Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dc22c315-14c5-4de2-83f3-01be353fd756/24ca3a72-a4a7-33a8-9f11-8594f77c2ea4.roa
File: 24ca3a72-a4a7-33a8-9f11-8594f77c2ea4.roa (raw, json)
Hash identifier: flhKmzSjlzovBskO6eXO2wo7DKYnxOBdIgracmRKqCg=
Subject key identifier: 37:F4:14:66:02:DA:CC:4B:9A:9A:D0:16:F0:71:CA:6B:69:9A:0A:3B
Certificate issuer: /CN=dc22c315-14c5-4de2-83f3-01be353fd756
Certificate serial: 010D0C9F43285848ADC6065A1EE11943724AEBC0
Authority key identifier: D8:A0:C9:C8:C3:15:9B:A2:31:C8:75:EE:6B:7E:3F:3E:B5:88:3C:DF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dc22c315-14c5-4de2-83f3-01be353fd756.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dc22c315-14c5-4de2-83f3-01be353fd756/24ca3a72-a4a7-33a8-9f11-8594f77c2ea4.roa
Signing time: Mon 27 Jan 2025 02:00:39 +0000
ROA not before: Mon 27 Jan 2025 02:00:39 +0000
ROA not after: Sun 27 Apr 2025 01:00:39 +0000
asID: 2568
IP address blocks: 162.142.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dc22c315-14c5-4de2-83f3-01be353fd756/dc22c315-14c5-4de2-83f3-01be353fd756.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dc22c315-14c5-4de2-83f3-01be353fd756/dc22c315-14c5-4de2-83f3-01be353fd756.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dc22c315-14c5-4de2-83f3-01be353fd756.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 13 Apr 2025 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ad:c6:06:5a:1e:e1:19:43:72:4a:eb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc22c315-14c5-4de2-83f3-01be353fd756
Validity
Not Before: Jan 27 02:00:39 2025 GMT
Not After : Apr 27 01:00:39 2025 GMT
Subject: CN=64f22be9-a59f-4970-b552-6ca3e1ee9843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e9:6a:c1:f4:a9:2a:91:cf:7c:2e:0c:c0:09:
58:69:57:b9:ce:15:6b:33:15:07:09:d1:75:c4:76:
5b:e6:81:1e:ea:30:28:a2:fd:02:a0:82:0d:ef:3d:
3b:5c:a0:3f:97:64:18:49:a3:d6:36:14:a7:54:1e:
bb:31:1d:66:6e:ed:df:d5:39:32:26:79:c1:34:16:
52:8b:8b:38:da:11:ea:4b:de:56:d3:65:05:f0:96:
5c:31:09:e6:39:ef:32:38:eb:0d:bc:a9:ce:81:85:
c9:5b:f4:1f:e8:81:af:fe:90:51:20:c4:73:97:5a:
85:b3:74:4f:cc:43:31:c8:ff:d7:4b:e7:73:f9:e0:
38:b3:00:50:68:60:c6:9f:c0:46:d4:39:64:bf:80:
11:49:04:f1:ca:3c:dc:ff:4f:fa:af:98:fc:60:db:
56:77:13:4a:7f:9c:6d:59:47:25:2c:55:53:d2:41:
e8:88:71:38:48:61:c4:33:7b:b6:a4:21:3f:02:8d:
17:e5:ea:e2:71:c9:43:28:87:3a:2c:50:e8:92:ba:
23:46:64:a7:e3:a6:6a:cc:7d:27:d7:ba:1e:da:3e:
99:17:1a:44:5c:8a:ec:38:0f:89:72:ff:51:f1:bb:
33:15:ce:e5:66:be:d4:5f:ab:bc:28:6f:33:89:26:
3b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F4:14:66:02:DA:CC:4B:9A:9A:D0:16:F0:71:CA:6B:69:9A:0A:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dc22c315-14c5-4de2-83f3-01be353fd756/24ca3a72-a4a7-33a8-9f11-8594f77c2ea4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dc22c315-14c5-4de2-83f3-01be353fd756/dc22c315-14c5-4de2-83f3-01be353fd756.crl
X509v3 Authority Key Identifier:
keyid:D8:A0:C9:C8:C3:15:9B:A2:31:C8:75:EE:6B:7E:3F:3E:B5:88:3C:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dc22c315-14c5-4de2-83f3-01be353fd756.cer
sbgp-ipAddrBlock: critical
IPv4:
162.142.127.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:d7:10:09:02:8b:63:5c:d6:9c:a6:29:91:d3:98:c0:1a:9a:
01:56:8a:41:93:e3:34:8b:0b:c6:15:b5:7b:c7:a8:af:7f:87:
9f:6d:9f:ab:72:fd:c7:33:66:b2:ef:48:df:96:b1:fe:20:88:
9e:89:b8:21:96:4f:4f:08:79:d1:5e:fc:56:ef:51:f5:a0:de:
df:97:52:5a:e7:d0:71:65:74:d3:a7:7b:95:34:a6:b2:8d:ae:
70:08:eb:5c:9b:0b:d0:38:4d:bc:04:73:de:1e:ea:d9:0f:5a:
48:67:92:34:4c:77:5b:58:a6:63:6b:60:85:4c:04:9f:10:f7:
74:42:33:37:7f:01:d4:20:79:88:ff:9a:27:95:74:4a:25:e9:
0d:ab:9b:5c:74:d2:85:f8:3e:d9:fc:90:25:91:e9:56:e2:66:
30:00:a9:16:ac:d9:80:63:59:5e:a3:cc:fa:37:e3:9c:6c:e3:
e7:0b:98:8a:f4:ae:04:8f:0d:91:18:b6:b0:9e:8d:d0:f8:c5:
e6:2d:91:de:93:c7:6f:0a:e7:16:6f:08:04:84:59:d6:9a:6b:
47:90:51:8a:d9:81:6a:f1:48:d9:96:26:74:9e:6a:32:04:a1:
36:bd:2e:ef:de:7a:bf:72:3c:12:27:40:41:d9:4a:63:6c:ff:
80:19:c7:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 12:49:42 2025 by rpki-client