Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d/24ba4a3b-6997-383d-8894-c07b096200c9.roa
File: 24ba4a3b-6997-383d-8894-c07b096200c9.roa (raw, json)
Hash identifier: 0t9r9ONEG0KZQcZ34J8HOBW9eoH3beQyTQQTFGjDbvM=
Subject key identifier: C0:EA:6B:03:BA:3E:58:B9:E6:B9:4E:FC:CA:E5:CC:14:C1:10:40:1D
Certificate issuer: /CN=7b1fad74-f135-4279-93d5-fe9aa818fc6d
Certificate serial: 010D0C9F4328584929E3CCE1653999BA7E1D7A00
Authority key identifier: CA:05:35:82:08:D5:0D:D1:73:F2:36:C9:A2:36:0D:68:F0:2D:CC:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d/24ba4a3b-6997-383d-8894-c07b096200c9.roa
Signing time: Wed 12 Mar 2025 13:00:53 +0000
ROA not before: Wed 12 Mar 2025 13:00:53 +0000
ROA not after: Tue 10 Jun 2025 13:00:53 +0000
asID: 400932
IP address blocks: 23.171.184.0/24 maxlen: 24
2602:f97b::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d/7b1fad74-f135-4279-93d5-fe9aa818fc6d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d/7b1fad74-f135-4279-93d5-fe9aa818fc6d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:29:e3:cc:e1:65:39:99:ba:7e:1d:7a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b1fad74-f135-4279-93d5-fe9aa818fc6d
Validity
Not Before: Mar 12 13:00:53 2025 GMT
Not After : Jun 10 13:00:53 2025 GMT
Subject: CN=6988513a-bb99-48a1-b889-0d2a5a3893d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:7c:e4:df:52:73:19:c5:2c:fb:28:f8:e7:ed:
1e:e0:32:70:f3:a4:b4:c3:e1:f1:ce:ff:7e:3f:2c:
85:cb:d0:a1:84:45:21:54:fe:dd:fd:df:9c:e5:af:
b4:5e:d0:56:98:02:f5:a3:9a:43:26:02:c5:d1:b0:
34:58:c5:6e:b1:41:7e:38:7f:21:4a:d3:10:da:39:
df:4c:5c:23:d0:5d:f0:84:4d:b2:c3:4c:fc:8d:72:
43:f1:17:e1:a9:12:28:2c:f2:90:ac:74:d8:ac:16:
4c:8a:f9:33:01:32:de:f9:48:03:fd:c7:0c:b0:ce:
75:1d:59:1b:0c:93:7c:e8:f1:f9:e8:e2:d4:44:73:
18:27:e6:40:f4:97:81:bd:65:67:f4:b9:07:15:94:
39:3a:a5:ef:b7:72:be:d7:4a:c7:58:5d:7a:ca:e4:
a0:5f:ae:db:e1:6c:ac:ed:ac:a2:49:cd:54:0e:30:
7c:4f:77:6c:f7:96:7c:cb:20:d1:56:a5:73:c0:9a:
96:aa:56:97:bd:cb:c3:67:ec:4d:76:b5:e9:45:13:
e1:c9:9c:6d:70:92:f3:5b:11:da:1f:b0:ad:6c:a7:
da:3f:7a:53:d5:67:de:b5:db:d0:a1:4e:56:11:d4:
c4:d4:82:8b:5d:55:ca:d6:6b:c9:f1:cd:75:bb:4e:
3e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:EA:6B:03:BA:3E:58:B9:E6:B9:4E:FC:CA:E5:CC:14:C1:10:40:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d/24ba4a3b-6997-383d-8894-c07b096200c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d/7b1fad74-f135-4279-93d5-fe9aa818fc6d.crl
X509v3 Authority Key Identifier:
keyid:CA:05:35:82:08:D5:0D:D1:73:F2:36:C9:A2:36:0D:68:F0:2D:CC:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.171.184.0/24
IPv6:
2602:f97b::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:85:c3:cd:38:d8:b1:b2:e5:9b:94:98:f3:05:4e:fa:79:1b:
21:60:ba:b9:ca:2c:a4:74:3e:14:17:27:40:11:58:be:1a:c8:
b9:9d:28:10:68:bb:6d:e9:df:fc:f4:fc:72:13:c1:a8:f0:56:
b2:be:9e:a7:01:ee:1d:07:bf:82:1b:03:de:e0:2b:04:60:63:
be:87:5a:35:a0:46:0d:c8:4c:59:a2:17:1f:8e:cd:ec:1c:4f:
72:4b:18:c4:ed:b5:82:10:f3:d6:f6:ff:70:d6:5c:97:ed:af:
73:a5:ca:bd:a9:f8:e1:fe:a0:a0:e9:c2:60:9b:9d:6f:ba:16:
39:c4:10:88:16:a0:79:d5:32:7b:45:88:b8:9f:6e:72:9b:fa:
1c:8e:b5:45:84:82:66:26:53:63:f5:d4:cd:6e:05:10:f6:eb:
82:73:17:7a:9b:44:08:c3:3b:52:7d:64:a7:e1:5f:eb:e0:27:
3f:a3:37:75:d5:9c:55:5a:0f:2e:c1:b6:56:af:86:7b:9c:27:
71:3b:b1:ad:d9:16:08:d4:6a:a1:8e:40:c7:a2:43:bc:29:94:
2c:ee:33:4c:ce:36:62:f2:5c:d6:f1:bc:3f:9e:1f:88:41:df:
6b:c7:8e:21:a1:11:f2:a1:35:80:75:83:25:71:c9:4c:52:37:
77:59:35:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:38:46 2025 by rpki-client