Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5fd8a52e-3bae-3135-af74-f80d42dfb479.roa
File: 5fd8a52e-3bae-3135-af74-f80d42dfb479.roa (raw, json)
Hash identifier: h2PigARk4rwHIHU8uRIGvK+Z2dS79cFrEgx7f69rgN0=
Subject key identifier: A9:CB:BB:BD:4C:76:29:E2:ED:C7:91:C5:33:6B:11:B6:F9:3D:04:81
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848A996536E84CB19A33FE6A6C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5fd8a52e-3bae-3135-af74-f80d42dfb479.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 397230
IP address blocks: 156.154.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:53:6e:84:cb:19:a3:3f:e6:a6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=c89f7618-57fd-47f7-a8cd-2995e9a8527d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3e:5b:07:f2:83:46:ef:f1:0d:62:be:de:7d:
89:96:3d:00:d6:14:2e:fd:97:29:63:cc:6d:8f:68:
ad:1d:c8:b4:74:5e:d8:17:9d:59:bd:86:20:e2:5a:
28:dc:9e:63:81:5f:07:11:ff:e3:89:a5:85:a5:19:
e2:45:97:75:3c:aa:b5:82:26:b5:b0:87:69:d1:f1:
fe:f0:1f:93:67:4d:69:98:f2:1b:af:6c:07:be:cd:
3e:61:72:c6:93:86:01:0b:a0:02:6e:6e:e6:57:b7:
19:e2:86:99:03:ab:ff:90:76:27:2f:53:9b:84:b0:
34:ea:4d:62:03:ab:11:2f:d0:1e:70:a8:11:1b:41:
67:cb:a1:1e:ad:1c:6b:a1:15:fe:fd:34:f7:a8:10:
1e:44:2a:6b:8a:6e:6d:f7:f8:d2:44:70:61:dc:dd:
ac:d0:83:a4:c3:9f:41:5d:44:0f:1d:fd:e5:db:2b:
1e:bc:11:0b:83:43:39:30:7a:73:3f:d0:d2:f1:c3:
87:73:31:c9:8d:26:85:2b:e0:97:e0:dc:03:ee:41:
32:6c:2a:b8:38:6c:16:ed:c4:90:67:74:9e:3e:38:
a0:90:83:51:53:9e:78:29:ec:4c:6d:3b:84:86:fa:
56:fb:44:73:2a:92:7a:8c:0b:ea:80:d3:a7:23:0b:
69:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:CB:BB:BD:4C:76:29:E2:ED:C7:91:C5:33:6B:11:B6:F9:3D:04:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5fd8a52e-3bae-3135-af74-f80d42dfb479.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.132.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:0f:e2:3f:0f:2c:7e:a0:11:f2:3e:5c:34:31:e5:d8:a5:9d:
a7:4f:2f:9f:f6:0d:3c:05:b9:d4:f9:c1:4f:f0:0a:94:87:9c:
a9:a3:df:9a:ea:a7:b9:bd:8e:3b:c0:e5:53:dd:d4:9b:1d:0e:
d3:9a:a6:56:f4:cb:ae:56:3a:f9:58:22:41:d7:0c:e1:fb:f0:
10:b6:06:f3:02:e9:21:40:a3:cc:df:fa:22:51:37:09:ed:3a:
37:46:ce:0d:fe:83:88:7f:10:92:41:6f:ff:11:cf:b4:e8:e4:
43:6f:46:56:fa:f6:d3:1a:ed:aa:c1:7b:f8:90:c6:c7:9b:74:
1a:a6:c4:24:d2:9f:23:16:1f:e3:e5:12:3b:0c:43:e7:2d:56:
a1:72:e5:c5:07:dc:1c:c9:c1:19:09:8f:93:a2:af:3c:8e:c3:
4a:1a:89:00:c6:02:30:48:71:40:40:97:4d:d8:e7:2a:3a:bd:
d6:e5:c5:ed:3e:07:20:35:40:8c:69:cb:fd:71:26:3f:22:a6:
b8:e8:29:8c:8c:aa:af:41:40:4f:cf:ce:fc:29:f1:39:d5:11:
02:31:7c:f5:ed:de:eb:53:b1:09:f0:b2:78:8e:72:ab:4c:02:
42:52:6b:08:2e:12:00:ac:84:2a:24:e9:2a:f1:00:99:04:f5:
75:23:80:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:28:37 2025 by rpki-client