Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2006709a-3f5e-4b81-aa75-7ca3ed5d03e0/fd78a9c7-e861-34bb-981b-2b2e2efcdf4c.roa
File: fd78a9c7-e861-34bb-981b-2b2e2efcdf4c.roa (raw, json)
Hash identifier: aPnmEe78X3VVbiz+QlfRTtUzTryFuudTIKQR+tS+vvo=
Subject key identifier: 49:64:87:20:0F:7D:EF:B7:9B:64:99:E1:75:77:7D:B1:CB:E0:8C:19
Certificate issuer: /CN=2006709a-3f5e-4b81-aa75-7ca3ed5d03e0
Certificate serial: 010D0C9F432858495ABEE52B7694A217EF39CA90
Authority key identifier: 10:B1:44:E9:AB:83:E2:F9:53:8A:7C:58:6E:61:9F:BC:AE:C1:D2:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2006709a-3f5e-4b81-aa75-7ca3ed5d03e0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2006709a-3f5e-4b81-aa75-7ca3ed5d03e0/fd78a9c7-e861-34bb-981b-2b2e2efcdf4c.roa
Signing time: Sun 30 Mar 2025 01:00:47 +0000
ROA not before: Sun 30 Mar 2025 01:00:47 +0000
ROA not after: Sat 28 Jun 2025 01:00:47 +0000
asID: 397945
IP address blocks: 23.141.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2006709a-3f5e-4b81-aa75-7ca3ed5d03e0/2006709a-3f5e-4b81-aa75-7ca3ed5d03e0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2006709a-3f5e-4b81-aa75-7ca3ed5d03e0/2006709a-3f5e-4b81-aa75-7ca3ed5d03e0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2006709a-3f5e-4b81-aa75-7ca3ed5d03e0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5a:be:e5:2b:76:94:a2:17:ef:39:ca:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2006709a-3f5e-4b81-aa75-7ca3ed5d03e0
Validity
Not Before: Mar 30 01:00:47 2025 GMT
Not After : Jun 28 01:00:47 2025 GMT
Subject: CN=5b44ae8c-e1fc-45a0-9c78-15b569350951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:3d:97:22:5d:da:c1:a0:7d:ac:9d:0b:98:b7:
df:7e:ac:8a:96:d6:69:dd:52:bc:1c:3a:b6:e4:6e:
76:06:a4:f9:50:f1:a4:3d:28:5f:aa:3a:50:3a:c5:
c3:0d:1e:05:24:c9:a6:77:22:35:59:b1:7b:e2:85:
c8:fa:0c:79:13:cf:c2:88:ba:7d:8d:99:3a:8c:b5:
28:e5:db:64:b4:20:78:6a:e1:aa:9e:b5:22:f2:24:
a6:12:86:fb:38:bf:4d:06:d1:f1:b5:77:1c:78:66:
1b:17:54:47:c0:ad:5f:7e:07:e0:15:89:1b:86:4a:
8f:e0:19:95:2b:1e:ad:a3:fd:95:6c:1d:61:ad:10:
d8:d4:3e:6d:d0:6b:60:69:d1:2a:e3:95:e2:2e:8f:
20:ce:15:d3:ca:ab:c6:d5:7d:1f:91:66:a3:97:c4:
8e:82:25:f5:36:3f:06:01:b8:cd:f0:44:aa:43:4b:
a0:d7:62:1b:24:85:42:a2:b1:9c:16:cc:ef:7c:08:
c1:1e:3c:18:b2:5c:06:93:bc:fc:a0:07:fd:67:a3:
ca:01:7f:5f:ea:9f:8a:e8:da:6e:a8:db:53:de:8d:
f3:0c:b2:8e:96:12:ce:63:13:49:fd:bd:0a:05:04:
b4:f2:e6:b3:88:08:76:e5:21:04:b5:86:e1:55:62:
c1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:64:87:20:0F:7D:EF:B7:9B:64:99:E1:75:77:7D:B1:CB:E0:8C:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2006709a-3f5e-4b81-aa75-7ca3ed5d03e0/fd78a9c7-e861-34bb-981b-2b2e2efcdf4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2006709a-3f5e-4b81-aa75-7ca3ed5d03e0/2006709a-3f5e-4b81-aa75-7ca3ed5d03e0.crl
X509v3 Authority Key Identifier:
keyid:10:B1:44:E9:AB:83:E2:F9:53:8A:7C:58:6E:61:9F:BC:AE:C1:D2:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2006709a-3f5e-4b81-aa75-7ca3ed5d03e0.cer
sbgp-ipAddrBlock: critical
IPv4:
23.141.176.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:ea:f1:83:b1:86:fe:8b:02:a0:0d:c9:7a:0c:e0:0c:54:d5:
77:de:41:a3:d7:32:83:27:89:2a:e7:61:73:9c:d1:8f:76:0d:
d8:b9:81:7a:f3:33:a4:2d:3c:89:da:f2:bc:b7:69:c9:1e:10:
a7:03:9a:da:53:2f:71:ed:c3:a7:d1:9e:40:94:a4:c0:04:fa:
26:7b:e9:c5:5f:f6:50:fb:64:20:3d:be:45:35:72:3f:a7:1b:
22:d9:cd:7e:54:09:80:e3:55:98:02:d3:7f:d5:34:7b:a5:66:
0a:2b:62:d5:c6:b4:f2:33:93:20:5e:52:d3:be:b3:8c:07:e6:
42:b7:09:0d:7c:0d:53:b3:e7:fe:11:22:a6:19:bb:8b:4a:14:
e1:95:2e:71:f2:49:48:c4:79:ad:86:cb:eb:83:20:98:6f:6f:
07:34:5e:36:ac:63:c6:44:e2:71:ea:f8:15:2f:57:ce:67:04:
e2:cd:61:b9:6f:5d:eb:a7:43:f0:06:22:9c:85:f1:09:48:7d:
7f:14:8c:00:74:f6:e3:78:15:ff:e6:c3:6e:34:58:7f:f6:5b:
77:4d:f3:1d:07:29:0b:e6:32:ec:a0:99:a5:a7:f1:bd:34:07:
2f:74:e2:e7:a4:65:f5:00:e8:93:83:0e:4b:d8:80:6b:4a:d5:
c7:df:df:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:55:05 2025 by rpki-client