Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/dc2f8723-1a25-3bb3-8ab1-b25662ba1a77.roa
File: dc2f8723-1a25-3bb3-8ab1-b25662ba1a77.roa (raw, json)
Hash identifier: wj13Trfyi2mfLysmVO856R2EIfGgIZC+tfen6x7EdVE=
Subject key identifier: 9D:45:4A:3C:36:A6:73:61:96:70:E0:5E:E1:01:9A:41:5A:05:ED:80
Certificate issuer: /CN=208dcf74-3dce-4384-beaf-70319895fc4b
Certificate serial: 010D0C9F43285848F65BE6465CCFEBFE0E67A3C0
Authority key identifier: B4:56:5E:FB:60:62:B4:E7:31:22:9B:90:F1:66:8D:39:BD:63:07:5B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/dc2f8723-1a25-3bb3-8ab1-b25662ba1a77.roa
Signing time: Sat 22 Feb 2025 02:00:38 +0000
ROA not before: Sat 22 Feb 2025 02:00:38 +0000
ROA not after: Fri 23 May 2025 01:00:38 +0000
asID: 16509
IP address blocks: 134.65.168.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/208dcf74-3dce-4384-beaf-70319895fc4b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/208dcf74-3dce-4384-beaf-70319895fc4b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Apr 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f6:5b:e6:46:5c:cf:eb:fe:0e:67:a3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208dcf74-3dce-4384-beaf-70319895fc4b
Validity
Not Before: Feb 22 02:00:38 2025 GMT
Not After : May 23 01:00:38 2025 GMT
Subject: CN=23839236-327e-4d7e-a9b8-5a8856250202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b9:b0:d7:82:8b:08:51:ec:e4:3a:38:7e:14:
bb:be:c6:7c:be:12:bc:64:1e:2b:ed:15:83:04:74:
c0:9d:29:8e:93:bd:83:2f:33:43:9e:84:f2:17:64:
0c:43:c6:e6:46:c9:05:8d:1d:c9:65:f4:09:32:3c:
35:fc:58:6a:f9:ea:34:98:88:65:8d:ae:35:f3:dd:
ad:0c:4a:74:3a:17:e0:c9:c9:a8:d9:56:6e:86:01:
e8:0f:91:59:a0:88:e5:01:ce:53:b4:cd:c9:51:81:
2d:16:cc:bf:a1:3c:89:0e:49:0e:96:03:8d:4e:c2:
bb:5d:2f:6e:d8:fb:f1:f9:09:dd:d4:a3:75:4f:09:
a8:55:95:38:fb:35:9d:0b:bc:ea:d2:95:76:5f:a3:
27:12:bf:f9:3e:dd:5b:05:6c:9f:2c:36:2c:32:a9:
e7:7f:3b:79:2d:15:e5:53:df:a3:c5:46:f5:0b:48:
28:37:11:8a:cd:af:8d:46:ed:cc:7a:1c:a2:90:27:
ff:38:52:aa:bc:05:81:1f:a8:f7:fa:5f:62:40:09:
0d:eb:ff:9f:2c:82:c0:6b:6d:b3:22:2c:35:5b:18:
e9:37:a3:e4:d5:cf:14:95:5d:dc:2c:be:96:4b:12:
ec:04:6d:00:ce:38:7e:59:93:72:08:98:11:20:2e:
83:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:45:4A:3C:36:A6:73:61:96:70:E0:5E:E1:01:9A:41:5A:05:ED:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/dc2f8723-1a25-3bb3-8ab1-b25662ba1a77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/208dcf74-3dce-4384-beaf-70319895fc4b.crl
X509v3 Authority Key Identifier:
keyid:B4:56:5E:FB:60:62:B4:E7:31:22:9B:90:F1:66:8D:39:BD:63:07:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b.cer
sbgp-ipAddrBlock: critical
IPv4:
134.65.168.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:73:b3:7b:69:22:1d:3e:42:1d:0a:da:80:f5:60:9d:15:ea:
b7:b6:e0:c3:01:5a:d2:4c:05:3d:e6:1f:ab:2f:ff:90:3f:5d:
6d:d4:1c:c4:b7:20:c4:5b:89:c0:95:21:d7:3b:8f:0c:5d:d5:
ae:a4:05:93:80:d6:6b:d5:10:80:2a:37:af:62:6d:bb:35:28:
5b:7f:7d:13:0d:85:ae:17:c5:0b:39:16:04:b8:08:52:09:28:
7c:b6:0d:94:15:83:52:5d:c2:5f:77:8f:14:e1:e4:68:3f:36:
20:0a:33:56:cb:b9:b8:29:77:af:9a:d9:ff:2f:b4:a1:b4:00:
9f:24:38:39:44:57:d0:da:6a:94:94:cf:5b:e0:71:58:2f:65:
a8:a3:ad:bf:7d:11:cd:55:fa:83:52:37:71:b3:0b:6d:84:a3:
eb:c6:b2:37:86:3d:41:bb:94:cd:84:c1:f3:f5:33:2f:66:13:
78:35:5c:1e:57:2a:98:fa:33:5a:9a:4e:bf:69:b2:c5:9d:df:
12:2a:45:c2:fe:6d:a8:0f:f8:f3:6b:a6:7a:62:30:56:ac:7d:
d1:b3:ca:a6:ca:ec:a0:10:63:f9:2d:8c:74:92:a3:fa:f9:bf:
51:b4:6c:c3:c5:d6:31:45:67:cb:3d:63:0e:fc:97:dc:9d:2b:
31:9e:23:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 12:46:37 2025 by rpki-client