Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/33d538b2-9967-3429-aa3c-f4a346f31749.roa
File: 33d538b2-9967-3429-aa3c-f4a346f31749.roa (raw, json)
Hash identifier: qLCQBUdePW6/uuB8bEYPUrOPm6t+3Sd+J85cKBxOsOk=
Subject key identifier: D4:BF:01:0E:3A:B7:CB:52:FC:74:89:88:F5:53:D8:CB:BC:D4:BA:5A
Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial: 010D0C9F4328584957F3FBC8A1298949E58A1740
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/33d538b2-9967-3429-aa3c-f4a346f31749.roa
Signing time: Sat 29 Mar 2025 01:00:39 +0000
ROA not before: Sat 29 Mar 2025 01:00:39 +0000
ROA not after: Fri 27 Jun 2025 01:00:39 +0000
asID: 62610
IP address blocks: 128.14.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:57:f3:fb:c8:a1:29:89:49:e5:8a:17:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Validity
Not Before: Mar 29 01:00:39 2025 GMT
Not After : Jun 27 01:00:39 2025 GMT
Subject: CN=23f168ed-3ad0-4553-aeef-8f4719271dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7f:cb:70:9b:8c:65:5c:65:4e:43:f5:82:57:
d8:17:52:74:fc:0f:83:2c:3f:1d:fe:62:ed:a0:3b:
9c:98:74:9b:44:61:7c:08:9d:51:c9:2b:08:d3:ac:
01:9d:a6:28:77:b2:b6:ad:74:4d:dc:ab:36:b3:9b:
2c:ec:94:a3:8a:82:eb:8f:d3:f8:2f:85:00:34:a1:
7e:25:35:12:ca:9e:00:76:77:4f:ce:c2:0c:22:7d:
9a:10:44:5f:68:46:d7:bf:7c:af:db:d1:11:03:07:
15:43:d4:ac:74:4c:dc:3c:4f:97:b8:33:1f:9c:7c:
5d:3e:82:cc:60:6e:0d:ff:be:86:aa:6b:25:05:cf:
36:8c:55:ac:41:e9:19:ce:a0:a3:e4:0e:6a:4c:7e:
84:c4:10:45:0a:90:ab:8c:31:8a:c6:b3:78:fc:30:
ea:3c:5f:a8:53:39:40:f0:6e:4e:9b:db:ec:7c:1f:
7b:10:63:c7:b4:6b:a9:23:65:33:b8:f1:a9:32:20:
46:97:63:d0:bd:e9:45:f5:63:e3:52:c9:15:bf:6a:
9d:67:3e:71:c3:74:76:e4:17:f6:6d:1c:0b:f5:83:
03:db:f2:47:28:bb:7f:4e:71:40:3d:91:b9:2e:35:
0f:a2:e6:82:c8:b5:9c:38:78:60:ba:d8:b2:b4:7b:
2f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:BF:01:0E:3A:B7:CB:52:FC:74:89:88:F5:53:D8:CB:BC:D4:BA:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/33d538b2-9967-3429-aa3c-f4a346f31749.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
X509v3 Authority Key Identifier:
keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
sbgp-ipAddrBlock: critical
IPv4:
128.14.35.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:6a:49:02:ab:22:b3:5b:73:cf:71:cc:3e:ad:ff:3d:c2:0d:
4b:31:96:40:94:15:37:55:3e:6a:e8:a0:b2:2c:2f:df:3c:5c:
00:4e:61:c4:1b:54:12:02:dc:37:3f:0f:b0:41:0d:4c:67:9d:
fd:df:84:d0:b2:52:70:fb:72:d7:03:b7:c2:20:b6:5a:93:ff:
e7:97:4d:2e:6a:9d:cf:78:63:d1:cd:f9:c0:0f:0e:c3:2b:09:
9b:7b:7b:5f:8a:c0:35:70:65:dd:be:31:52:38:cb:43:f5:e8:
57:90:f6:40:96:85:fc:4e:19:8f:c3:b6:ce:a5:3a:c2:05:51:
16:64:8a:cf:68:bb:ac:51:e5:df:eb:46:0e:5c:a7:c7:7c:a9:
ac:f8:75:78:fa:49:d7:a8:4b:3e:7b:6a:ce:5d:c9:d6:8b:ad:
b5:28:2c:74:3f:9b:e0:ff:56:7d:4b:1b:bb:7e:6a:7d:73:40:
9f:72:dd:6e:e6:50:5f:96:6e:65:1d:63:9d:c3:14:c2:8c:1a:
4e:7f:47:6d:cd:35:fa:a4:3c:0f:b9:84:9d:19:39:d0:e3:bb:
31:26:72:86:36:8e:3d:c5:f1:c5:56:e7:50:25:b5:90:f7:da:
3b:52:ba:b6:f0:69:a0:12:c9:0a:7f:84:0b:36:71:44:e7:21:
93:09:09:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 17:05:49 2025 by rpki-client