Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/351b7510-9ed7-383b-9bef-7685582ff39f.roa
File: 351b7510-9ed7-383b-9bef-7685582ff39f.roa (raw, json)
Hash identifier: qqnh2bjLjRaDhkZdqDDt+TQR2m7R5sOSpfQvHFA+f1w=
Subject key identifier: 3E:B1:3C:DF:04:74:37:86:81:65:DB:17:71:5B:3F:61:E4:49:8F:F9
Certificate issuer: /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Certificate serial: 010D0C9F432858494469380FDC3AD2DAE74E1580
Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/351b7510-9ed7-383b-9bef-7685582ff39f.roa
Signing time: Sat 22 Mar 2025 01:00:40 +0000
ROA not before: Sat 22 Mar 2025 01:00:40 +0000
ROA not after: Fri 20 Jun 2025 01:00:40 +0000
asID: 14340
IP address blocks: 204.14.232.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:44:69:38:0f:dc:3a:d2:da:e7:4e:15:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Validity
Not Before: Mar 22 01:00:40 2025 GMT
Not After : Jun 20 01:00:40 2025 GMT
Subject: CN=22e3f665-d7ff-47a5-a5b8-3081074f5436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7b:af:31:49:8f:9f:c2:ed:2d:7c:f4:bb:22:
08:5d:41:34:24:95:67:69:e1:a6:5b:92:6a:58:63:
84:76:b7:1a:b0:f3:bb:d1:1c:8f:39:e8:98:36:3c:
6a:f2:3f:ed:1e:02:30:13:34:bb:3a:fe:9f:30:74:
31:ce:e9:1d:64:26:4d:db:07:69:ca:33:20:dd:8e:
20:50:7a:0a:5a:d8:f0:b3:5f:7d:15:34:0e:42:ab:
d5:e5:71:e8:99:56:dc:03:e2:1e:9b:2c:59:e8:c8:
4a:53:53:84:8d:62:32:bb:98:6b:82:35:e1:42:e3:
23:42:7b:8f:ee:b8:1c:fb:83:16:10:28:84:82:3b:
53:34:29:56:44:1f:f9:62:48:60:ab:aa:81:3c:54:
57:72:e5:f4:19:4b:25:39:81:ab:08:11:11:19:fe:
83:b2:fd:81:d3:83:07:29:a1:3a:81:da:3b:9e:95:
31:4c:c7:c6:66:95:70:39:e3:3f:64:dc:0d:73:00:
4a:37:2a:aa:3d:9a:c9:3e:7c:f5:28:bb:60:aa:ce:
94:ae:3f:0b:1f:87:c5:57:1c:d8:4b:1b:02:1f:5b:
12:f2:59:50:76:1d:85:7e:6d:01:b6:03:08:8f:26:
d8:2d:53:4c:d5:06:cc:5a:91:e1:84:09:e0:74:43:
85:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B1:3C:DF:04:74:37:86:81:65:DB:17:71:5B:3F:61:E4:49:8F:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/351b7510-9ed7-383b-9bef-7685582ff39f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl
X509v3 Authority Key Identifier:
keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
sbgp-ipAddrBlock: critical
IPv4:
204.14.232.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d5:85:e6:bb:c0:54:cc:14:d6:a7:5d:5e:47:f6:d4:e4:17:34:
c0:52:06:48:11:46:3b:f7:ca:cf:69:1a:78:32:d4:61:12:69:
79:de:0b:99:2e:d5:a6:81:0e:52:e3:29:37:81:32:e7:73:f6:
9c:cc:c9:14:ef:c7:ef:1b:e3:91:29:86:ed:43:17:55:c4:ab:
c0:1a:4d:fd:e0:09:9a:f5:b9:09:74:d4:8a:46:c4:7f:27:e5:
f0:d8:a0:37:b8:ce:2b:d6:4d:90:22:88:74:47:4d:51:4a:14:
cf:68:89:22:97:38:65:26:d8:91:77:d7:0d:fe:ee:32:65:79:
fc:8b:28:ff:03:a7:d0:f2:4d:f6:82:9c:ba:1b:7f:2f:b9:b7:
17:00:2b:ee:4c:d9:63:25:17:75:86:8e:6b:a3:47:07:93:16:
b9:81:d3:bf:ba:53:54:53:2e:a6:91:da:fb:d1:39:85:d3:44:
0a:69:e4:45:5b:56:33:81:fc:cf:4c:19:e9:d2:df:68:85:00:
c3:80:f1:ae:2e:be:3c:98:dd:78:98:bd:40:e5:f8:7b:c4:2b:
65:7b:a6:7e:90:3a:f6:e9:37:5e:10:6d:82:1e:b9:1a:6f:0f:
1c:27:9b:8c:d2:fa:7c:01:bc:5c:58:91:13:79:87:6c:fb:7e:
d5:e9:eb:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:05:37 2025 by rpki-client