Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/02634ef7-76ad-316e-a32f-77f1afa3219e.roa
File: 02634ef7-76ad-316e-a32f-77f1afa3219e.roa (raw, json)
Hash identifier: 9h4daupBsFngez2Kj+WKRR0s8tY7ybfGHCCwQiftNWM=
Subject key identifier: 85:3F:8A:39:DD:AC:08:36:D2:54:27:DC:F6:53:87:77:C2:69:F8:1F
Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial: 010D0C9F432858496CE455FBC9F5B68383D50050
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/02634ef7-76ad-316e-a32f-77f1afa3219e.roa
Signing time: Sat 05 Apr 2025 13:01:01 +0000
ROA not before: Sat 05 Apr 2025 13:01:01 +0000
ROA not after: Fri 04 Jul 2025 13:01:01 +0000
asID: 174
IP address blocks: 173.244.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6c:e4:55:fb:c9:f5:b6:83:83:d5:00:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Validity
Not Before: Apr 5 13:01:01 2025 GMT
Not After : Jul 4 13:01:01 2025 GMT
Subject: CN=4096bc54-5346-4556-b617-0398f1b0e11e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:06:75:61:a2:54:82:ca:ea:31:36:f0:e3:e3:
de:cf:05:a2:0b:00:5b:07:04:bb:c2:86:b9:9c:35:
b1:32:73:26:51:b2:04:93:1c:0a:d6:50:97:79:d6:
19:20:84:08:b2:80:a9:d5:bc:9b:88:92:38:aa:ac:
f6:d0:a8:2f:ba:b6:0e:94:e4:f9:bb:a8:b0:45:f7:
ab:0a:6e:49:7e:5a:3d:86:ee:98:d8:5d:22:91:3d:
dd:e5:68:bc:75:9c:12:64:70:39:81:fd:67:51:b3:
a7:7b:3b:2d:4c:e9:64:86:30:20:39:4e:05:b8:ac:
d8:f4:d0:fa:ea:b2:38:24:10:91:5a:0a:e3:dd:03:
15:7a:9f:ee:be:d2:79:59:fd:5c:6f:1d:fb:2c:85:
ef:83:87:88:e4:cd:34:e3:88:c6:26:48:aa:17:6c:
99:a2:46:8d:9a:3e:11:ef:cb:b1:0b:45:b9:ae:10:
52:23:40:58:4a:0f:df:a2:51:d9:30:c4:91:3e:b8:
5e:bc:5d:d7:ae:ea:a0:a3:36:a3:0e:f5:63:12:1e:
19:fc:b8:73:47:75:ad:6e:79:ee:8d:03:66:71:22:
a8:64:22:e0:db:2e:ab:7d:e2:9a:dc:e6:4a:0c:2b:
e8:98:4b:2a:e0:bc:bf:f0:08:00:29:51:fd:09:7c:
84:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:3F:8A:39:DD:AC:08:36:D2:54:27:DC:F6:53:87:77:C2:69:F8:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/02634ef7-76ad-316e-a32f-77f1afa3219e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
X509v3 Authority Key Identifier:
keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
sbgp-ipAddrBlock: critical
IPv4:
173.244.48.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cc:4f:99:16:64:5b:bf:46:11:10:29:5c:a8:dc:95:ff:77:79:
13:ba:e5:22:29:05:76:ae:5d:f2:2c:e7:e4:88:01:6e:07:18:
4a:f5:56:e8:54:5a:e9:f9:6c:e3:b3:67:5f:82:ba:80:f4:16:
ad:de:c5:78:a7:20:14:84:9a:85:e4:e6:f9:3f:2d:96:61:4b:
dd:ba:7b:19:f2:41:b0:a0:f3:42:a3:13:3f:9f:5e:69:f8:82:
20:a7:eb:10:ee:56:eb:fd:7d:0c:92:de:01:85:4b:cf:82:b5:
32:4c:6f:0f:00:11:ff:f4:55:2e:2b:b8:73:00:26:bc:a3:b2:
97:cf:1d:8f:8b:78:99:31:da:48:6d:33:ef:eb:d6:b4:e7:0f:
30:66:7b:7c:c7:5d:82:b4:5f:96:2e:d5:2b:b0:0a:b9:d2:e8:
b2:b4:7b:6d:a2:2b:fb:67:a2:84:35:10:36:25:74:b4:da:c7:
da:c5:8a:4c:6c:97:fc:b2:08:e3:96:b1:7c:ec:5f:eb:af:b8:
a4:b4:31:24:c1:c0:d5:2c:e7:e2:77:db:1a:fe:de:18:98:69:
f5:af:b0:b0:3a:14:62:a8:c4:a8:ba:43:25:f4:4f:79:84:d1:
ba:34:b3:c8:b6:9d:06:cb:22:ca:4b:6c:17:ec:81:fd:a9:17:
45:c8:15:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 13:05:48 2025 by rpki-client