Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ca850840-255f-381a-ba18-ae3ac781c56e.roa
File: ca850840-255f-381a-ba18-ae3ac781c56e.roa (raw, json)
Hash identifier: M1Zx9BI/8qjPk/bDaiLRU2/z1JNpzy9D/civ3w1y+s8=
Subject key identifier: 44:60:87:A3:1C:CF:B7:8C:15:22:E0:06:12:B4:57:F7:1A:A2:BB:01
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492183C26CD987BF70180EB220
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ca850840-255f-381a-ba18-ae3ac781c56e.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 397197
IP address blocks: 2001:500:126::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 18 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:83:c2:6c:d9:87:bf:70:18:0e:b2:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=e2f275a0-e4a9-448f-b7ab-b87cb9916219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ac:8f:1c:d1:9f:68:9b:8a:c6:4e:d1:75:59:
13:06:51:ff:08:93:af:3c:af:9f:b4:49:4d:a7:b6:
a5:53:05:48:b2:0b:40:31:3a:8a:01:e3:47:c6:ad:
df:07:73:70:d9:bb:a2:c7:ad:f6:c6:24:48:3c:23:
a2:72:92:e5:be:c0:d3:91:8a:68:8c:61:b4:df:f8:
ed:45:c7:04:ac:b7:5e:11:99:bd:f4:3d:6b:0e:ff:
76:23:6f:1e:7f:fb:5a:1f:66:ef:56:f0:38:e2:8f:
20:2e:c8:56:bd:29:3b:74:b6:66:cb:44:a0:e0:f7:
31:32:2f:14:79:0b:b6:3d:ee:ec:03:66:2f:0b:9e:
03:ba:65:e4:f6:97:7e:97:6a:7b:cb:28:0f:14:e5:
21:6f:b3:d0:9a:7f:01:ff:a4:9d:a7:d1:9f:fd:fd:
95:a4:48:82:d0:ff:da:79:87:4a:8f:9d:e4:e0:dd:
2d:a1:35:66:76:75:4a:13:f0:e9:dd:d3:71:3a:37:
12:72:d4:f4:d9:2e:11:f0:41:dd:39:83:b6:19:b9:
e5:5f:cb:00:de:3f:00:d3:a5:d8:ad:00:7f:0a:f4:
b5:c5:39:96:10:ec:a9:29:c0:76:64:c7:6a:71:13:
90:07:68:9e:25:47:36:b2:a5:9c:a3:4e:63:ed:c2:
6a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:60:87:A3:1C:CF:B7:8C:15:22:E0:06:12:B4:57:F7:1A:A2:BB:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ca850840-255f-381a-ba18-ae3ac781c56e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:126:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:59:88:b0:38:56:a3:c8:6a:d5:c0:35:97:ea:0e:a1:8c:2f:
cd:7c:b2:33:d1:86:3c:e0:a0:73:86:1d:24:34:b1:2a:54:f0:
07:2c:92:89:a4:c9:db:e3:67:09:93:44:e9:09:40:87:2a:37:
16:ba:b9:c7:81:27:33:9a:57:e3:65:a5:33:30:dd:85:9c:33:
35:dc:44:49:a8:56:30:51:fe:15:39:74:07:fa:c9:3d:8e:a2:
ef:5f:41:a6:21:e9:cd:7b:c8:e3:66:a0:30:61:1d:d0:48:fe:
a4:73:b4:2f:53:12:77:be:fe:01:a0:d5:8e:e4:28:1c:d0:2f:
e1:fd:0d:ca:1b:f9:59:d4:ad:72:97:c4:04:dd:a3:0a:98:06:
1c:9e:a9:b2:46:1d:f5:8c:39:72:86:3b:1e:27:e5:48:d2:5d:
bf:c3:06:ea:97:20:72:8e:ac:fc:df:e7:a3:c5:3d:14:50:7f:
3d:c3:a0:70:4b:ba:79:ea:82:5d:e5:73:9d:d6:e7:ea:73:cf:
88:2a:62:1a:0d:a7:41:05:fc:63:69:99:8a:0b:24:57:81:32:
9d:ea:d5:a8:92:2e:0c:d8:9a:70:90:aa:46:07:31:73:21:b3:
d9:ab:5a:e0:1f:71:e2:9c:7b:89:9c:ed:c3:35:40:d2:1c:f0:
63:6f:d0:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:10:19 2025 by rpki-client