Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/68f9233d-e645-3fca-90c5-a19337299804.roa
File: 68f9233d-e645-3fca-90c5-a19337299804.roa (raw, json)
Hash identifier: 3oSpCPtAcuu+JDK4i/G/8ZcRUIG0oYJ9VIEIBQr6BAQ=
Subject key identifier: D9:B2:4C:0B:5C:74:A8:3B:F3:B2:2B:38:96:88:5A:A6:0B:74:74:57
Certificate issuer: /CN=860b4c38-2ca6-4edd-80ef-1173a8d7ef86
Certificate serial: 010D0C9F4328584940397BB985C1C0C6E5991980
Authority key identifier: 9C:1A:0A:7B:40:6D:41:FC:4E:99:70:8A:78:C9:86:84:99:7C:78:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/68f9233d-e645-3fca-90c5-a19337299804.roa
Signing time: Thu 20 Mar 2025 13:00:53 +0000
ROA not before: Thu 20 Mar 2025 13:00:53 +0000
ROA not after: Wed 18 Jun 2025 13:00:53 +0000
asID: 20326
IP address blocks: 67.209.52.0/22 maxlen: 32
74.118.136.0/21 maxlen: 32
141.98.216.0/22 maxlen: 32
202.8.8.0/22 maxlen: 32
204.16.240.0/21 maxlen: 32
208.91.104.0/21 maxlen: 32
2607:fdc0::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:40:39:7b:b9:85:c1:c0:c6:e5:99:19:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=860b4c38-2ca6-4edd-80ef-1173a8d7ef86
Validity
Not Before: Mar 20 13:00:53 2025 GMT
Not After : Jun 18 13:00:53 2025 GMT
Subject: CN=e1818c3b-1651-43c0-b6a9-52b3e7920cdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:3c:b6:56:7d:df:d9:99:b3:f7:05:81:5f:97:
5b:b8:b9:58:e3:5b:d1:02:64:f4:79:9f:cb:bd:38:
73:10:c9:68:72:61:de:27:8c:59:47:8d:97:bc:73:
a3:ad:25:dd:27:fd:a7:56:a9:3b:9d:2e:16:c7:99:
fb:fc:e5:ca:79:d7:c2:af:db:00:c3:45:03:16:b2:
41:59:5d:26:d0:26:2a:c4:49:3d:05:cc:ae:ff:36:
37:86:9b:70:bd:2d:13:57:42:f2:dd:e5:61:c9:38:
49:34:18:8f:89:2a:f1:e2:ff:75:ef:58:d9:2b:bb:
74:f8:a9:1f:1e:8a:b0:b5:04:1c:3e:e6:a0:e9:25:
fd:ac:db:16:36:14:bb:91:1d:96:12:80:50:9f:3a:
6b:fc:58:e9:7f:7e:2f:90:07:ea:62:94:1b:c1:26:
6d:e9:cd:3e:83:ff:e8:85:07:47:51:96:10:bd:33:
df:bb:10:86:ec:76:23:a2:03:e5:da:9e:a5:17:d8:
4c:67:b2:20:98:69:c3:75:84:d5:74:ef:0c:a9:2c:
3e:e0:97:5c:db:14:34:b7:a6:22:dc:e1:c5:e4:95:
4e:9b:8e:e7:8f:2f:fe:2b:ad:67:ff:bc:5e:d2:c9:
34:66:01:c5:35:70:fa:bb:cd:4f:93:89:a3:7b:d7:
60:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B2:4C:0B:5C:74:A8:3B:F3:B2:2B:38:96:88:5A:A6:0B:74:74:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/68f9233d-e645-3fca-90c5-a19337299804.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.crl
X509v3 Authority Key Identifier:
keyid:9C:1A:0A:7B:40:6D:41:FC:4E:99:70:8A:78:C9:86:84:99:7C:78:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.cer
sbgp-ipAddrBlock: critical
IPv4:
67.209.52.0/22
74.118.136.0/21
141.98.216.0/22
202.8.8.0/22
204.16.240.0/21
208.91.104.0/21
IPv6:
2607:fdc0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:ff:69:5f:f6:c0:30:5d:cd:55:bf:8f:19:0a:2c:40:00:71:
22:9f:01:fa:bd:20:b5:e8:d0:d9:01:a2:b6:5b:5a:f9:84:28:
61:a2:a4:6f:fc:21:c6:ca:cd:f8:c2:d7:08:33:69:ca:77:3d:
5e:bb:0f:11:e5:e7:09:94:2a:cb:e9:14:c5:8a:06:dd:79:69:
d5:73:aa:93:a7:51:28:a9:a8:ce:23:33:e7:b7:bc:e3:73:09:
fd:e3:3d:0d:22:62:87:4a:bc:87:89:5b:0c:ec:1a:2b:13:13:
38:9a:f8:de:b5:f9:e6:b8:f9:60:26:51:1d:6b:79:d3:31:b8:
ec:c3:a2:c4:02:b4:08:6a:2b:1f:9d:a7:4e:55:44:0f:04:aa:
29:b3:0f:28:b9:2c:99:e0:46:d4:96:82:97:d1:ad:5c:e1:8d:
d4:ce:44:3f:fa:a1:2b:36:13:8e:0f:fa:55:ad:ae:2f:1c:30:
52:1a:88:a4:0a:da:93:0f:94:5b:82:b2:25:c6:ba:f9:e8:68:
73:ab:b9:8b:5a:0a:47:88:61:f3:6d:bb:05:93:c5:90:3c:84:
a1:70:15:72:b0:89:68:52:a8:78:9c:20:dd:f5:40:e8:9e:8a:
ae:bb:e3:74:43:58:65:1b:24:6f:c8:48:e2:14:b9:d9:f2:dd:
a5:28:6b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:28:30 2025 by rpki-client