Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f0a88928-30d2-3f62-9933-2ca85c1a174d.roa
File: f0a88928-30d2-3f62-9933-2ca85c1a174d.roa (raw, json)
Hash identifier: QvYXn++OIS1lSL16Uq0+lsWFlHghwJOzlswd2FpHq0k=
Subject key identifier: 3F:85:0E:B1:1E:AC:06:F5:8D:56:95:FE:19:41:9D:D2:3A:91:8E:04
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584953C41EE6C936C076E1AC2980
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f0a88928-30d2-3f62-9933-2ca85c1a174d.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 8987
IP address blocks: 198.3.20.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:1e:e6:c9:36:c0:76:e1:ac:29:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=b2de7d74-89c8-4abf-ada1-2902ca6f926e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:15:0c:c8:f8:cc:90:c2:fc:9b:68:5b:a2:2c:
9c:d3:52:f8:60:c3:47:86:cf:90:6d:32:bf:b8:79:
89:4e:36:da:f4:00:a5:02:b0:48:d7:02:48:fb:63:
15:0a:d3:d0:94:8f:3f:7c:d2:42:6b:f9:e8:fa:45:
17:3a:33:81:f4:19:71:18:45:1b:98:19:f4:bd:56:
d5:87:8e:ba:6d:6d:17:c0:15:ff:78:e6:8a:32:52:
69:34:63:aa:af:ea:13:0d:a2:39:ed:c2:09:c2:da:
69:e1:ca:40:0b:7a:23:8b:62:8b:c7:b2:00:c0:0a:
80:b0:c6:ef:3c:f7:0b:a7:3a:dc:ae:67:1d:b0:27:
b9:31:00:7c:94:73:1f:3a:e2:3a:ee:04:ca:2b:48:
e4:59:cb:a6:77:3f:04:93:6b:48:8e:32:f0:2e:ff:
b1:d9:8b:92:3b:2d:44:5f:21:de:95:a4:9d:02:b5:
a5:d1:6b:88:60:11:ec:14:7b:02:11:ca:a4:db:78:
e5:5b:54:b7:28:6e:f2:62:bc:4a:c5:60:15:08:b0:
fb:99:de:4e:93:67:0b:3e:a7:a6:0c:6b:d4:1f:b3:
b6:d1:64:0b:0d:df:ec:e7:29:2d:6f:a3:78:c5:2e:
d8:b0:10:72:07:a5:ce:58:ee:47:9d:82:9a:3c:b3:
8a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:85:0E:B1:1E:AC:06:F5:8D:56:95:FE:19:41:9D:D2:3A:91:8E:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f0a88928-30d2-3f62-9933-2ca85c1a174d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
198.3.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:2e:08:32:0d:f9:7a:9b:4f:ab:6f:dd:2a:aa:96:b5:9a:3d:
b7:b3:18:13:f8:d3:c4:f8:73:67:1a:7d:0a:2d:5b:ec:41:f1:
15:99:20:d9:97:5e:2a:58:f7:0a:60:b2:c6:8d:1b:d1:b2:31:
32:5e:c0:2b:2f:5a:ea:88:c5:a3:ff:ec:d6:95:ce:f1:7d:82:
26:02:70:4a:fd:3a:f7:38:46:07:52:bd:9c:6d:4e:23:44:9b:
8b:b2:d9:a4:78:31:45:8a:33:08:9a:46:81:37:fc:69:59:d0:
c9:a6:40:f3:09:08:e2:b6:14:43:ea:42:60:0c:d8:ca:5a:9b:
16:15:f4:51:8f:66:b8:fc:9a:c5:09:58:e1:66:d3:2b:05:a1:
69:f6:9c:93:1b:f6:ba:94:3a:33:96:d1:54:23:09:da:ae:1e:
2a:1c:be:37:4d:bb:ff:c8:14:b9:e1:9c:52:32:65:9c:f6:28:
6b:eb:01:0f:42:32:87:83:f6:7f:7f:80:b6:2f:2e:5c:d7:c6:
e0:6b:0a:e7:64:29:9e:92:47:1b:c7:ce:e4:92:d7:39:a8:99:
90:c0:a1:e6:2d:38:bb:12:d5:4f:e3:78:4b:e5:a8:61:11:03:
ac:ba:07:1c:98:6c:0e:8d:c6:36:90:cc:ca:9f:a9:f0:19:75:
0c:b7:e5:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:59:27 2025 by rpki-client