Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/ac44b651-6e22-3ddf-9e0c-9adc285e0e18.roa
File: ac44b651-6e22-3ddf-9e0c-9adc285e0e18.roa (raw, json)
Hash identifier: GBuPMwVM4VQGI1wxGZyRS0Bgm5rVU90OcihOycKRaXs=
Subject key identifier: 07:FD:BC:4D:8F:23:09:2A:57:08:69:D1:54:DA:50:DB:FC:0E:98:F7
Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Certificate serial: 010D0C9F43285848C150CF99C62A7841B498B161
Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/ac44b651-6e22-3ddf-9e0c-9adc285e0e18.roa
Signing time: Mon 03 Feb 2025 02:00:39 +0000
ROA not before: Mon 03 Feb 2025 02:00:39 +0000
ROA not after: Sun 04 May 2025 01:00:39 +0000
asID: 931
IP address blocks: 128.254.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c1:50:cf:99:c6:2a:78:41:b4:98:b1:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Validity
Not Before: Feb 3 02:00:39 2025 GMT
Not After : May 4 01:00:39 2025 GMT
Subject: CN=b0589f1f-ddb7-4fc8-be63-4f092bccde76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:0b:36:b4:78:1c:d2:93:25:1a:4c:17:f8:19:
44:e4:2b:95:e4:24:5a:cf:57:f0:34:01:2a:06:93:
83:70:61:b9:3b:89:79:c2:09:c4:6d:89:e1:86:70:
02:39:e3:5e:01:0f:f2:c5:11:7c:65:c2:94:80:fd:
11:12:c5:16:b7:b7:59:df:6f:3f:d7:84:bf:90:df:
7b:00:33:f2:67:ce:a8:eb:c3:43:10:3a:a8:36:b8:
22:c0:cb:2a:58:e3:7a:e2:85:13:18:0a:b9:65:7e:
a0:a2:78:1d:c7:d8:41:b3:b3:a3:75:cb:8f:e7:96:
d7:8a:37:6d:0a:1d:41:42:24:e1:16:b5:53:cd:a9:
2e:ad:76:91:32:57:08:e5:72:af:eb:83:01:97:81:
2a:44:bf:db:90:1d:24:93:47:6a:24:4d:29:c5:1a:
67:5e:b8:8d:52:51:a1:21:3c:b3:26:2f:6b:5f:99:
7f:45:fc:8c:1f:54:d9:17:15:19:04:a5:ed:cb:67:
86:86:cd:05:85:fb:7a:1e:74:d5:e6:12:ff:c1:ea:
f6:93:2f:96:7e:49:85:2a:25:c6:d3:48:61:3a:2f:
e9:e3:18:94:13:cb:03:cc:d9:c0:91:57:5e:ea:28:
9c:88:ca:55:ec:b9:7e:c6:fb:f8:9a:50:d0:e7:de:
55:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:FD:BC:4D:8F:23:09:2A:57:08:69:D1:54:DA:50:DB:FC:0E:98:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/ac44b651-6e22-3ddf-9e0c-9adc285e0e18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
X509v3 Authority Key Identifier:
keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
sbgp-ipAddrBlock: critical
IPv4:
128.254.194.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:0c:06:50:84:99:a9:b4:8b:50:f2:a7:14:52:cf:c5:5d:c5:
1e:6c:35:5c:0e:f7:68:fe:66:c8:48:dd:06:09:4d:c1:ae:10:
9d:84:78:9b:42:86:ea:b2:75:89:20:e3:9e:f4:7f:14:fe:ab:
5b:d5:c1:30:d3:34:24:b6:7c:84:b8:47:83:39:e3:0d:7f:49:
37:4a:ff:d0:eb:29:e9:67:e2:17:f2:22:5c:45:70:fd:ef:09:
ae:84:93:dc:1c:5e:9f:1b:8e:a4:10:39:ed:fa:cc:af:00:61:
18:4b:b2:d3:a0:bc:62:e5:68:86:bd:53:a9:09:21:3c:70:44:
cf:1e:0d:71:cb:ff:30:3d:ab:b2:9c:46:2d:78:25:01:90:9f:
4c:ee:95:26:d7:9f:bb:17:23:cb:ad:8f:37:15:b4:da:89:50:
a2:b0:fc:37:56:45:6b:cd:2c:2d:62:3b:61:3a:39:39:66:61:
18:f5:4b:45:15:f0:74:73:18:fc:60:69:83:5a:65:d6:30:9e:
32:96:d7:f4:5a:07:c3:11:77:73:9b:79:72:3c:bd:c2:61:62:
73:71:e0:a8:be:fd:f6:7c:1c:bf:b2:cf:d3:88:bd:9b:33:44:
91:57:df:4a:15:f6:07:c4:43:fc:7b:71:6f:a5:60:e7:00:ca:
2a:2b:1e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 17:44:03 2025 by rpki-client