Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/38f04789-bbe7-3d34-8d74-0ee8e1e83360.roa
File: 38f04789-bbe7-3d34-8d74-0ee8e1e83360.roa (raw, json)
Hash identifier: DfNhTYWknSrnNs3g685wi0IZ1yc1L36Yqk7UF6dTq5Q=
Subject key identifier: 5E:9D:C7:FC:4E:D8:9A:80:FE:1D:9D:14:94:FB:17:39:2D:5E:05:95
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584905B6C05DDC8280D680C83900
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/38f04789-bbe7-3d34-8d74-0ee8e1e83360.roa
Signing time: Thu 27 Feb 2025 14:00:51 +0000
ROA not before: Thu 27 Feb 2025 14:00:51 +0000
ROA not after: Wed 28 May 2025 13:00:51 +0000
asID: 13335
IP address blocks: 172.64.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:05:b6:c0:5d:dc:82:80:d6:80:c8:39:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 27 14:00:51 2025 GMT
Not After : May 28 13:00:51 2025 GMT
Subject: CN=087f23dc-3524-41da-9908-b2ca378ec1f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5f:4b:d4:b9:27:b1:18:0c:2c:49:44:39:cf:
05:43:37:cd:69:31:a8:14:c1:ee:62:3b:2a:7b:0a:
08:bf:5c:b0:11:6c:cd:67:8e:39:46:b9:c3:5a:f5:
b6:1a:ba:86:fb:e3:b5:61:fa:dc:fd:93:36:7d:c8:
58:c5:b5:f3:6a:e8:12:2b:64:c1:be:f3:85:36:66:
c7:df:c9:19:5f:e7:42:ca:1c:da:8b:4a:3f:bb:85:
bb:cf:cf:6c:39:1c:d8:91:b2:c1:bf:99:4d:d2:0a:
1a:73:82:3c:d7:93:66:67:ec:09:83:b9:24:bd:e3:
5e:83:8b:7d:d0:3d:e8:b6:97:45:b2:c0:5e:c7:31:
5d:6f:9a:0f:31:74:77:6f:f1:8c:76:c1:0c:9d:09:
da:27:4c:9d:a9:dd:8b:94:c2:8e:65:fe:20:43:ff:
54:3b:96:da:40:68:a1:5e:5f:7b:c8:82:5d:f1:46:
17:52:ad:a8:2e:c4:08:ce:10:72:a7:3c:a9:f5:75:
e8:d1:b1:ba:9d:51:4c:1d:a2:f8:20:14:be:0f:2f:
4e:a9:b0:81:d8:9a:61:18:cc:f3:fa:6c:5b:58:6d:
41:1e:8a:42:13:01:5e:80:e0:51:78:68:e0:3f:dc:
1b:e7:b1:6f:6a:f4:41:ba:e0:75:fd:ad:13:e7:25:
b1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:9D:C7:FC:4E:D8:9A:80:FE:1D:9D:14:94:FB:17:39:2D:5E:05:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/38f04789-bbe7-3d34-8d74-0ee8e1e83360.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.64.159.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:e3:ef:ad:a2:d4:7c:cc:2a:e0:0d:f9:33:4b:62:2d:f8:ab:
03:d4:66:84:7d:d3:fc:c0:0d:9d:eb:1e:8a:a5:11:30:86:09:
46:8e:d2:93:d5:6a:86:47:97:92:ef:34:63:4c:a0:35:81:75:
fc:3a:69:78:d0:94:96:9e:bb:80:1a:cf:1b:04:c4:23:fb:b4:
87:e9:41:61:59:22:f4:eb:44:a4:fc:f7:c7:cc:9b:ea:9b:04:
2b:20:37:d4:2e:6d:96:6e:55:01:ef:41:e7:a8:7f:57:6c:d5:
75:ed:83:a0:d5:f7:2b:a1:a4:83:3a:75:f1:ec:89:60:50:f0:
b7:0e:43:88:03:4c:e2:c5:42:ff:88:22:4e:66:2e:32:be:07:
9b:27:b2:ff:f6:d5:f0:cb:a4:c5:80:52:4c:13:b9:40:d6:e3:
b9:fc:09:52:47:2c:96:7c:fc:cb:8d:18:77:fb:2d:f6:1b:a9:
1d:95:ee:8a:c6:39:0c:67:d4:96:73:a4:fa:42:de:e9:60:0b:
95:25:d2:61:ff:90:ad:d5:a2:da:eb:76:c9:3c:cb:ad:f8:72:
7f:10:62:52:2e:59:45:36:cb:5b:63:c4:59:76:72:9d:bf:eb:
e8:8e:8a:45:79:03:98:97:eb:d4:c2:77:25:1c:d3:a0:bb:2f:
2e:12:a7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 01:55:18 2025 by rpki-client