Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d5816c95-27da-3909-a321-ada4bf2376a3.roa
File: d5816c95-27da-3909-a321-ada4bf2376a3.roa (raw, json)
Hash identifier: nGR6dQW2hlx3nlcjRfcUzURb8ngK+V2m9mrFzt+YpL0=
Subject key identifier: 2D:4A:BC:B3:CF:F4:52:78:AA:BF:5B:6E:72:98:C3:EC:69:C5:8A:29
Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial: 010D0C9F43285848AF2BA98E84DFF9CC8FB50BC0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d5816c95-27da-3909-a321-ada4bf2376a3.roa
Signing time: Mon 27 Jan 2025 14:00:52 +0000
ROA not before: Mon 27 Jan 2025 14:00:52 +0000
ROA not after: Sun 27 Apr 2025 13:00:52 +0000
asID: 18779
IP address blocks: 166.88.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:2b:a9:8e:84:df:f9:cc:8f:b5:0b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
Validity
Not Before: Jan 27 14:00:52 2025 GMT
Not After : Apr 27 13:00:52 2025 GMT
Subject: CN=5959c4d7-6ec6-4573-924d-5a7f61211033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7d:39:3b:50:8c:53:da:64:ed:0a:41:3a:62:
50:bb:40:91:7e:d7:80:af:49:f3:50:ef:17:57:64:
3e:5e:42:a9:2d:50:9a:5f:9f:11:44:34:25:26:cf:
65:0f:04:0c:07:94:a3:06:e0:7b:36:24:8b:54:e3:
e4:71:03:c8:f2:95:4b:42:e8:1c:15:37:2a:81:ce:
77:d8:e7:05:a7:98:8a:92:b7:0b:0e:ae:39:c3:06:
0e:97:44:a6:f2:4c:01:f5:1a:04:11:71:1f:01:7c:
93:de:68:69:4c:fb:cd:a6:ce:0a:e3:b3:91:b2:fc:
4f:b5:54:ff:09:ea:4d:ed:05:22:f6:34:ee:ad:c4:
d2:b1:c8:32:9e:7b:40:ff:8d:a6:b3:e1:b2:39:21:
b1:45:8f:9e:3c:57:da:a3:c9:a3:90:ba:43:27:58:
e3:f6:70:33:ff:87:78:d2:b1:f4:5b:8a:8f:18:fd:
a2:4f:54:a8:d9:c1:8d:d0:05:ad:82:14:b0:ac:e6:
07:51:76:da:01:f2:22:16:49:e3:52:b6:ed:79:8a:
a3:2b:9d:4a:b4:e3:24:dc:2a:7c:9c:32:02:91:17:
91:3c:e3:67:6e:86:94:72:1b:09:88:15:b6:c3:7c:
8a:a9:08:e2:24:e8:26:f2:39:cf:13:24:2f:32:d4:
7a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:4A:BC:B3:CF:F4:52:78:AA:BF:5B:6E:72:98:C3:EC:69:C5:8A:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d5816c95-27da-3909-a321-ada4bf2376a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
X509v3 Authority Key Identifier:
keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
sbgp-ipAddrBlock: critical
IPv4:
166.88.235.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:51:66:81:46:0f:e4:52:87:cc:24:ca:25:86:06:7a:73:39:
4c:87:74:02:23:ba:cf:74:a2:0b:0e:36:4d:2d:9a:0c:54:5d:
1e:90:9e:59:d8:fb:c0:e0:3d:62:f5:eb:99:7d:ab:a6:4c:85:
bb:c0:6c:1a:2a:40:e8:00:b5:81:88:99:c1:48:04:e7:b1:6b:
d3:a7:4f:87:30:37:cf:db:45:40:b3:96:7e:6d:26:7e:2d:bb:
72:c5:75:ed:88:11:63:36:36:46:17:7f:a7:64:68:46:08:9e:
65:8f:a4:e3:6c:f5:de:32:dd:e6:c6:eb:7c:74:55:43:dd:fb:
ac:05:fd:0f:b9:18:af:d7:c4:d3:f2:c7:0c:c4:0a:37:6a:e3:
3e:46:2f:8a:4d:a5:10:eb:93:d4:60:11:9f:b3:7f:b6:35:d7:
9e:4b:89:fb:7c:df:92:c6:4e:8b:22:02:8f:5b:d2:ee:c1:2b:
49:9e:a2:bf:e6:50:62:3a:8e:10:aa:3a:04:a7:8a:26:56:8c:
21:6b:fd:26:27:57:c9:03:ab:72:5d:e6:a0:ba:dd:be:e2:9c:
9b:4e:f9:3b:48:43:fe:84:1b:d2:6a:02:1e:1d:44:64:c1:f1:
21:72:bf:45:28:3a:54:a5:27:c0:e0:24:15:c2:b6:3a:23:11:
ca:00:44:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:47:56 2025 by rpki-client