/1ecb5a96-beee-34e1-bc86-f614d73d3b6b.roa
File: 1ecb5a96-beee-34e1-bc86-f614d73d3b6b.roa (raw, json)
Hash identifier: dG29fWsXlB7k+7L8WZMSICDpdLfpdTpAA7Tunn70zm8=
Subject key identifier: FC:23:D7:0C:5E:E3:22:93:80:81:44:79:E9:27:79:E0:6E:A6:1C:6E
Certificate issuer: /CN=d3c880fd-17d6-4b37-9537-456ee6369ed4
Certificate serial: 010D0C9F432858496CE45D171AB3CC11CF6B0500
Authority key identifier: 62:F0:90:50:95:6D:09:D8:EA:93:D9:5F:50:8A:FA:E5:1E:79:13:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/1ecb5a96-beee-34e1-bc86-f614d73d3b6b.roa
Signing time: Sat 05 Apr 2025 13:01:01 +0000
ROA not before: Sat 05 Apr 2025 13:01:01 +0000
ROA not after: Fri 04 Jul 2025 13:01:01 +0000
asID: 16509
IP address blocks: 207.174.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/d3c880fd-17d6-4b37-9537-456ee6369ed4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/d3c880fd-17d6-4b37-9537-456ee6369ed4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6c:e4:5d:17:1a:b3:cc:11:cf:6b:05:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c880fd-17d6-4b37-9537-456ee6369ed4
Validity
Not Before: Apr 5 13:01:01 2025 GMT
Not After : Jul 4 13:01:01 2025 GMT
Subject: CN=de6b28ea-d174-479e-bca3-09180e8ffcd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f1:79:da:10:9d:d3:58:ec:04:37:b0:9f:29:
96:bb:ef:fe:de:ed:6d:ba:47:72:3e:ee:8c:7b:ca:
8e:d8:00:7d:e4:c5:d3:c7:e7:1f:0d:68:f5:8f:72:
d6:79:90:97:14:38:98:15:cb:e3:96:b8:53:70:ea:
ab:34:2c:0b:5d:47:fa:9c:12:be:7f:f6:a4:4a:1e:
0b:62:a0:29:ed:78:39:52:ee:4d:24:d1:d9:7d:e1:
5c:d8:66:e7:ef:cf:8a:d8:a7:d3:c3:a5:31:ff:0f:
4d:15:5e:ca:23:83:87:ad:c0:bc:72:b2:0f:15:1f:
6b:b2:97:e8:ab:34:00:e2:08:87:37:8c:5a:fb:bf:
11:74:98:47:3b:ed:d0:86:d8:c1:65:5f:2b:42:94:
d3:83:7a:0a:bc:9f:a9:ef:77:47:d6:67:21:81:40:
74:0a:2b:84:83:69:1c:20:d7:c5:1c:dd:ba:7c:72:
74:5f:7a:f9:9b:f7:cf:b3:58:e1:eb:0c:02:47:d4:
17:08:c9:8c:6b:f1:3d:14:97:6a:f3:8c:cc:17:ee:
3a:6c:c2:5e:2b:4d:4f:71:70:5a:dd:58:1e:a9:3e:
56:93:b3:fd:b0:41:27:d2:e0:be:a1:81:8a:a8:c0:
a4:09:11:0c:ec:83:3a:d7:9f:0a:4a:da:be:92:b2:
53:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:23:D7:0C:5E:E3:22:93:80:81:44:79:E9:27:79:E0:6E:A6:1C:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/1ecb5a96-beee-34e1-bc86-f614d73d3b6b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/d3c880fd-17d6-4b37-9537-456ee6369ed4.crl
X509v3 Authority Key Identifier:
keyid:62:F0:90:50:95:6D:09:D8:EA:93:D9:5F:50:8A:FA:E5:1E:79:13:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4.cer
sbgp-ipAddrBlock: critical
IPv4:
207.174.66.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:77:57:38:d8:38:b2:c8:15:fe:c7:2f:93:ab:a2:a0:e3:04:
0a:4a:3e:49:4d:b6:2b:9f:4c:1e:93:1d:ea:62:a6:30:5e:e8:
4b:a0:d6:96:f0:a0:f3:d3:58:99:37:d7:41:91:d3:e4:d9:0e:
69:29:88:db:5a:f8:7c:95:81:2a:0e:48:ab:25:2e:4a:58:58:
81:6f:86:a2:b7:f1:49:d2:82:7e:92:f1:22:9d:c8:78:9c:c5:
52:87:76:a6:9a:e0:7c:06:81:0b:98:21:8c:d6:91:e5:8c:72:
ee:64:f5:01:c0:07:2a:22:4b:68:f6:89:0d:fb:e6:7d:f9:46:
81:35:3c:f6:37:a1:60:47:d3:ad:36:f4:43:ac:42:9a:ff:6f:
a9:bf:98:fb:77:b2:27:0c:cb:8d:65:2f:f5:c9:18:29:22:3d:
b2:b5:f9:00:94:b6:30:d8:6c:21:c2:76:22:07:1b:cc:95:7d:
51:a7:35:ec:25:ab:e9:2c:6a:a6:cf:59:2b:dc:ed:aa:50:ff:
f1:96:5b:8d:57:a9:15:79:5a:59:35:01:84:ed:0d:a4:10:b6:
02:dc:c1:42:aa:03:15:0d:67:31:56:95:c8:f0:d7:64:b4:cb:
fa:33:4a:d0:9a:e9:32:ef:d9:c7:f4:2a:4b:f9:2d:91:d6:ee:
14:67:7f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 07:50:23 2025 by rpki-client