Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fa66b77e-9fc5-37ff-ad56-c3486d5af55f.roa
File: fa66b77e-9fc5-37ff-ad56-c3486d5af55f.roa (raw, json)
Hash identifier: 9zfn6cwsqXEKXra+134SsxD6Q0RdIp9CtXRsUDR4fgs=
Subject key identifier: E7:FE:CA:A0:8B:71:2A:1C:D5:1F:24:55:CB:B4:1C:F7:3F:9B:21:92
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848BD210A5A5096B22BE3B3AD40
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fa66b77e-9fc5-37ff-ad56-c3486d5af55f.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 397234
IP address blocks: 156.154.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:21:0a:5a:50:96:b2:2b:e3:b3:ad:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=abce94ca-a572-4cb3-b4ba-10db5c42b5c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:1b:72:f0:8e:3a:db:c5:f2:60:c4:02:70:83:
02:9e:c8:9c:33:73:ef:d0:5e:a9:96:76:10:0e:9c:
45:21:34:d4:28:33:89:dd:1b:73:17:d8:bf:71:77:
29:eb:c9:98:1a:14:b9:cb:2b:31:82:1c:7e:3e:60:
75:8c:16:f0:dc:bf:8c:7a:2b:eb:73:1d:d7:0d:59:
4f:ac:d4:f5:bf:c7:14:4d:67:55:92:ff:e5:17:ef:
08:8f:10:66:ef:94:80:8c:64:8f:34:d4:ce:2e:07:
65:12:e8:6b:76:d2:c4:d3:fd:32:50:86:7e:d1:e3:
12:00:d3:96:3e:3f:3a:e2:18:c0:43:f0:cd:08:26:
bf:a3:d2:b1:46:ee:47:cc:bc:88:99:e3:25:62:1a:
14:8b:f9:15:10:43:f4:d3:67:29:36:81:85:f7:cd:
c0:70:f5:e8:70:c9:ed:f4:2a:32:a7:e1:7f:97:c4:
fd:4a:04:9f:f0:d1:55:b3:b8:1d:13:4d:7a:ae:1c:
82:3c:a1:18:c2:28:9a:67:c7:1b:d0:14:31:97:5f:
57:e6:db:ca:d5:76:e1:ce:66:5b:d0:b8:72:39:7a:
34:76:8d:42:b4:59:05:ef:a3:c7:e0:3a:1c:53:51:
15:2c:17:1a:12:8c:2b:ea:12:43:54:a0:b9:37:d0:
ed:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:FE:CA:A0:8B:71:2A:1C:D5:1F:24:55:CB:B4:1C:F7:3F:9B:21:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fa66b77e-9fc5-37ff-ad56-c3486d5af55f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.145.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:75:6b:79:9d:ea:e0:27:ea:ca:08:96:ac:46:80:04:85:dc:
14:e8:c0:ea:e5:65:5f:07:ac:1e:fd:40:e5:48:ef:75:b4:31:
25:88:a8:d5:c7:29:4e:90:9a:1c:69:b5:58:bd:7a:36:48:92:
5a:e3:a8:dc:93:6e:64:cb:12:ea:5d:d6:b5:08:7f:5b:73:bc:
58:f8:5f:4d:2b:f6:b4:be:92:e8:ee:1c:ba:c0:c0:64:e6:8b:
b6:fb:b2:27:3f:f9:e1:15:0c:c0:fe:6c:d9:92:e5:1a:e2:1a:
ef:78:75:03:44:68:74:cf:49:2b:4b:d4:36:e4:ee:19:c7:4c:
f9:92:5a:98:79:82:30:76:c7:00:e2:0a:a6:da:03:0e:48:ac:
22:94:e8:45:fc:77:cf:31:c8:e3:93:3a:04:f4:99:07:d0:7f:
b7:d2:b7:88:bf:88:54:79:67:46:33:19:95:d6:9f:95:62:5a:
49:d7:3c:16:b4:54:b7:6f:89:bb:5c:e9:b0:a8:e8:9f:ac:e2:
bd:8a:ad:27:18:14:98:e7:42:d5:6e:89:30:48:ec:c9:01:f2:
ce:8e:b6:8f:a4:8b:1e:82:10:8e:de:b6:04:e2:42:a5:05:47:
b7:c8:21:c6:27:b2:08:43:b4:2c:95:9b:d4:ec:c2:ce:cd:8d:
a4:a5:db:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 11:16:20 2025 by rpki-client