Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/43b86b8f-c58f-3d09-8884-792917d50a9d.roa
File: 43b86b8f-c58f-3d09-8884-792917d50a9d.roa (raw, json)
Hash identifier: pZNIn29hCrPUbINx5bIQk4a2a/nR/zIq+OtjPaDt3qk=
Subject key identifier: 86:CA:8F:D5:20:DA:B8:32:C1:93:FD:33:D4:34:E5:99:91:4A:33:E6
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848A99643360449D8CEDDD78E40
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/43b86b8f-c58f-3d09-8884-792917d50a9d.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 397213
IP address blocks: 204.74.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 13 Apr 2025 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:43:36:04:49:d8:ce:dd:d7:8e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=3781aeaf-e84a-434f-a26b-ef7e0308f5a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0d:5e:eb:2d:97:4c:2b:d5:84:d7:aa:cd:0f:
26:4e:34:f2:1a:af:72:9c:87:70:ac:db:96:3d:f2:
f2:3b:50:fc:69:a2:04:19:c9:90:4e:c4:c2:55:ce:
68:cc:e7:e9:2c:4d:39:e5:59:95:73:58:89:f1:e4:
91:ea:1e:1c:1d:4d:f3:81:44:04:30:f8:72:03:0f:
89:93:ca:90:4f:4d:34:da:e0:47:72:f3:63:14:31:
25:bf:52:2b:16:6c:f4:30:be:31:88:8c:80:47:59:
74:35:7b:ab:58:11:1c:7b:99:3f:18:08:b2:2f:a0:
4a:a6:1c:94:0b:33:13:e6:89:0c:f0:65:57:cd:6d:
45:05:72:b7:b5:9a:4e:2c:62:52:df:18:cb:6d:97:
a0:01:5d:53:7b:36:51:2c:a2:66:b3:23:91:12:c2:
00:82:95:8e:78:d9:fe:74:81:84:ac:33:37:13:b1:
df:79:93:3e:53:15:92:60:87:d0:8b:b7:d6:80:fe:
b6:11:25:7a:24:10:84:78:a6:93:30:12:46:34:0e:
fe:8b:8d:31:a2:fc:10:46:b8:ca:b6:10:18:a6:bc:
a8:c5:7e:11:6b:18:c2:44:23:ba:3a:61:63:72:ff:
01:61:4d:67:7a:fe:9b:5e:57:bc:31:c3:4c:13:c6:
ca:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:CA:8F:D5:20:DA:B8:32:C1:93:FD:33:D4:34:E5:99:91:4A:33:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/43b86b8f-c58f-3d09-8884-792917d50a9d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
204.74.67.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:0a:c0:d4:55:58:15:05:22:e7:01:07:17:6d:78:6a:a2:9d:
43:bb:2c:95:b3:b9:74:73:75:65:7b:d4:f3:71:e7:5f:bb:13:
35:c9:15:4e:6b:a9:14:cd:56:10:10:ec:53:0b:82:65:18:b6:
da:35:75:05:78:1a:84:a6:9f:df:8e:c0:e9:fb:6d:ac:72:1a:
a3:95:c9:a3:16:43:eb:29:48:8c:e3:36:23:e5:77:0a:fc:99:
fb:e0:28:0b:b9:08:2b:63:15:dc:f2:5a:91:b7:6c:64:4a:70:
af:62:e6:e0:bf:6e:a2:9a:38:fb:ab:8e:b3:f3:97:32:fd:cc:
7e:4b:a9:c3:c9:10:4b:69:21:a2:be:96:53:da:36:47:33:83:
21:3d:75:17:73:5b:82:39:00:d9:36:0d:a2:35:80:e6:e9:10:
76:01:33:5c:a0:f4:ff:a2:74:27:12:a7:f5:d0:27:d5:09:9e:
69:d2:d3:f5:09:57:9c:23:18:ec:d0:cc:a1:85:ca:e7:5d:0d:
62:46:03:a7:b6:42:b6:a2:d6:76:77:f3:44:88:d7:fc:83:ec:
58:98:09:b4:a0:a3:0d:f0:b4:dd:73:7f:50:e1:92:a3:04:46:
83:26:4a:86:07:2e:d2:82:df:53:21:a6:ab:61:05:b6:0f:00:
ec:50:68:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 07:45:52 2025 by rpki-client