Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bf6646ca-3e4d-3245-ab80-ea67e804fa1d.roa
File: bf6646ca-3e4d-3245-ab80-ea67e804fa1d.roa (raw, json)
Hash identifier: x4J/XgKepDz/yIH/JeH5vf/RzpV5FY1JZFBZM1LWGG8=
Subject key identifier: 5C:7E:9A:88:5B:04:DF:00:4A:B5:4D:41:89:06:F7:13:8F:DC:9B:B1
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848A996496C0392CC0A394DE240
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bf6646ca-3e4d-3245-ab80-ea67e804fa1d.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 397227
IP address blocks: 199.7.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:49:6c:03:92:cc:0a:39:4d:e2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=70a6cd50-d47d-48e4-bdfa-523f81eb0368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:62:9c:fc:09:dd:11:70:e8:ba:4e:81:04:9a:
d3:14:2d:10:2a:3b:07:9b:73:7f:60:f0:9f:d3:6f:
f2:54:69:8c:5e:e9:74:7b:8c:ea:e3:20:7f:31:50:
cb:12:89:d7:3f:ef:b7:3d:55:a8:d1:6d:03:b4:04:
6b:82:12:9d:43:da:a0:c8:e9:9b:f9:6a:7f:87:3b:
59:3d:c9:0d:f2:4b:49:ad:bb:52:55:af:44:60:40:
97:3d:79:67:0a:78:54:48:04:55:9c:98:7e:1f:f8:
30:d1:85:29:d7:76:5f:46:d4:cf:f2:a3:19:60:af:
b7:df:10:af:12:36:b6:95:1f:a8:bc:1c:3c:4a:88:
4c:e6:3b:46:35:77:ab:73:40:99:13:e8:90:d4:46:
9c:cb:07:59:9a:f3:a7:a8:2a:12:ea:6f:38:41:ad:
7d:10:cf:d1:17:e8:c8:77:1a:5e:c2:40:63:09:45:
12:94:41:29:be:aa:fe:70:72:ca:19:6a:aa:96:a1:
d8:d1:26:52:9f:bc:25:31:6a:1c:eb:70:de:3f:fa:
8b:32:ed:4c:68:27:64:0b:80:3f:af:0a:e7:5d:5c:
be:43:0b:f2:4f:51:42:c7:e7:bb:c9:6b:5a:44:2a:
4f:3e:a6:57:7e:68:6a:b8:3c:e7:c8:1d:73:5e:5d:
fa:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:7E:9A:88:5B:04:DF:00:4A:B5:4D:41:89:06:F7:13:8F:DC:9B:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bf6646ca-3e4d-3245-ab80-ea67e804fa1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.68.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:d0:5e:f2:1d:48:a6:7c:a6:78:94:c5:eb:23:0c:bb:e4:e9:
27:e3:1b:26:cc:c1:7f:13:cb:e5:c2:9f:db:e1:41:b2:a4:cb:
58:aa:17:3f:ec:a0:02:9e:b8:f9:cc:96:d1:4f:9f:f1:9c:d8:
b9:81:35:8d:11:fd:e2:86:fb:0f:73:7c:78:79:b9:07:6f:7b:
68:05:b4:34:15:38:ed:9a:68:53:b3:2c:4c:5e:03:dc:29:da:
cc:82:f8:19:9e:a4:e7:3a:d2:26:a4:ad:b3:25:d3:bf:a1:dc:
d5:bf:0c:2a:c4:47:0d:a7:d3:a8:95:8d:dd:af:33:85:76:82:
92:30:b2:5e:52:e1:36:67:8c:c0:84:b8:29:41:66:ac:43:79:
95:e4:cb:62:00:72:08:ab:ac:f5:63:1d:89:a2:bd:3b:ed:bc:
cc:0d:58:ab:50:80:bf:31:36:96:23:a6:27:be:cf:32:26:14:
29:fd:4a:4d:06:dd:92:d4:09:2b:f9:89:f1:1e:9b:85:3a:5c:
97:9b:2e:8f:56:9f:55:85:44:fb:fd:85:f6:3c:4c:45:0d:c1:
2b:07:d8:8e:48:42:d3:17:ad:d7:f0:b2:44:a0:95:73:1e:ca:
73:c9:2e:d7:96:84:69:45:36:ac:3f:3b:a6:87:93:39:cb:0b:
b5:f3:e1:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 18:32:33 2025 by rpki-client