Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d0871315-1c52-46f6-bb0e-2113ca1f139d/41914f71-9ef4-3fe3-a531-72a93a74531a.roa
File: 41914f71-9ef4-3fe3-a531-72a93a74531a.roa (raw, json)
Hash identifier: GFSd600OjLfZkU1J+SHHdjeY0qM9oNE129xl3G8JFlQ=
Subject key identifier: 9E:52:BB:1C:80:AF:06:2B:B6:29:AB:EB:D7:B0:05:D6:1E:BB:83:99
Certificate issuer: /CN=d0871315-1c52-46f6-bb0e-2113ca1f139d
Certificate serial: 010D0C9F43285848E59BC514A8C59DF79EAD8100
Authority key identifier: E3:CB:E3:7E:4E:90:9D:3C:13:A3:5E:40:5F:C3:9B:5F:8F:2F:0D:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d0871315-1c52-46f6-bb0e-2113ca1f139d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d0871315-1c52-46f6-bb0e-2113ca1f139d/41914f71-9ef4-3fe3-a531-72a93a74531a.roa
Signing time: Sun 16 Feb 2025 02:00:40 +0000
ROA not before: Sun 16 Feb 2025 02:00:40 +0000
ROA not after: Sat 17 May 2025 01:00:40 +0000
asID: 33060
IP address blocks: 192.133.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d0871315-1c52-46f6-bb0e-2113ca1f139d/d0871315-1c52-46f6-bb0e-2113ca1f139d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d0871315-1c52-46f6-bb0e-2113ca1f139d/d0871315-1c52-46f6-bb0e-2113ca1f139d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d0871315-1c52-46f6-bb0e-2113ca1f139d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 18 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e5:9b:c5:14:a8:c5:9d:f7:9e:ad:81:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0871315-1c52-46f6-bb0e-2113ca1f139d
Validity
Not Before: Feb 16 02:00:40 2025 GMT
Not After : May 17 01:00:40 2025 GMT
Subject: CN=0a36b9ae-87e9-4c97-9244-75d703061e72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a2:1a:cc:54:22:6f:ed:52:fe:f8:a4:ef:4e:
b0:f5:a3:ad:d5:7f:4d:90:de:e2:d2:d5:0e:4b:1a:
4f:f2:ac:f0:92:b8:80:de:c7:4e:87:3e:3f:1a:62:
f6:60:f6:e3:5e:9c:e3:16:3d:6c:8a:0f:c4:8f:6d:
30:d3:47:6e:eb:c1:e3:9a:42:42:59:82:1b:b6:a1:
68:a8:41:7a:21:ee:df:ea:9b:35:c4:9c:ea:4b:52:
c3:c1:a4:1b:2c:44:59:34:d3:c1:3d:f4:27:f7:b1:
7a:03:9c:89:2b:a2:2a:e7:64:c9:c3:e6:fe:84:32:
a0:5d:ad:a7:28:d7:5d:7b:dd:2a:90:04:23:47:fe:
54:c6:3c:d2:8e:13:4c:f2:27:51:92:c4:8d:3f:b5:
3f:b7:27:58:7e:f2:8e:3e:13:d6:67:0c:2d:3e:7b:
7d:5a:06:0a:d0:69:9e:56:78:ac:ad:cb:09:75:d1:
eb:93:01:b4:47:f6:d7:e6:e9:04:8a:19:0b:f2:1e:
88:bd:05:44:a8:63:70:0f:2f:5f:31:87:3d:49:7e:
4b:42:5f:ac:0d:4e:16:09:26:54:b9:3e:8a:42:cb:
85:de:18:2a:d1:da:1b:b1:e9:d9:a9:d3:3d:43:f0:
79:55:66:df:4e:81:cb:5d:34:e9:05:0a:30:b9:22:
68:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:52:BB:1C:80:AF:06:2B:B6:29:AB:EB:D7:B0:05:D6:1E:BB:83:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d0871315-1c52-46f6-bb0e-2113ca1f139d/41914f71-9ef4-3fe3-a531-72a93a74531a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d0871315-1c52-46f6-bb0e-2113ca1f139d/d0871315-1c52-46f6-bb0e-2113ca1f139d.crl
X509v3 Authority Key Identifier:
keyid:E3:CB:E3:7E:4E:90:9D:3C:13:A3:5E:40:5F:C3:9B:5F:8F:2F:0D:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d0871315-1c52-46f6-bb0e-2113ca1f139d.cer
sbgp-ipAddrBlock: critical
IPv4:
192.133.107.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:64:a5:6a:f5:34:1c:f9:c6:e4:9f:a1:35:0b:0f:61:e8:ee:
c9:6d:ff:8b:2f:7c:c0:13:90:da:03:5e:6a:71:a3:fe:09:f3:
7b:ee:22:af:b2:33:bb:e6:51:c4:3e:7b:3c:94:5c:80:d7:a6:
1c:94:14:ad:c8:ed:f7:16:33:71:18:37:77:45:9f:1a:47:ae:
0f:be:26:f9:88:10:88:a4:9f:b3:d7:a8:05:8a:ea:d7:3e:7f:
71:3f:04:5d:bb:31:62:47:f2:54:f2:eb:f3:6f:ec:48:7a:c3:
46:a7:ae:06:50:e7:54:13:4d:b2:0b:8a:8b:e5:3a:76:13:85:
a6:e8:43:5a:65:ed:0b:7e:27:02:51:75:bb:0b:65:90:2e:8d:
6a:04:47:bd:e6:2e:e4:8b:38:71:6c:7b:86:46:42:19:a3:b2:
d9:c9:2c:50:85:de:b6:db:14:c9:dd:67:fc:68:06:ca:df:7e:
37:e3:82:f9:ae:82:06:05:6d:24:f2:3a:1d:41:b7:85:68:41:
39:f1:ee:e9:7b:5d:bf:9a:ab:8c:5c:df:65:5b:75:de:8c:5d:
9b:72:1a:48:71:2c:a0:45:ae:bf:b8:02:30:ff:36:f8:55:36:
41:c2:fa:dd:75:55:84:07:ef:39:0e:c4:f2:ce:08:89:5c:7a:
d3:ff:de:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 23:47:54 2025 by rpki-client