Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d8a1de28-459a-32ed-bceb-f9281719f01d.roa
File: d8a1de28-459a-32ed-bceb-f9281719f01d.roa (raw, json)
Hash identifier: bo7woQ/VAuYbyrBCOM3/z9EN/Qj6NLek2+oHH5FU6+I=
Subject key identifier: A4:71:53:68:8C:65:11:62:46:43:A0:87:2C:B0:7D:6E:E4:65:5F:20
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328584917DC2F7A5690AABA70765080
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d8a1de28-459a-32ed-bceb-f9281719f01d.roa
Signing time: Thu 06 Mar 2025 02:00:39 +0000
ROA not before: Thu 06 Mar 2025 02:00:39 +0000
ROA not after: Wed 04 Jun 2025 01:00:39 +0000
asID: 3949
IP address blocks: 165.254.178.64/28 maxlen: 28
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:17:dc:2f:7a:56:90:aa:ba:70:76:50:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Mar 6 02:00:39 2025 GMT
Not After : Jun 4 01:00:39 2025 GMT
Subject: CN=6050b8fd-c04a-4e0b-828d-5c85a3db2aad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:02:89:a6:08:2a:82:37:1e:ed:72:89:5e:5b:
82:1c:3a:90:72:4c:09:6c:31:37:f4:90:d0:3b:b3:
d5:33:32:6c:1d:39:27:59:f1:f9:dd:b9:c5:8e:91:
3b:b1:58:d4:a5:e8:3c:d0:78:f5:5f:ee:78:f3:d7:
c7:61:fd:bc:59:b4:09:8a:2a:2b:fb:b7:8d:3c:9d:
38:b3:89:67:bc:07:d7:93:40:40:7c:e7:4b:b9:40:
b1:49:5b:30:30:14:0d:ee:05:4b:21:c9:01:32:1b:
1c:55:3e:15:02:05:b6:85:f0:14:8e:a4:e0:8f:31:
bf:97:43:6b:23:77:77:bb:05:58:71:44:91:7b:6c:
c0:66:a6:28:cf:50:0f:47:0e:fc:f3:0e:21:5d:bc:
e8:88:8e:9e:71:4d:47:e3:04:6e:fa:2b:d7:4e:0d:
be:0a:cc:0e:6c:0a:37:c0:f7:4b:63:48:4d:98:d4:
d1:20:0c:4b:18:78:d9:a9:1e:b1:6e:3c:01:c4:a4:
42:0d:58:f3:cf:40:c6:59:05:82:f8:cf:34:96:d8:
a5:2e:86:96:53:c5:4a:d3:19:90:03:0b:32:af:ba:
a9:78:fd:45:a4:08:11:e7:77:5e:ea:4a:a3:31:10:
16:09:21:fa:4e:de:4b:2b:0c:58:bd:63:0a:72:ed:
e0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:71:53:68:8C:65:11:62:46:43:A0:87:2C:B0:7D:6E:E4:65:5F:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d8a1de28-459a-32ed-bceb-f9281719f01d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
165.254.178.64/28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:7f:ec:f1:87:5c:3a:b3:da:c6:fb:3d:d4:88:73:24:f4:17:
f9:bd:56:52:a8:b8:c9:d6:5c:c4:81:c8:9d:06:ba:ce:4f:4f:
86:0c:2d:8e:a7:62:66:b2:47:ba:5f:4a:9d:ec:86:64:f9:5b:
cd:0b:e6:04:b4:6a:29:5d:61:cd:1a:f6:cc:16:29:80:f9:dd:
9f:77:20:e3:3e:c1:9e:57:a6:71:67:8b:1d:53:cc:7a:09:a6:
f4:52:07:eb:0f:04:d8:43:3a:30:a3:df:8c:90:1d:7d:55:04:
4e:c3:d8:78:a6:0c:ce:d6:04:ae:17:58:72:6c:08:fa:7b:bf:
db:88:33:fe:cf:83:dd:f0:e2:1c:99:a8:12:d4:04:86:da:05:
bb:d0:3e:2c:21:8a:8a:8e:8e:7c:62:1e:e6:ac:58:74:77:40:
4a:af:43:8e:26:a9:ce:55:62:95:5f:ee:1e:4b:10:24:b2:60:
7f:b3:64:a2:b9:d6:0c:3d:38:c7:88:1b:b5:f7:24:22:a7:65:
0d:6d:2f:51:54:41:77:4b:14:61:07:74:7d:aa:81:f9:21:00:
9d:4b:d8:7a:a7:cf:4b:00:1c:47:87:ee:10:71:f0:92:1a:a5:
81:42:50:02:ed:bf:e3:f3:1b:01:d9:9e:0b:3f:99:5a:68:60:
09:0e:de:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:13:58 2025 by rpki-client