Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cce3df74-b494-3f24-bb77-a5eeb5d3e670.roa
File: cce3df74-b494-3f24-bb77-a5eeb5d3e670.roa (raw, json)
Hash identifier: XL0o0YV7tmWuO6ZRHHEjjUYthSc5f3vrYr/XhBS2chA=
Subject key identifier: 08:3C:79:48:6B:84:7C:33:BB:BB:A0:6C:DF:E1:C3:9D:17:7F:07:CA
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F4328584915116505684DF6113FF26900
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cce3df74-b494-3f24-bb77-a5eeb5d3e670.roa
Signing time: Wed 05 Mar 2025 02:00:40 +0000
ROA not before: Wed 05 Mar 2025 02:00:40 +0000
ROA not after: Tue 03 Jun 2025 01:00:40 +0000
asID: 13335
IP address blocks: 204.195.218.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:15:11:65:05:68:4d:f6:11:3f:f2:69:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Mar 5 02:00:40 2025 GMT
Not After : Jun 3 01:00:40 2025 GMT
Subject: CN=4645e814-80f4-4eb7-a2ea-dee54c057f59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7f:c8:c7:7d:1c:18:fc:e6:18:9f:53:4e:6a:
fb:5f:f6:e3:69:18:d2:3c:51:2d:fa:c8:cb:57:9a:
8a:fe:df:ea:b6:ba:50:7e:20:7b:4a:33:ac:c9:26:
bc:a0:49:25:10:a0:51:5c:ec:e0:74:5a:fb:3b:bb:
7f:9e:94:dd:37:4c:6a:6b:51:3d:4a:79:2e:50:fd:
12:6f:43:bd:d1:01:c9:51:1d:cf:9d:af:a6:8d:20:
51:a0:f9:cb:69:07:7e:c6:38:e0:ef:3a:4a:3b:32:
23:15:37:6d:74:ce:14:76:0a:fc:fd:15:06:7d:3c:
a7:86:73:67:1d:6a:3f:8b:7b:c8:9d:41:09:3d:85:
90:e2:8a:0d:9e:c0:74:da:0a:9b:1f:b5:c9:9c:80:
9c:47:22:41:9d:fd:18:17:8d:6b:d2:f3:37:56:e3:
37:1c:94:16:6d:3d:76:3f:14:bc:d6:21:72:ff:dd:
2c:7d:ef:f3:29:5d:87:30:0d:ff:1b:15:7f:c7:b0:
8e:46:b0:89:34:8b:fe:f7:e7:21:36:f4:1f:32:25:
d1:7f:08:8f:1c:29:16:ca:2c:ea:93:fe:21:62:47:
3b:88:23:34:37:31:88:da:6a:48:64:e6:f8:7e:fe:
cd:46:69:d7:fd:18:38:4f:4b:ef:6b:7d:77:5e:cb:
ac:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:3C:79:48:6B:84:7C:33:BB:BB:A0:6C:DF:E1:C3:9D:17:7F:07:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cce3df74-b494-3f24-bb77-a5eeb5d3e670.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv4:
204.195.218.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:03:1d:b7:fd:a8:a7:52:d0:30:cc:ed:7f:b7:fa:0c:7a:2d:
cb:c6:fa:39:4e:cf:c9:62:64:32:06:7d:53:f1:3a:b0:e0:d6:
29:23:33:be:d2:b6:e9:57:3c:f5:f7:75:28:fb:ed:1b:df:92:
d3:7d:bf:df:f5:be:12:2f:c9:b5:cb:47:a0:4c:cf:1a:81:e5:
7d:36:0a:cd:d4:95:12:4b:ab:3b:ba:8c:85:ea:12:85:9d:c9:
f0:43:8d:f7:0c:29:cd:57:94:ec:69:25:a9:ec:54:36:a1:35:
a6:19:d1:fc:b8:54:76:ba:d8:01:4e:56:2d:9f:28:be:06:fb:
ce:3b:f3:33:e8:f7:87:27:54:4f:30:59:29:69:b4:66:58:fc:
1b:42:34:6c:6b:87:b5:23:34:43:64:d6:15:ef:de:60:0e:e4:
93:b9:59:92:f1:92:11:55:c0:6a:93:09:95:fe:0a:df:54:6d:
2e:0b:a0:c7:aa:59:54:29:0f:69:63:8b:55:9b:e7:c5:49:41:
de:a0:54:7d:ab:22:83:e7:69:82:32:45:84:90:7e:7f:55:52:
61:e4:4d:06:e3:ab:bd:ff:1c:da:0e:eb:0d:5e:96:e4:5c:48:
e6:43:22:e2:f8:d3:63:66:da:23:df:3d:d5:b5:0b:3b:1e:d1:
1a:b5:5e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:59:57 2025 by rpki-client