Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/16be574b-3e6d-3a25-9f42-e67c7953e0bc.roa
File: 16be574b-3e6d-3a25-9f42-e67c7953e0bc.roa (raw, json)
Hash identifier: tv0oyS/GLFMkPn4Hnuqzuou8AWyIQ/rcuvt4MTHg8g0=
Subject key identifier: 84:56:70:0C:C2:A8:A0:61:3F:51:E8:27:64:B8:18:01:4D:A2:48:8F
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848B4C0E1034132BEBA51F04F10
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/16be574b-3e6d-3a25-9f42-e67c7953e0bc.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 15169
IP address blocks: 104.134.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 08 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:e1:03:41:32:be:ba:51:f0:4f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=5ab7b3df-4bb6-4cc9-8a4b-edec6982f901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:af:f2:f4:35:d2:b0:16:19:3a:5c:e8:cc:89:
2e:71:fc:aa:7c:79:1c:3d:95:2a:5d:4b:81:e6:ef:
be:42:14:d9:07:32:9a:3a:91:70:13:bc:14:c9:4a:
b8:7e:75:ec:f4:32:c6:1a:ad:d7:d2:82:96:0d:ee:
2e:90:fb:3e:f2:e8:c9:93:e3:12:dd:f3:69:a2:12:
c5:56:17:79:ae:48:23:bc:7d:84:6c:9f:d7:5d:45:
e7:7f:ef:aa:b3:d2:68:dd:e0:2b:34:00:b4:b5:38:
ae:df:53:4f:64:6b:1d:e5:91:05:6a:73:b7:14:92:
fc:8b:81:8d:3f:40:3a:e3:7d:14:f7:df:c8:11:5f:
e6:41:ea:81:9f:28:31:13:fd:0d:d4:ed:46:9d:37:
aa:fe:98:d5:01:3f:b4:c6:1c:6c:47:19:73:5b:96:
35:0d:41:2a:53:f0:c9:ce:ea:a7:d1:55:45:91:78:
e4:06:a8:d5:e6:88:c8:6f:2e:01:9b:95:58:c2:d2:
4c:45:47:a3:6c:c3:60:cf:24:7c:df:f1:e8:79:95:
55:2d:ac:cd:61:5d:94:a7:13:d7:62:51:0a:f6:1e:
fd:ce:af:bb:b5:aa:df:e3:e3:d2:bf:31:1c:47:68:
34:fa:cc:f3:9e:bd:26:42:8c:0c:5a:31:78:ad:cd:
2c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:56:70:0C:C2:A8:A0:61:3F:51:E8:27:64:B8:18:01:4D:A2:48:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/16be574b-3e6d-3a25-9f42-e67c7953e0bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.147.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c0:c2:f6:68:4b:03:73:89:19:4f:39:1c:2f:94:7f:5a:f9:28:
ce:12:76:20:5f:8e:22:2d:d3:50:b2:a0:9f:df:f4:00:ad:c1:
8a:84:76:54:b8:b4:f2:62:a8:7c:06:41:ea:74:c5:95:a1:17:
47:96:4b:52:ae:9f:05:5e:3f:e7:1f:4d:f4:b3:10:2e:5d:80:
49:85:de:a3:ca:0e:97:0f:5e:62:d8:75:6c:74:9f:1f:16:b1:
c2:19:40:7e:84:5c:a0:3a:93:d2:48:e6:01:6b:fa:17:26:96:
b4:7e:6a:f3:9a:87:c2:1f:d1:7c:7b:eb:e3:df:66:3d:8a:61:
77:31:39:2a:52:42:fd:84:70:11:aa:a7:19:8e:f6:68:20:44:
72:50:d3:35:92:4d:fe:44:25:66:d4:c1:75:59:01:a1:dc:3a:
14:a7:d6:92:29:da:88:da:a0:d2:57:a9:0d:7c:e0:62:9f:ed:
47:6c:26:e6:5e:03:4f:51:b2:59:c4:f7:62:f1:46:88:bf:db:
35:c6:a1:86:ad:d5:fc:2e:56:80:2d:39:39:1f:b8:59:77:ad:
b5:39:06:b9:35:2a:7f:27:17:50:9c:c8:12:85:fb:9d:8a:9b:
6b:b2:30:e3:3d:6d:65:31:d2:83:39:c6:e6:e0:e9:c4:97:5e:
56:31:59:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:35:45 2025 by rpki-client