Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/14f19494-e6ec-42e7-bce4-8903df1f6f9d/7c37b044-4e3b-304e-ae4d-acca76fbf144.roa
File: 7c37b044-4e3b-304e-ae4d-acca76fbf144.roa (raw, json)
Hash identifier: c0+kI7an6IzZ9PUYtXm58na/ffYo2O2Td5FlKHKzGac=
Subject key identifier: 22:E0:EB:C9:5A:7C:BD:8B:2E:B2:17:83:14:5F:7A:9B:20:66:8D:B8
Certificate issuer: /CN=14f19494-e6ec-42e7-bce4-8903df1f6f9d
Certificate serial: 010D0C9F4328584921840FF443C60B175E169F00
Authority key identifier: D4:8C:24:71:3F:9D:60:6F:41:01:2C:8E:EA:45:83:5D:2D:5D:72:FB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/14f19494-e6ec-42e7-bce4-8903df1f6f9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/14f19494-e6ec-42e7-bce4-8903df1f6f9d/7c37b044-4e3b-304e-ae4d-acca76fbf144.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 16509
IP address blocks: 199.124.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/14f19494-e6ec-42e7-bce4-8903df1f6f9d/14f19494-e6ec-42e7-bce4-8903df1f6f9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/14f19494-e6ec-42e7-bce4-8903df1f6f9d/14f19494-e6ec-42e7-bce4-8903df1f6f9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/14f19494-e6ec-42e7-bce4-8903df1f6f9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:84:0f:f4:43:c6:0b:17:5e:16:9f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14f19494-e6ec-42e7-bce4-8903df1f6f9d
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=ecef1d8d-9ef3-41e0-8965-b5026d1c03cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:65:12:95:5a:1e:78:8b:cd:b1:f3:71:a5:b9:
02:f8:a4:59:25:f9:b6:40:f0:91:c5:31:ae:6f:91:
9c:25:eb:91:f9:b8:53:1b:78:bb:72:72:45:b7:90:
fb:bc:f8:99:c8:8c:24:14:51:b1:c9:8c:a6:bd:2a:
23:5d:8f:c8:9c:6a:80:c1:78:a8:2d:4c:f3:0c:5c:
8d:2c:43:86:b4:31:83:51:83:a1:69:af:9c:42:cc:
f0:dc:0b:43:c8:7b:4c:32:97:71:6c:2e:b0:75:b5:
a3:5b:9a:89:b3:b0:2e:71:02:dc:91:ed:58:57:05:
b6:1d:e2:62:e6:fd:a2:d5:18:dd:ca:52:23:40:c7:
ec:72:df:1b:f2:14:f5:f0:a5:bb:4a:d1:ea:d5:c2:
2f:83:26:b5:25:08:e8:78:db:ed:f4:62:9f:3c:e9:
e8:59:9a:9a:83:bb:8f:21:5e:3b:ba:2c:ac:d5:d7:
9b:e2:c4:b4:f8:6e:d4:ec:c4:72:6f:b5:bc:25:8b:
61:56:47:64:04:48:d8:4e:82:09:1c:23:e6:d1:f2:
d8:0d:f7:b6:e0:2d:77:ca:06:cc:e5:bb:1b:de:20:
23:86:c2:84:09:6a:8f:b3:a1:c4:47:b0:e8:f4:0b:
9d:09:3c:d1:ba:2f:59:77:06:35:37:c1:77:9d:6c:
73:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E0:EB:C9:5A:7C:BD:8B:2E:B2:17:83:14:5F:7A:9B:20:66:8D:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/14f19494-e6ec-42e7-bce4-8903df1f6f9d/7c37b044-4e3b-304e-ae4d-acca76fbf144.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/14f19494-e6ec-42e7-bce4-8903df1f6f9d/14f19494-e6ec-42e7-bce4-8903df1f6f9d.crl
X509v3 Authority Key Identifier:
keyid:D4:8C:24:71:3F:9D:60:6F:41:01:2C:8E:EA:45:83:5D:2D:5D:72:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/14f19494-e6ec-42e7-bce4-8903df1f6f9d.cer
sbgp-ipAddrBlock: critical
IPv4:
199.124.28.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:5c:69:a7:8d:d7:46:4d:7c:d8:5e:82:d0:55:82:b0:42:91:
0d:68:09:8d:9b:d1:14:60:ad:be:7a:bc:43:c3:c5:df:47:5b:
f2:cd:4f:63:51:be:ee:64:7e:5b:46:26:6a:ea:91:75:07:49:
99:78:ce:0d:42:de:72:84:08:b9:00:ce:d8:1c:25:c5:6f:d6:
86:78:35:47:4d:ab:d8:05:c7:96:ca:02:e4:50:a0:0a:76:39:
56:3b:36:a0:89:11:f1:54:53:86:0a:30:ad:ba:ae:6c:83:99:
86:df:6b:24:a9:09:31:5a:70:03:a0:da:e1:c3:20:bb:a2:56:
96:9a:c9:9e:69:94:b5:a4:66:7f:cf:75:3b:59:c1:e2:82:16:
34:8e:4b:8e:ec:b6:d4:14:4f:d3:2d:37:0c:42:6a:08:a0:34:
99:58:4b:39:34:97:ae:19:57:ea:28:21:2a:d6:4c:11:59:bc:
63:fa:83:8a:71:3e:19:f6:d1:83:42:9c:b9:a5:bf:b2:4b:d5:
ae:df:a5:d3:49:d2:1a:55:81:e3:25:13:1f:dc:60:7d:7d:42:
f9:04:b1:33:66:08:10:d7:fd:64:92:73:0c:59:ff:d2:e9:b8:
e2:50:00:d5:bf:d0:fb:ec:47:92:3c:f0:7a:87:32:e9:ac:4e:
b0:59:e3:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:12:25 2025 by rpki-client