Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6a9c3a38-dd63-3960-a8a1-aeeae0beb697.roa
File: 6a9c3a38-dd63-3960-a8a1-aeeae0beb697.roa (raw, json)
Hash identifier: Bq9Gy3Hs/PRpFDgYuk8fe3GkNMWomtiLISjMhJg22Rs=
Subject key identifier: 53:D7:2E:05:4D:0D:67:F3:5C:F8:57:AB:AD:24:50:B2:14:EB:97:61
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C26189133108F010F0E2FF80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6a9c3a38-dd63-3960-a8a1-aeeae0beb697.roa
Signing time: Mon 03 Feb 2025 11:10:14 +0000
ROA not before: Mon 03 Feb 2025 11:10:14 +0000
ROA not after: Sun 04 May 2025 10:10:14 +0000
asID: 30036
IP address blocks: 173.16.8.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c2:61:89:13:31:08:f0:10:f0:e2:ff:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 3 11:10:14 2025 GMT
Not After : May 4 10:10:14 2025 GMT
Subject: CN=900390ac-c1a7-4ab4-af90-f569709b10cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f4:42:04:65:62:22:15:1d:25:79:1a:7a:cc:
0f:42:16:fe:fa:d6:db:aa:24:22:3d:31:91:e3:99:
e9:a3:d1:dc:b7:32:b8:45:7d:24:b6:d5:df:b6:94:
72:26:12:2c:1a:24:64:88:8b:24:77:4d:76:d6:b1:
38:81:33:e4:f3:66:08:63:f0:f6:3b:8c:8f:bf:7c:
7b:32:91:c0:8c:43:83:36:6f:86:61:fe:9d:99:27:
43:c5:fb:3e:8f:b6:db:2a:5d:67:93:1d:98:43:e2:
57:2a:be:71:e2:e5:31:b9:6f:d0:db:07:ea:86:3b:
c4:9e:5b:62:72:45:d3:80:15:b5:2a:1e:08:79:94:
79:03:9d:d1:33:d3:6f:36:0c:e6:e9:d4:15:27:36:
c8:af:c7:8c:d1:9b:7c:31:c8:82:f9:15:e2:3a:d7:
93:0f:45:e3:08:7c:88:4e:a0:9c:1d:48:17:7d:06:
57:ef:68:b1:20:05:08:ba:0e:9c:43:79:6a:8e:25:
15:21:b4:1a:80:45:ab:fc:86:68:a4:67:4d:5c:01:
1c:07:9e:04:1a:eb:cc:75:84:96:60:36:0c:ac:56:
72:61:18:a1:5b:c1:13:ac:bd:c5:c7:d6:7a:dd:c4:
90:b3:67:7b:af:8a:b7:49:b0:d5:78:17:8d:5d:e4:
a5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:D7:2E:05:4D:0D:67:F3:5C:F8:57:AB:AD:24:50:B2:14:EB:97:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6a9c3a38-dd63-3960-a8a1-aeeae0beb697.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.16.8.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:56:43:96:79:1e:8f:8a:6c:df:66:f8:a8:e6:6d:5e:13:78:
4f:89:67:42:89:62:f9:2a:27:11:27:ea:52:98:2d:74:2f:11:
37:0b:a1:ec:37:53:76:a5:bf:0b:8f:40:de:d2:fa:90:03:8a:
5a:c4:ee:6d:df:1b:64:fd:cf:41:8b:01:29:78:ce:18:d6:11:
f6:c4:ae:22:c1:a8:f9:8a:b7:0d:38:7e:4c:09:d8:3c:9c:42:
8e:f7:5f:c5:81:2a:4f:55:7e:b9:3c:1a:63:1e:41:2d:ea:66:
d0:de:be:df:54:90:b3:61:02:9e:a0:fa:b5:dd:11:46:41:08:
4a:73:47:ad:4f:03:ac:57:53:8b:45:ea:fe:18:29:e0:6a:a2:
b4:18:d9:93:71:27:79:29:77:56:30:0e:ec:23:fe:9d:06:27:
0b:67:05:99:70:d5:0d:c8:9b:c4:70:33:bb:3e:d8:11:b4:b8:
75:e8:d3:a8:d8:21:03:55:00:4c:8e:4e:61:72:4e:56:7f:d1:
63:86:c1:f1:dd:ae:48:02:10:9d:e0:be:36:01:c0:35:35:db:
a5:10:c1:03:eb:dd:f8:39:30:8a:c9:5b:45:28:1d:e0:d5:0e:
07:31:c9:fc:25:db:9a:39:52:ec:4f:f7:f3:53:fc:73:15:6d:
5b:b9:cf:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:17:10 2025 by rpki-client