Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/c98c7da6-ee48-3ea8-9b11-8dec71c8737f.roa
File: c98c7da6-ee48-3ea8-9b11-8dec71c8737f.roa (raw, json)
Hash identifier: MIrsTH8CHv9eI67yEaUtH1qQpncaynv9aXFYoiY0V2E=
Subject key identifier: B4:D0:71:42:56:2D:05:15:51:6D:E6:6A:14:09:62:DE:AD:94:6B:55
Certificate issuer: /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial: 010D0C9F43285848EF613CF3A7D27E318B292800
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/c98c7da6-ee48-3ea8-9b11-8dec71c8737f.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 2734
IP address blocks: 66.128.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 13 Apr 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:3c:f3:a7:d2:7e:31:8b:29:28:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=761169b9-4efa-42f1-9b6b-c2c950277f04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:f1:b0:a3:d3:5f:b9:11:fb:e7:87:db:70:aa:
25:25:f3:16:5c:79:45:2a:8e:ac:10:df:f5:13:df:
9c:f4:c9:cc:8c:84:7e:83:2b:b5:c2:1a:7c:72:84:
ad:10:f8:60:9a:c4:27:ef:ba:a0:2e:1e:80:77:60:
59:e5:c6:be:ef:ec:de:36:1d:38:71:03:5e:d4:f2:
40:b2:de:12:09:b0:cc:e5:d0:f8:84:89:de:c4:1b:
01:1e:a1:88:d9:46:a7:25:71:8b:ef:4a:58:de:2e:
be:f6:65:76:31:e2:f3:40:0b:ae:55:ba:11:0e:da:
1d:88:50:d9:cb:0b:11:64:d3:24:e3:fe:d0:1c:88:
84:d9:fe:68:e5:fc:ed:81:10:16:73:ec:a0:59:9a:
cb:8b:e7:35:f7:be:fb:c3:c2:da:05:60:1a:5d:fc:
bb:e1:fe:1f:d2:78:20:98:c8:47:7a:5d:0e:df:a5:
03:4e:c9:81:49:c7:76:ba:ae:28:6f:d9:1c:e2:df:
6e:99:93:75:e0:9f:40:d8:c6:e6:e0:e9:79:ea:63:
a2:f4:a9:23:3d:0e:14:05:ae:c7:26:1a:4b:01:fe:
2a:1c:98:a0:89:ac:88:7c:04:29:8b:ed:a9:95:57:
66:0b:c5:60:f0:d8:ae:74:d8:04:ab:f1:ce:4b:6f:
74:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D0:71:42:56:2D:05:15:51:6D:E6:6A:14:09:62:DE:AD:94:6B:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/c98c7da6-ee48-3ea8-9b11-8dec71c8737f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
X509v3 Authority Key Identifier:
keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
sbgp-ipAddrBlock: critical
IPv4:
66.128.147.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:8b:91:fc:00:04:79:b5:15:ea:dd:64:6b:33:18:af:76:dd:
bf:33:cd:19:a9:71:66:be:9a:64:ef:8f:c1:ae:26:72:a1:ed:
aa:2d:8b:ff:98:35:37:52:99:b5:1d:76:05:7d:02:ec:92:ed:
4d:6c:7a:7d:4a:01:c3:53:56:d6:25:68:61:db:72:bd:70:e0:
3d:e9:f6:62:dd:5c:47:e9:86:9d:03:4d:07:17:95:4b:8c:a2:
6d:3d:48:9b:9a:f8:5c:ef:36:f4:0e:0b:45:39:0f:0a:fc:c1:
14:05:9e:b9:5b:f4:45:9c:ed:78:6b:a2:40:d3:0e:08:2f:c2:
e3:c5:39:b4:dc:60:5d:54:5c:f1:4c:e0:8a:36:af:29:8f:4c:
a4:12:15:0d:3d:6b:4d:81:85:b9:7c:c8:e0:58:f1:91:0c:5b:
f6:99:c1:7c:61:fd:60:9b:4d:22:0a:6b:70:d6:19:98:af:44:
72:33:fa:7a:29:30:21:e0:ce:56:1b:f9:47:c1:08:44:a9:32:
71:33:af:87:46:20:5e:86:08:8d:cf:7e:7e:0d:23:dc:17:a6:
03:c8:4a:70:65:ac:85:6c:db:4e:f7:e2:53:f9:47:cf:04:44:
9c:0e:ab:1c:44:c5:0c:74:06:82:44:79:d5:fb:5b:1e:92:7b:
c8:53:c4:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:45:21 2025 by rpki-client