Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bbe94dbb-f1ca-3cd4-8a06-769175df456b.roa
File: bbe94dbb-f1ca-3cd4-8a06-769175df456b.roa (raw, json)
Hash identifier: IPjyal3vK5UdqN2sZdDggVSG1aSQQ1Q9aqPZTbzOprM=
Subject key identifier: AC:A8:89:C1:34:EC:C6:55:06:28:95:A9:C6:B4:79:CC:E7:C3:90:9D
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C5581D61B78CF0427A9A5E80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bbe94dbb-f1ca-3cd4-8a06-769175df456b.roa
Signing time: Tue 04 Feb 2025 12:38:40 +0000
ROA not before: Tue 04 Feb 2025 12:38:40 +0000
ROA not after: Mon 05 May 2025 11:38:40 +0000
asID: 30036
IP address blocks: 50.81.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:58:1d:61:b7:8c:f0:42:7a:9a:5e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 12:38:40 2025 GMT
Not After : May 5 11:38:40 2025 GMT
Subject: CN=91b6e3e5-83f3-42c9-ad6d-eadf40695d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:64:91:69:31:c7:01:94:63:d7:69:83:4a:a3:
ca:63:10:1e:07:fe:7f:38:68:36:71:7b:23:f0:8f:
0b:cc:1e:44:e0:1d:40:33:3a:cc:d6:49:4a:1d:30:
8d:f9:1e:dd:87:33:b1:55:4e:a0:c4:f9:c1:ea:d1:
86:99:24:78:a2:c1:8e:59:d1:80:ce:f9:f8:21:67:
9d:55:51:7f:93:55:9c:8c:d3:25:64:ef:50:72:ac:
2b:c6:9c:2d:5d:22:c1:c4:13:f1:0b:ae:bc:41:1a:
e1:74:bc:54:c7:40:d8:ac:a9:4c:e6:eb:03:20:43:
dd:51:e4:8c:93:3c:7d:89:02:5b:0e:97:2e:78:1c:
f9:62:02:4d:9d:03:67:2e:45:21:e9:c1:79:88:f7:
67:e5:bd:c8:c0:65:37:87:48:3f:67:36:fa:23:8f:
56:90:bd:07:d6:a6:ef:7e:2a:bc:f4:64:93:9d:79:
95:c5:6b:83:69:dd:94:c2:69:34:a0:9b:2e:c3:08:
84:b1:43:0f:b1:27:1f:44:44:74:8c:1b:45:48:67:
32:48:47:55:33:2c:5b:9b:f1:53:1c:50:ab:04:0b:
8b:83:4b:db:44:74:78:c7:69:98:34:4e:39:de:79:
79:de:d7:9f:ea:df:b2:6c:44:d6:3b:cc:5e:40:84:
b9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A8:89:C1:34:EC:C6:55:06:28:95:A9:C6:B4:79:CC:E7:C3:90:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bbe94dbb-f1ca-3cd4-8a06-769175df456b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
50.81.20.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:4c:74:fd:2f:3f:8a:43:7a:e3:3b:6f:2a:52:c4:e0:a6:e9:
28:3e:e8:96:66:5d:ea:d0:4c:e9:58:bf:1e:66:a7:8a:a9:ce:
55:85:bd:db:0f:82:28:8d:6c:d8:92:a0:73:93:5f:9d:34:4b:
45:12:46:0d:44:a5:d9:b3:ee:87:00:23:53:fb:ec:c4:54:55:
fc:1c:ec:dc:75:40:b1:da:7e:1e:2c:f5:93:18:46:cd:a5:f2:
39:0b:d9:1d:f8:4a:69:f9:52:34:e3:cb:d7:ae:e6:64:47:a9:
0a:9e:16:56:e2:e4:52:5f:97:59:e4:cb:55:e1:12:93:c7:12:
59:9f:69:ba:31:d4:09:49:23:00:b6:aa:24:ce:2d:cb:25:cd:
84:99:51:c4:3d:bc:45:a4:d8:69:a4:5f:18:16:34:7d:9c:a0:
de:18:80:cf:46:a5:9b:de:e6:12:5f:a4:ef:18:e2:0d:0a:82:
6b:11:4f:03:25:47:74:d6:7b:d9:90:02:51:07:01:fe:31:37:
97:43:b1:bc:56:8c:ce:44:60:ca:ba:ff:4b:4d:2e:21:ff:c2:
75:cc:6d:41:6e:53:32:cf:a7:2c:b3:76:ec:52:9d:7b:26:ad:
53:4b:f5:0b:a0:27:27:cb:40:21:b8:16:98:45:90:dc:78:6b:
e6:6c:fc:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:01:43 2025 by rpki-client