Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/4c687e6c-747b-3fe7-9ef7-c8b6fe687d0d.roa
File: 4c687e6c-747b-3fe7-9ef7-c8b6fe687d0d.roa (raw, json)
Hash identifier: Z1KzpjVVHuj+TvEqvKLeRGwUecDwksDG45zHM1JXaKY=
Subject key identifier: 4A:55:A3:4E:E0:63:5B:61:71:98:F8:A7:F9:33:45:E0:9C:B1:49:29
Certificate issuer: /CN=35dd34c4-644d-463f-8aba-5a3d509d5560
Certificate serial: 010D0C9F43285848EF6160173CD483EE7F9F9B98
Authority key identifier: DE:68:B5:45:30:7A:DA:0B:73:6E:15:EE:60:89:9C:2F:9E:EE:1C:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/4c687e6c-747b-3fe7-9ef7-c8b6fe687d0d.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 16509
IP address blocks: 142.202.40.0/24 maxlen: 24
142.202.41.0/24 maxlen: 24
142.202.42.0/24 maxlen: 24
142.202.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35dd34c4-644d-463f-8aba-5a3d509d5560.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35dd34c4-644d-463f-8aba-5a3d509d5560.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 09 Apr 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:60:17:3c:d4:83:ee:7f:9f:9b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35dd34c4-644d-463f-8aba-5a3d509d5560
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=f6310bd3-f1aa-4f70-b43a-cc89426199da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:60:53:c9:d5:11:13:c5:fd:6d:b9:ef:c5:60:
4c:0c:aa:36:dc:05:44:21:11:d1:42:f2:98:89:2e:
51:39:91:81:a5:45:6c:dd:43:4d:47:c9:ee:c9:85:
36:41:d5:b0:f5:9e:65:6a:f7:0e:97:c3:06:d6:55:
51:d1:d1:32:45:b2:f0:21:fe:c5:5f:d0:48:af:a5:
4e:9f:e2:52:f2:11:72:be:a6:01:ef:15:43:0a:67:
a7:44:68:0b:c2:95:77:74:d2:72:72:0c:b8:d4:cd:
e9:8f:1e:84:23:69:8e:49:32:38:79:62:f5:91:53:
b0:0b:8d:f0:90:74:df:1d:95:ed:15:35:a3:7c:f7:
fc:70:f3:49:46:1c:f8:1f:69:87:ab:6d:bc:0e:12:
95:a1:dd:ca:bf:98:99:e2:d2:e2:45:5a:b5:59:96:
dd:19:36:aa:f9:53:8e:13:96:f3:27:9d:c0:b7:78:
bd:b2:de:da:01:9b:6b:1e:88:bd:e6:f5:b9:9b:4d:
c1:e0:3a:29:0d:40:cc:da:05:f4:e3:04:24:f8:53:
c7:8b:2e:0d:59:74:a7:f2:d6:08:0b:43:3b:7c:b2:
3c:6a:9f:a2:5f:65:db:1b:58:c7:99:96:19:cd:59:
1e:56:7b:d6:40:c5:e3:6c:c5:d8:88:87:6d:9b:ed:
68:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:55:A3:4E:E0:63:5B:61:71:98:F8:A7:F9:33:45:E0:9C:B1:49:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/4c687e6c-747b-3fe7-9ef7-c8b6fe687d0d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35dd34c4-644d-463f-8aba-5a3d509d5560.crl
X509v3 Authority Key Identifier:
keyid:DE:68:B5:45:30:7A:DA:0B:73:6E:15:EE:60:89:9C:2F:9E:EE:1C:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560.cer
sbgp-ipAddrBlock: critical
IPv4:
142.202.40.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:ae:ae:2e:87:65:00:e4:27:fc:29:c9:4b:fa:de:99:eb:e0:
44:6f:a4:07:7b:c5:3d:91:75:d0:b9:2c:30:e0:b5:e9:b0:fc:
5d:4c:6f:b2:84:9d:d2:ee:d9:a9:69:f5:22:01:2f:20:8d:3e:
7e:bc:11:2b:ac:f1:6e:41:d7:5a:51:0c:3c:eb:27:24:49:7a:
c8:82:8d:00:bf:9a:7d:c4:02:c6:3b:f5:32:ee:77:cd:7e:82:
fe:24:82:22:ab:bb:e5:17:42:45:36:10:b7:a7:1b:bc:29:a1:
0f:90:7f:37:25:89:47:e0:de:42:0a:20:4f:61:aa:f9:25:b9:
b8:fb:be:73:28:0c:d0:51:b3:8f:d3:3f:67:46:3c:ce:81:80:
e9:51:f3:48:42:f9:8f:7c:b5:13:13:25:e5:ee:cd:26:b4:56:
ca:89:d4:ef:4d:38:f7:02:98:39:7f:80:53:61:88:3b:d1:c6:
49:35:a8:02:62:27:37:91:75:4e:7b:c7:2d:13:ce:68:5d:ad:
13:14:93:2d:1a:5c:fd:d3:6b:e9:02:06:2c:fb:00:5a:95:fa:
8a:62:f1:a1:a1:24:e6:94:ee:d4:04:c3:13:c3:e6:be:80:bc:
c5:a6:6e:5f:d5:2d:c0:4e:bd:8f:30:70:4c:f1:f3:65:27:85:
a2:0a:c0:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:41:11 2025 by rpki-client