Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/23633882-4f4c-353c-88a8-3732f64f6b69.roa
File: 23633882-4f4c-353c-88a8-3732f64f6b69.roa (raw, json)
Hash identifier: 5+sz1Jw6U65g5qnovY5F2P+niCmX09Mnv8oeAsIQ1CY=
Subject key identifier: C9:4A:6A:C5:7A:0C:D7:AF:B3:38:80:28:64:47:67:77:2A:18:CA:15
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C558D205A4F1C5D887174940
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/23633882-4f4c-353c-88a8-3732f64f6b69.roa
Signing time: Tue 04 Feb 2025 12:40:06 +0000
ROA not before: Tue 04 Feb 2025 12:40:06 +0000
ROA not after: Mon 05 May 2025 11:40:06 +0000
asID: 30036
IP address blocks: 173.31.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:58:d2:05:a4:f1:c5:d8:87:17:49:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 12:40:06 2025 GMT
Not After : May 5 11:40:06 2025 GMT
Subject: CN=b91acf30-3b5e-4960-9957-2e077811c9fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:69:d4:4a:05:ee:76:cb:2a:59:14:4b:5a:5d:
69:42:b0:2e:f8:77:e8:13:0d:46:cd:6f:1f:48:1a:
7e:92:e1:0c:fc:9f:01:c8:5a:da:9a:ea:36:94:44:
10:f9:2e:df:30:52:40:66:cf:ed:0b:39:bb:26:ea:
e9:63:08:2f:75:b7:2d:2c:06:b4:ec:83:31:2c:0a:
d0:24:58:d4:fb:9e:18:ad:3d:de:c8:3d:61:0a:21:
36:ad:68:77:dd:aa:72:d2:86:d1:12:ab:31:e5:d4:
1a:6b:d9:79:6a:1f:1c:7a:81:0f:dd:02:41:94:7b:
81:70:aa:db:d1:02:08:07:8a:d8:d0:d6:33:41:4e:
83:4f:19:5c:8c:94:39:87:e4:bd:d1:a5:93:ff:bf:
eb:63:cc:04:e6:68:b6:0c:7c:76:a2:1a:60:d1:11:
67:ba:89:94:bb:02:f8:2f:f9:a0:fe:05:59:2f:44:
5f:c5:f0:b0:20:3d:19:74:08:a2:8f:45:c5:f0:96:
fc:59:e3:1c:e2:49:88:77:7e:fe:40:26:50:ca:2c:
80:5c:a4:4b:fe:df:b4:7c:58:52:d0:54:e2:e1:34:
4f:02:a0:2f:07:ee:a1:17:98:a9:05:38:07:b6:b3:
06:34:f6:8f:cd:e0:7d:0b:df:9d:3b:02:72:5b:f3:
0a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:4A:6A:C5:7A:0C:D7:AF:B3:38:80:28:64:47:67:77:2A:18:CA:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/23633882-4f4c-353c-88a8-3732f64f6b69.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.31.48.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:4e:f3:e2:ea:f9:02:78:7b:b1:ce:d4:d8:76:b0:5f:f3:e4:
15:06:82:4b:3e:59:4b:f9:45:af:25:21:ca:98:72:6a:30:cb:
b2:0a:67:bc:39:9e:17:54:5a:09:d8:22:a9:ed:4c:ad:38:3c:
a3:f4:8d:1b:fe:33:33:5c:a1:cf:3b:2b:44:82:2d:aa:bc:61:
31:5b:ea:48:04:07:ba:b4:2e:4a:c0:bd:3e:dc:3e:3e:a1:00:
5f:5e:e6:dd:f2:1c:2d:93:a0:a3:19:fe:68:c5:fa:ab:0a:85:
bc:df:96:be:4e:24:b1:45:eb:b6:44:cd:5c:f4:fb:98:a0:9a:
70:a5:44:6c:cb:cf:fd:85:5e:4b:12:cc:9f:c9:be:c2:88:ef:
65:21:c5:37:88:7e:a9:45:f1:5b:5e:91:bf:82:6b:63:aa:a3:
6e:41:24:f3:64:6c:78:cc:12:00:ac:03:8f:37:9b:d0:28:e8:
ea:4e:b1:93:a3:0e:39:b9:8c:96:ff:70:1a:2e:ee:14:fd:11:
8f:2f:ff:ae:80:a1:35:f2:ac:6b:d6:1f:09:4a:ab:cd:a5:9b:
83:6c:29:4c:96:4b:7d:9c:c0:bc:3b:1a:2b:87:e4:22:f8:9f:
ff:5f:7e:35:d0:2e:5a:bc:1d:aa:36:c4:f7:84:73:d9:64:5f:
48:25:79:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:13:32 2025 by rpki-client