Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8a6ca157-47f4-3ace-84b1-52df09915225.roa
File: 8a6ca157-47f4-3ace-84b1-52df09915225.roa (raw, json)
Hash identifier: D+Q1cd9g9w48kad55EOTBUnul08oQanS0++zHn8xs2Q=
Subject key identifier: FF:B7:94:8C:97:50:F7:50:4D:B8:ED:1C:E6:C2:1E:0A:F8:0A:44:A8
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285849213434FC463E4F8D44C3E7A0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8a6ca157-47f4-3ace-84b1-52df09915225.roa
Signing time: Sun 09 Mar 2025 10:20:41 +0000
ROA not before: Sun 09 Mar 2025 10:20:41 +0000
ROA not after: Sat 07 Jun 2025 10:20:41 +0000
asID: 577
IP address blocks: 142.185.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:34:fc:46:3e:4f:8d:44:c3:e7:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:20:41 2025 GMT
Not After : Jun 7 10:20:41 2025 GMT
Subject: CN=4af924dd-2af5-4e8f-945b-a359832c3658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:bf:0f:48:42:82:99:74:64:5c:80:42:d7:83:
41:af:16:3a:a2:ef:12:25:a9:2c:37:02:29:3f:03:
8c:b1:a6:54:9c:c0:95:1a:52:81:82:dd:25:e8:87:
1f:e8:4f:b2:2d:bb:e7:a3:8a:0d:c0:5b:24:50:f6:
d0:cb:3b:84:18:09:f1:25:21:4f:95:c7:2d:c2:1a:
1d:d6:f8:a4:47:28:4c:e8:82:c1:72:36:06:ff:31:
8b:01:f7:79:94:f3:ee:4a:57:53:55:ac:d1:6c:4a:
be:fb:0f:c1:75:b2:e8:c7:74:ca:58:ee:4c:63:00:
d6:a3:fc:9c:1e:a6:15:2e:bf:a2:33:6e:3f:48:fd:
2e:93:14:1e:69:ba:59:82:e9:f8:e6:34:3d:01:b9:
b0:b6:19:52:46:55:ae:9e:88:5b:39:88:49:16:19:
db:a3:c0:2d:62:1a:19:3e:de:eb:13:c1:1d:a0:88:
0a:54:de:a1:ec:dd:c6:8a:44:94:8e:12:9d:06:b5:
97:f2:b0:e6:fd:19:5d:7b:65:53:af:cd:3a:20:ee:
68:2c:4d:86:85:22:cb:db:19:c0:59:37:4b:b0:b8:
68:1c:d2:f6:b9:18:8a:83:32:c6:ff:41:72:d2:df:
31:c6:a1:11:8a:17:9d:ab:7b:46:1a:8a:c3:4c:10:
71:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B7:94:8C:97:50:F7:50:4D:B8:ED:1C:E6:C2:1E:0A:F8:0A:44:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8a6ca157-47f4-3ace-84b1-52df09915225.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
142.185.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:b0:22:7b:06:21:7e:ef:af:52:39:22:7d:2c:32:9a:af:77:
ac:ed:f3:d7:e1:7e:5a:27:f4:9e:b9:e4:c8:25:e7:59:e9:e7:
f6:e3:2f:c9:a2:e8:4f:18:c6:e6:32:0c:78:67:76:92:bc:12:
9b:84:9b:d3:8d:24:b6:e3:05:21:0a:b5:dd:5b:b3:57:d2:d1:
95:02:72:48:7f:cd:83:9f:27:7d:bc:94:bb:5d:73:b6:75:ad:
ed:c0:49:0d:fb:e5:16:a9:b6:45:ef:d1:3c:3a:d6:2b:e0:0c:
d2:d0:58:7a:dc:a3:37:a3:ea:85:2b:29:93:3b:e9:2d:4d:95:
02:f7:19:6d:a5:31:84:31:cf:c1:ea:f7:e3:1f:4d:7e:0b:1e:
c1:db:e7:c8:23:2e:ab:78:6c:43:30:c3:f0:c7:64:0e:38:93:
97:8c:38:eb:27:e9:25:cc:b2:00:41:0a:87:12:ab:32:3a:13:
02:d9:29:e6:89:eb:60:ab:19:2f:88:c2:a7:f8:d1:41:f2:b9:
e8:0e:99:28:0d:c7:48:05:44:d7:00:99:0d:83:3d:01:4f:8a:
7b:2b:cc:16:59:5d:bd:37:b5:17:d2:8c:c0:72:4f:01:a5:96:
6a:e8:92:af:56:e2:04:aa:dd:62:a5:9a:d0:90:47:ad:fe:a2:
2b:d2:2d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 09:33:18 2025 by rpki-client