Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/7f02fce9-3961-3b18-8795-ab236c2e0478.roa
File: 7f02fce9-3961-3b18-8795-ab236c2e0478.roa (raw, json)
Hash identifier: K0ef1Rrxp/qyvE6HJdpH++cDOggAXWOONgKOgztvlbk=
Subject key identifier: DF:A7:1F:AC:F8:2A:4A:FE:B4:E9:0C:E4:48:46:09:94:39:17:67:FE
Certificate issuer: /CN=be3ff10d-9ac5-46a9-8eb4-823027607ca1
Certificate serial: 010D0C9F4328584953C40DA75DD23B55B739E300
Authority key identifier: C5:FD:6F:CD:D2:74:9A:00:05:9F:45:D5:49:E1:47:AE:5D:95:65:C6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/7f02fce9-3961-3b18-8795-ab236c2e0478.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 16509
IP address blocks: 170.89.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/be3ff10d-9ac5-46a9-8eb4-823027607ca1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/be3ff10d-9ac5-46a9-8eb4-823027607ca1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:0d:a7:5d:d2:3b:55:b7:39:e3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be3ff10d-9ac5-46a9-8eb4-823027607ca1
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=5f5cc3b7-25e4-4090-ab21-0db56d5c3dfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:45:65:32:64:e4:78:75:06:ae:b0:74:4f:81:
b6:2e:0f:19:aa:4a:26:84:a2:05:57:90:a5:27:cc:
98:2f:54:46:79:9d:29:61:e5:ab:c0:43:83:b7:cc:
27:f5:18:f9:83:a8:99:29:4c:68:9f:4b:5f:35:73:
8c:79:92:d1:4e:81:ca:0e:22:be:d2:a4:e6:22:5c:
20:08:32:17:d4:cd:2e:f4:bd:49:e8:fb:49:f9:b7:
ee:f0:89:4e:c3:4a:fa:d6:d4:7a:7f:ed:49:1f:b4:
fb:c4:25:a6:9b:cb:a7:9a:80:f1:60:13:33:8e:2c:
01:26:da:94:bb:e2:6a:06:20:8a:77:39:39:d3:a4:
36:ee:cb:cb:a9:8e:08:91:59:cc:ad:31:43:14:fe:
99:24:41:15:21:80:81:08:84:c8:a6:cc:ac:a1:9e:
10:53:f4:da:d4:35:58:26:62:e3:ea:8f:e4:c7:61:
d2:60:c3:4f:7b:07:77:0a:0a:ce:10:8e:c6:df:c3:
49:77:a2:aa:7b:d0:e0:40:24:f3:bd:99:21:c3:16:
4a:8e:89:48:86:7a:1c:b7:30:c0:50:8c:04:0f:72:
24:c7:cc:82:ef:ac:fd:70:7b:a6:1d:8c:f2:aa:4f:
c6:95:45:5f:f5:04:ae:47:53:83:26:a5:9c:5a:b6:
5b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A7:1F:AC:F8:2A:4A:FE:B4:E9:0C:E4:48:46:09:94:39:17:67:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/7f02fce9-3961-3b18-8795-ab236c2e0478.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/be3ff10d-9ac5-46a9-8eb4-823027607ca1.crl
X509v3 Authority Key Identifier:
keyid:C5:FD:6F:CD:D2:74:9A:00:05:9F:45:D5:49:E1:47:AE:5D:95:65:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer
sbgp-ipAddrBlock: critical
IPv4:
170.89.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:05:da:67:2c:b2:d2:6c:2a:b2:35:ab:6d:c0:a1:c7:61:c1:
ac:96:9b:b2:16:2d:90:4c:33:51:57:8f:33:76:30:67:3b:77:
93:21:bd:f4:e7:4a:70:e9:41:6d:98:97:3d:c1:42:64:a9:1b:
37:14:87:13:60:bd:95:85:da:dc:d1:36:f6:6f:a9:c0:0b:23:
3d:a4:bb:78:e7:de:af:58:0d:7d:4f:ab:a7:ab:9f:65:c9:0d:
93:fc:1f:22:41:b3:d1:d5:5b:4b:e5:cb:ce:0d:14:a5:8b:68:
16:55:e7:0c:ca:7f:e3:62:46:71:bd:40:bb:a4:83:15:7e:e7:
69:c8:12:18:f1:e7:5b:cf:4e:d3:42:b3:c0:5c:62:54:c0:f7:
9a:31:43:85:b7:90:6d:af:d5:53:19:e7:e3:43:b9:d9:1c:0c:
d4:9a:3a:f4:ae:0b:fb:38:7c:60:bc:77:18:0b:73:c3:05:fb:
c3:31:2d:7e:9a:2b:3f:20:97:bd:3d:f5:9b:35:7c:73:17:fe:
be:b8:b2:1e:5d:23:c6:0c:d0:d5:35:3d:65:4b:aa:25:5c:0d:
90:15:43:a6:a0:61:36:24:4f:06:f7:2f:54:d2:bb:a3:69:29:
c4:bc:62:bd:06:01:71:79:12:a0:3c:f3:36:02:70:01:af:22:
d9:dc:1f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 22:37:15 2025 by rpki-client