Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f34a2ce0-16a7-3a24-95ed-a6addd6d85df.roa
File: f34a2ce0-16a7-3a24-95ed-a6addd6d85df.roa (raw, json)
Hash identifier: b18ZfPQh0AOAZ0LcnBFfQjPd+FO2LM4ISZ2TT/YwVxY=
Subject key identifier: F4:8E:8A:C5:7E:3F:CB:0B:0C:DE:E3:A8:62:40:D0:2A:6D:F2:30:1E
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858498769C8BF03E88C72F765EC00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f34a2ce0-16a7-3a24-95ed-a6addd6d85df.roa
Signing time: Tue 15 Apr 2025 01:00:47 +0000
ROA not before: Tue 15 Apr 2025 01:00:47 +0000
ROA not after: Mon 14 Jul 2025 01:00:47 +0000
asID: 211369
IP address blocks: 192.68.126.31/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 18 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:87:69:c8:bf:03:e8:8c:72:f7:65:ec:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Apr 15 01:00:47 2025 GMT
Not After : Jul 14 01:00:47 2025 GMT
Subject: CN=4622c88a-8c98-4e7b-be4c-2f024a064a02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b7:bf:97:9e:af:a1:75:c3:b0:4f:4e:1c:32:
ef:15:48:3f:0f:5b:33:fb:2f:3c:bb:f9:b1:15:1b:
d0:68:97:66:ff:c6:03:5b:a0:1b:57:29:39:0f:34:
fc:9d:bd:e9:81:1c:8c:6a:3f:8b:87:d5:82:67:a4:
82:ac:97:9a:c8:82:8a:46:6b:a3:ac:64:c4:a1:79:
96:71:11:a9:3d:76:c3:c3:04:4e:15:f0:03:b5:a9:
3e:82:86:f9:2c:03:12:db:c4:7f:db:22:b1:83:2d:
7b:40:93:c7:d8:d5:a2:0a:32:86:6f:48:03:38:8a:
61:f6:a4:1e:5f:2e:79:63:b8:00:5b:27:ce:48:5b:
74:2a:e4:8f:7a:ac:6a:6e:3c:d8:90:07:76:7d:b9:
f3:08:4a:c1:f0:54:5e:53:32:f3:61:35:07:17:02:
c3:23:02:b9:14:c8:e4:cb:5a:d1:43:eb:86:12:22:
c6:2c:1b:3d:4f:3a:91:7d:d9:fe:04:b5:87:1d:44:
94:b7:f4:d4:e4:d8:37:b9:db:2b:da:fc:71:5c:7e:
26:61:bf:59:3e:3e:90:60:c8:78:68:3d:6c:27:f9:
c5:ce:60:00:17:e3:ef:db:05:7b:6f:bf:b4:fb:2c:
a6:93:c9:ec:ec:37:9a:3c:1d:ad:4e:ac:b1:56:d3:
9c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:8E:8A:C5:7E:3F:CB:0B:0C:DE:E3:A8:62:40:D0:2A:6D:F2:30:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f34a2ce0-16a7-3a24-95ed-a6addd6d85df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.126.31/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:e4:4f:e9:f1:f9:67:81:30:39:5e:15:26:40:45:52:7c:55:
e5:60:72:f6:71:1f:49:da:e1:b6:a2:52:a4:e5:ab:1c:78:90:
12:34:c5:2c:a5:e2:de:f6:5a:ef:46:b9:f9:ca:69:5e:ee:8d:
6b:d7:68:90:88:89:76:97:f8:2a:77:03:2b:1f:7e:e6:c1:70:
ef:19:77:05:4a:82:3f:ae:84:86:51:84:aa:ae:a7:39:fa:44:
43:47:b5:e4:a1:a9:e6:de:86:70:d9:7b:d1:53:9f:04:82:f4:
f9:27:84:8d:c1:3c:2e:eb:b9:0f:09:37:d2:35:12:7b:48:ec:
7c:04:28:54:88:ba:85:35:47:30:31:17:cc:76:94:d6:84:b8:
e1:50:b6:a0:09:e7:2f:0e:35:dc:de:29:95:f1:89:a8:37:53:
ba:30:38:4a:cd:88:3e:53:07:35:fa:9b:31:9c:5e:d1:21:f0:
75:1e:b2:56:18:a9:81:6c:12:c8:28:fc:51:bc:31:7c:d6:17:
8e:d8:32:d1:ae:6e:e6:87:c0:5c:8a:da:65:9b:fa:86:4c:e7:
43:f0:7d:f1:eb:76:c7:61:5c:15:36:6b:60:a7:5f:3a:2f:a2:
96:0b:6d:f1:f4:56:a9:4e:09:2a:9e:b5:d9:3d:d9:7c:76:fa:
20:e9:ba:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 21:15:14 2025 by rpki-client