Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/1b479152-b096-3335-94ad-9f045f087ebc.roa
File: 1b479152-b096-3335-94ad-9f045f087ebc.roa (raw, json)
Hash identifier: UnN2Bc6tIA4ZtG8RtGbXrB/y5Z9F5VVtN9VUBKfna7I=
Subject key identifier: E6:04:48:EE:3B:9F:A9:20:27:03:E6:31:B4:61:32:E6:ED:55:D7:A8
Certificate issuer: /CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b
Certificate serial: 010D0C9F43285848CB165637F84B9365AFBF58A0
Authority key identifier: B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/1b479152-b096-3335-94ad-9f045f087ebc.roa
Signing time: Thu 06 Feb 2025 14:00:52 +0000
ROA not before: Thu 06 Feb 2025 14:00:52 +0000
ROA not after: Wed 07 May 2025 13:00:52 +0000
asID: 16509
IP address blocks: 149.72.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 09 Apr 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cb:16:56:37:f8:4b:93:65:af:bf:58:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b
Validity
Not Before: Feb 6 14:00:52 2025 GMT
Not After : May 7 13:00:52 2025 GMT
Subject: CN=558d73be-3415-49b4-b5a0-07db777b3428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d1:24:40:92:d4:d0:df:34:cb:a1:e7:61:85:
07:ea:64:cb:b5:b1:ce:93:3b:e3:17:05:f3:b5:c2:
d0:c3:45:66:9f:ca:8c:0c:d8:9e:a8:a2:4b:3b:df:
67:ae:e5:bd:28:b7:ae:cd:b1:59:1e:7f:8b:34:e0:
30:e6:19:cf:e3:89:b1:cc:75:46:e8:2b:36:6b:dd:
5c:f5:25:1b:7e:14:b7:7a:5d:a8:48:04:59:3e:50:
0f:6f:64:d3:49:4a:96:47:3a:9f:a8:a4:ab:24:af:
6e:fb:86:e6:8f:b2:94:2c:55:a4:1b:b5:c0:5f:33:
30:04:e4:bf:f8:58:ba:bb:fa:53:f7:ba:8a:ee:5b:
79:1d:d4:38:25:de:86:f1:35:58:ad:78:b2:bf:a7:
60:e7:cf:04:bd:38:72:60:66:aa:a4:28:58:d9:e5:
ff:d6:ca:aa:4d:93:9d:a6:ea:c5:96:66:d1:bb:bb:
d4:d1:e2:46:e7:cf:ba:d3:7b:7f:d9:ad:28:a7:54:
eb:ee:5b:ca:96:ac:c3:37:a8:b2:fe:26:6b:b6:a0:
4e:3f:17:93:78:53:b3:a7:06:39:55:93:88:cf:4a:
bc:95:84:c0:24:7b:16:06:a4:1e:00:05:8d:74:ad:
87:0e:46:c9:1a:e6:0d:15:6b:ac:fe:32:01:83:02:
12:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:04:48:EE:3B:9F:A9:20:27:03:E6:31:B4:61:32:E6:ED:55:D7:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/1b479152-b096-3335-94ad-9f045f087ebc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl
X509v3 Authority Key Identifier:
keyid:B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer
sbgp-ipAddrBlock: critical
IPv4:
149.72.0.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:b6:e4:d6:28:57:bf:97:61:a9:c4:5f:1e:b5:11:17:49:98:
76:69:59:42:64:14:01:45:7b:dd:9c:25:38:de:80:f5:e5:b1:
60:1e:86:18:4c:5d:3a:38:e0:fb:33:e7:4c:9d:6b:69:e5:cc:
2e:d6:34:42:94:8c:42:8f:92:fc:3d:99:b6:0e:18:5d:39:8b:
00:28:8c:76:fb:f4:3a:99:f8:13:bf:cb:e4:de:86:f9:fa:c5:
19:fe:38:65:9f:76:fd:9e:8e:b0:3d:cd:8c:c1:67:ac:c4:00:
7c:9f:d9:17:ca:41:21:92:d4:0a:50:40:c6:ea:1f:c8:62:70:
c8:39:58:6f:b2:c7:79:34:45:de:54:15:58:6e:2f:16:20:0b:
dc:54:1f:eb:70:c6:2b:6f:b1:8b:60:b9:8a:c9:4e:ca:01:07:
e1:63:b8:1a:26:3c:05:38:f9:fd:2d:7a:a5:3c:29:98:af:6a:
40:e5:51:99:6a:ea:50:0a:81:81:6e:23:37:0d:75:19:33:cc:
02:61:ae:94:a1:6c:d5:ed:50:a1:5d:3b:3b:90:a2:9e:66:47:
21:82:ab:19:14:2f:db:f1:b5:24:f2:29:70:33:80:ee:aa:97:
60:e9:2a:74:5b:4b:7a:e4:f6:f5:40:33:4b:51:fd:62:83:d6:
d7:d9:b9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:12:08 2025 by rpki-client