Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/5148236d-6dcf-3d81-bb39-4975817cb970.roa
File: 5148236d-6dcf-3d81-bb39-4975817cb970.roa (raw, json)
Hash identifier: oV/4Bn/7d0zAmELCllaEKrqaDfaA79LpOu+/w0/33H0=
Subject key identifier: F1:26:45:E0:72:DE:60:83:A7:54:D3:DC:F9:21:ED:CB:4E:7E:21:C1
Certificate issuer: /CN=b89f752a-b36c-4af5-938d-969edb017937
Certificate serial: 010D0C9F43285849393E6FD7CB1DEF0FF630E480
Authority key identifier: BA:89:D4:33:8F:86:4A:CE:88:47:57:49:F2:2B:84:6F:6B:2E:F9:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/5148236d-6dcf-3d81-bb39-4975817cb970.roa
Signing time: Tue 18 Mar 2025 01:00:38 +0000
ROA not before: Tue 18 Mar 2025 01:00:38 +0000
ROA not after: Mon 16 Jun 2025 01:00:38 +0000
asID: 9025
IP address blocks: 153.46.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/b89f752a-b36c-4af5-938d-969edb017937.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/b89f752a-b36c-4af5-938d-969edb017937.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 18 Apr 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:39:3e:6f:d7:cb:1d:ef:0f:f6:30:e4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b89f752a-b36c-4af5-938d-969edb017937
Validity
Not Before: Mar 18 01:00:38 2025 GMT
Not After : Jun 16 01:00:38 2025 GMT
Subject: CN=882d6bde-41c1-42be-b8d4-ea8f7be032f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:98:6b:15:95:5d:58:17:2f:0a:c8:6d:c3:a0:
b3:59:1d:87:16:5e:84:4f:4e:f2:0b:16:77:df:b8:
e8:2e:74:af:3d:4d:4c:83:37:8e:08:7f:98:dd:0a:
1e:08:d7:68:c4:5b:f1:d1:61:6a:b8:4b:52:64:20:
b6:c6:fa:60:2a:57:03:8e:94:d2:7c:c7:cb:a0:50:
b6:d5:74:99:5f:28:11:d2:0a:e6:81:31:ed:8e:ed:
36:fa:77:9f:91:d1:c1:3b:e4:b1:9d:5e:d6:8b:c4:
77:2a:dc:ac:e1:26:81:c6:e7:0f:99:58:b9:bf:08:
54:02:35:5f:d4:95:5b:8c:35:a9:5d:77:2f:7b:42:
f3:9d:f6:91:8a:d5:df:f3:d9:f0:0e:dd:c5:9a:9c:
ce:08:75:b7:f2:f2:e1:31:bd:b9:bd:b0:e3:3a:3c:
a5:b7:64:1b:ab:d7:85:93:75:b9:3f:34:b7:52:1b:
b7:b7:94:9b:3c:9e:5d:5a:37:9d:ca:dd:54:b6:99:
7e:ff:9a:bd:b2:c3:fe:80:1f:a1:fc:d8:9b:78:67:
93:8a:19:e9:f7:f3:16:b2:9e:c2:a7:a0:6c:d6:b7:
15:08:31:7c:0b:f4:66:6d:76:1d:e4:90:13:f0:cc:
b3:8e:5a:6c:fc:ec:54:9c:29:c0:5b:4a:e6:64:e0:
5e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:26:45:E0:72:DE:60:83:A7:54:D3:DC:F9:21:ED:CB:4E:7E:21:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/5148236d-6dcf-3d81-bb39-4975817cb970.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/b89f752a-b36c-4af5-938d-969edb017937.crl
X509v3 Authority Key Identifier:
keyid:BA:89:D4:33:8F:86:4A:CE:88:47:57:49:F2:2B:84:6F:6B:2E:F9:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937.cer
sbgp-ipAddrBlock: critical
IPv4:
153.46.28.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:08:76:34:5b:d7:d3:a9:65:52:6e:66:b1:e5:b4:80:dc:dc:
6b:f4:2c:92:d6:ce:9c:64:e2:30:61:93:c5:3c:56:63:cb:89:
b6:e0:ba:59:60:85:14:84:99:9e:5c:4a:4b:60:45:55:d6:80:
e0:f8:87:05:f7:1f:b2:11:32:6f:40:9f:15:c3:f1:ea:0c:da:
a6:f7:13:26:67:62:63:3f:42:80:25:b5:94:0e:20:9f:7b:2f:
f7:aa:e8:6d:68:de:31:68:f8:75:f0:71:ae:51:7b:64:47:c1:
e6:48:fb:5b:00:a6:7a:4d:6b:23:c7:63:fc:49:e4:cd:e6:11:
8b:d1:ad:39:40:98:cd:8b:69:8d:a5:06:d5:a1:9d:6a:f6:c8:
70:6a:80:2e:32:b8:c2:e0:0f:1c:67:e5:9c:bb:44:2c:1d:3e:
21:d5:ad:9b:9f:2f:c0:11:da:17:c6:a2:27:c4:b6:b4:69:55:
47:b9:85:59:69:c4:40:c1:5f:c6:97:d7:62:1f:96:7b:76:07:
7f:71:09:6b:88:16:9b:4e:75:5b:e5:b5:05:24:d8:68:32:49:
3e:3e:af:23:d4:15:d7:29:e2:50:14:d5:e5:a8:a6:66:fd:c0:
f3:41:88:56:46:32:ec:bd:ab:2c:a7:b7:b0:f7:da:98:75:dc:
77:3f:a2:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 06:10:28 2025 by rpki-client