Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f91d0ed1-7305-3885-b650-88a595e34a41.roa
File: f91d0ed1-7305-3885-b650-88a595e34a41.roa (raw, json)
Hash identifier: gQd23LxDqIencjml1nRimrI0x6OBfdQLHAJacFD4WOI=
Subject key identifier: 7F:52:F4:15:77:C9:6C:1A:63:51:51:1B:26:E2:D4:83:CA:4F:3F:8B
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848BD20EE6D145D4B073D5CF4E0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f91d0ed1-7305-3885-b650-88a595e34a41.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 397230
IP address blocks: 156.154.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:20:ee:6d:14:5d:4b:07:3d:5c:f4:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=cb063bc9-24c2-41a3-8281-a3eb5dcd8436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:8c:12:7c:76:5c:43:9e:6b:63:5d:da:69:86:
6f:88:19:e0:01:d7:5d:5d:bb:a0:de:f6:b6:d7:10:
37:a5:89:80:3d:15:35:6e:6a:a9:cc:5b:2c:07:50:
b1:c3:34:35:89:e7:08:8f:09:0c:0a:3e:60:fa:f9:
53:65:d2:39:cd:94:d1:f2:c8:24:97:f0:13:92:85:
34:8c:8d:d6:6c:c4:68:47:2a:01:21:4f:3c:4b:de:
37:49:97:a0:48:ca:64:69:18:be:f5:81:34:a0:89:
1e:07:b5:37:6c:1c:04:84:30:27:53:64:18:92:ce:
64:bb:f5:6a:a9:7e:75:a5:66:34:a4:28:23:15:22:
ca:5b:5e:2d:b5:7b:71:64:0a:02:0c:aa:b3:6e:c3:
21:f2:f0:f0:e5:d4:a4:6d:7f:97:b7:a3:56:73:4b:
63:62:9a:3c:02:7e:b4:8b:6c:e3:ab:81:45:66:34:
56:b8:9a:f3:a6:25:74:88:89:04:5e:f7:fa:be:51:
ab:98:5f:99:f3:83:1a:3d:e9:67:3a:4a:9a:e3:62:
b3:54:77:5c:af:ad:0d:2c:3e:3a:bf:19:78:ec:e6:
66:69:85:b1:9e:6b:74:7d:26:4c:1e:d5:4a:5f:17:
fb:29:e2:aa:b8:d2:f2:a0:31:82:04:c4:a5:3a:5f:
de:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:52:F4:15:77:C9:6C:1A:63:51:51:1B:26:E2:D4:83:CA:4F:3F:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f91d0ed1-7305-3885-b650-88a595e34a41.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.154.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:10:69:fb:8b:57:8d:f7:47:4a:7c:c7:ed:38:81:cd:9b:1e:
42:de:f3:79:ed:b2:a2:65:3e:a1:b7:10:9a:db:ab:b0:7e:9f:
b9:5f:7f:3c:b2:36:0a:8b:b9:d3:31:41:56:eb:5f:2d:72:64:
81:c7:08:2f:2b:45:f8:6a:91:fd:fa:89:6d:6b:f9:54:e5:e2:
04:19:f1:16:64:ab:2c:2b:d9:10:36:cf:83:47:f7:71:3d:45:
18:22:2d:94:50:d8:8e:38:73:82:d4:8b:f2:08:fb:27:c8:66:
6b:a2:2e:19:ad:55:15:78:0f:40:2b:bb:9e:ff:8c:a2:2a:35:
b0:25:d8:7a:6f:42:c4:ab:0b:96:8c:45:07:a2:de:42:39:70:
53:95:1f:30:09:c6:ca:c5:5c:68:3d:27:36:49:ef:74:2d:30:
5f:52:f4:9f:85:23:ec:3a:20:4e:78:5b:32:36:7a:d1:1a:72:
15:25:d4:05:24:c0:b1:18:ff:7a:2b:a2:8f:06:7b:81:de:b7:
ff:25:d2:95:63:69:c5:e6:c8:01:ce:e2:9f:86:e2:8b:6b:6b:
1d:5c:e0:5a:93:2e:35:c1:3b:e2:46:ae:38:0e:f6:c7:fe:a0:
e7:f9:3c:83:c7:79:a0:57:af:04:5f:1c:46:26:d1:cd:30:61:
c4:59:b3:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 20:43:48 2025 by rpki-client