Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/b0702562-ed4b-3a7c-af04-0f850e893016.roa
File: b0702562-ed4b-3a7c-af04-0f850e893016.roa (raw, json)
Hash identifier: WCukXsLUjHYZowJOVT1zYocnqFg8gaaV6Lh79WtzRmA=
Subject key identifier: 85:4F:2D:86:D6:1B:82:E0:BD:07:C7:3E:1A:68:19:7D:DA:75:4B:C8
Certificate issuer: /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
Certificate serial: 010D0C9F432858491AA6CF34B8936CE9B5221FC0
Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/b0702562-ed4b-3a7c-af04-0f850e893016.roa
Signing time: Fri 07 Mar 2025 02:00:39 +0000
ROA not before: Fri 07 Mar 2025 02:00:39 +0000
ROA not after: Thu 05 Jun 2025 01:00:39 +0000
asID: 7106
IP address blocks: 66.209.136.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1a:a6:cf:34:b8:93:6c:e9:b5:22:1f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
Validity
Not Before: Mar 7 02:00:39 2025 GMT
Not After : Jun 5 01:00:39 2025 GMT
Subject: CN=41570c31-b9f1-4ad6-925a-ec20dc42198a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b6:44:e2:1c:b9:4c:2e:b1:28:d3:8a:0f:93:
e7:d1:94:89:17:b5:50:20:7f:24:b5:f3:88:5d:2e:
0c:5e:db:31:7f:38:a7:e6:a3:fb:bb:88:cc:d0:5b:
91:9b:84:09:4c:a1:9e:14:88:fb:9d:81:75:93:68:
63:02:71:70:44:ca:e8:1e:f2:c7:1f:b0:57:4f:24:
28:3a:6c:52:8f:65:74:26:c0:8f:8d:8a:be:b5:fe:
f0:17:01:a2:8b:96:3d:19:6d:fd:79:4c:7c:25:9a:
d4:d4:bb:35:e2:93:00:80:72:cf:34:76:dd:e7:5c:
30:ee:aa:02:9b:0c:78:ac:a9:4f:d1:89:67:b8:2c:
92:9d:8a:22:39:ed:46:7a:38:f6:fe:f2:0f:d8:9e:
1f:7c:39:d6:8a:8f:2e:df:23:71:49:44:26:0d:b0:
c9:00:c9:56:c5:12:ba:7f:1e:59:d5:54:ff:06:0b:
ee:6a:1f:23:83:58:89:48:ef:70:25:e6:33:ce:83:
97:68:6d:c2:a7:5d:a1:df:b4:e1:21:39:db:90:6d:
3b:ba:b2:49:80:13:68:82:1e:3e:c1:79:25:67:96:
89:66:b1:70:9c:65:4d:00:c1:4f:5e:1d:d8:0e:0d:
95:e4:77:17:e1:11:d0:a4:b5:47:6e:21:55:0b:b9:
7f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:4F:2D:86:D6:1B:82:E0:BD:07:C7:3E:1A:68:19:7D:DA:75:4B:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/b0702562-ed4b-3a7c-af04-0f850e893016.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl
X509v3 Authority Key Identifier:
keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
sbgp-ipAddrBlock: critical
IPv4:
66.209.136.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:47:fe:5a:dc:a8:1f:d7:92:92:6f:6e:86:49:92:5b:01:43:
8a:95:2e:5c:25:5b:0f:46:b1:61:c9:64:12:da:c0:e8:c9:0a:
89:6a:60:3c:6c:3f:24:7e:34:0d:f5:cf:a7:69:b2:7e:70:6a:
fc:31:5a:09:70:48:31:a3:36:62:2e:6e:23:8b:55:be:a6:14:
45:ec:e9:75:d4:f5:e2:d2:8a:32:ec:81:d9:70:71:fb:a3:aa:
92:5f:b9:8a:95:df:b6:0a:ae:f0:36:92:13:b7:f6:3c:84:10:
0b:d4:72:36:d8:56:89:ad:03:80:1d:a5:53:d8:f7:e7:01:a9:
05:c0:90:07:c5:cb:56:97:ed:8c:63:fc:4f:df:db:d3:70:8b:
54:30:bd:12:2b:61:1a:21:13:0f:4a:6d:22:55:ad:13:7f:9c:
53:7b:ab:4c:d6:d9:e4:1f:5f:fa:a2:fd:09:68:0d:1a:db:65:
4b:b3:38:f8:32:96:0d:6e:67:6b:97:78:ad:28:cf:3a:60:2f:
8e:d2:4d:08:7a:78:49:d7:11:8b:60:d0:cb:8a:54:00:d8:9b:
50:81:f6:14:90:6c:46:be:e0:b2:d6:52:9f:27:24:3d:1f:3c:
b8:de:bb:b9:f0:64:46:6d:a8:4b:00:48:14:fb:17:db:15:eb:
36:9d:78:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 07:08:04 2025 by rpki-client