Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/a695f056-3b40-3250-b954-f1d214a7bdea.roa
File: a695f056-3b40-3250-b954-f1d214a7bdea.roa (raw, json)
Hash identifier: tNiGOZL8Hrmpax6xdNvZ5rP8BbwrAfUlZ3oY49CzkuE=
Subject key identifier: 92:28:7E:85:F6:EF:39:5E:BC:CA:16:4C:B3:DA:95:08:6F:E9:A2:F6
Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial: 010D0C9F43285848BFEBB813FC8866AF8C5AA0C8
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/a695f056-3b40-3250-b954-f1d214a7bdea.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 36040
IP address blocks: 136.22.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 13 Apr 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:b8:13:fc:88:66:af:8c:5a:a0:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=5de31180-8dbf-42b8-ba2c-5cd807bdd802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a2:67:53:cb:68:e8:36:92:87:03:e0:00:6b:
08:61:59:db:d5:b6:1e:ef:69:84:4f:1f:5b:7e:e5:
41:45:99:d6:81:bb:b0:a0:09:f2:b9:0d:23:c1:ad:
31:7a:34:f8:66:bb:f0:2f:d7:63:36:a3:af:f8:bf:
6f:67:56:45:b2:f5:7c:56:3f:35:ae:d3:42:ca:44:
31:e5:91:9f:70:9a:2f:83:c9:14:81:38:d8:17:62:
bc:c9:32:45:e3:e6:1b:5b:4f:cc:22:8a:0d:2d:ab:
89:b9:84:92:45:10:a8:d0:ca:26:1b:83:e8:78:1d:
b9:b5:6c:7c:84:a3:49:e5:51:ca:44:84:73:e6:c5:
00:6d:f7:1b:f0:9e:2d:75:4a:61:97:4a:ac:30:e8:
09:f6:12:50:33:73:35:40:68:a5:19:5f:c6:4e:24:
3c:5e:b7:f1:b8:a7:57:ec:5d:88:93:94:2f:bd:7c:
2d:b4:68:f5:03:44:3f:16:39:b7:47:8d:bd:4e:77:
6b:69:25:4c:e3:a2:31:6e:13:89:6a:29:d1:62:80:
89:c7:09:02:2a:fa:b4:05:bb:d2:e2:0e:59:3e:b7:
d6:20:db:32:0f:88:4a:b8:e0:5b:b5:22:bd:8d:a3:
7d:76:ab:72:2d:27:6e:62:e5:82:3f:e2:9f:45:f7:
98:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:28:7E:85:F6:EF:39:5E:BC:CA:16:4C:B3:DA:95:08:6F:E9:A2:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/a695f056-3b40-3250-b954-f1d214a7bdea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
X509v3 Authority Key Identifier:
keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.132.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:14:35:af:eb:6a:f9:e6:74:a6:51:b3:70:10:fb:7d:8f:91:
e4:7d:54:93:88:42:76:7e:5b:0b:02:1d:7e:47:2f:f9:2c:29:
5c:0b:93:6f:e4:3c:15:a6:d0:4e:e5:72:01:94:b9:1a:60:fd:
8b:0b:e8:ed:a9:18:3f:33:63:d5:eb:37:60:17:80:de:99:0e:
7d:75:4e:39:c4:ee:0a:14:d8:91:ce:4e:1b:8d:3d:16:98:3b:
a0:39:92:da:26:4b:18:74:99:00:10:85:10:f2:08:8c:2f:69:
2f:58:98:e4:d4:33:f8:ce:81:b5:34:02:11:e0:8c:1c:f7:b6:
e7:39:db:29:1c:aa:35:9a:5b:3d:5a:2e:bd:c5:da:ea:a6:6c:
c0:22:17:25:3f:14:29:1e:20:cb:39:55:ad:d2:42:b7:8d:45:
15:71:b2:c5:e1:0c:c2:fc:fd:b4:b0:e3:98:a2:5b:b4:f0:62:
fb:c3:fa:8a:23:d6:a1:c5:84:87:68:79:9e:6a:2e:39:18:7d:
b3:8c:ce:6f:68:07:41:a6:a1:75:5d:2d:0a:db:87:96:c4:9e:
55:f8:ba:f9:bf:56:37:53:68:5c:05:a6:c6:b4:ac:7a:84:85:
30:26:e3:f5:eb:23:d1:24:fd:98:01:5d:89:04:55:eb:9b:4e:
97:ef:6c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:13:16 2025 by rpki-client