Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/df96cebe-5e13-3f30-ae5c-9d42045eaa06.roa
File: df96cebe-5e13-3f30-ae5c-9d42045eaa06.roa (raw, json)
Hash identifier: G2xibPQV2OI8A07zuqvtkcslI88jc5dMbEUCWtdigDE=
Subject key identifier: CF:EC:82:FB:F2:30:DE:15:19:5B:EE:5A:C8:23:C7:89:9C:E5:C8:CC
Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial: 010D0C9F43285848B35B7746F0DBC73C894BD2E0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/df96cebe-5e13-3f30-ae5c-9d42045eaa06.roa
Signing time: Wed 29 Jan 2025 02:00:39 +0000
ROA not before: Wed 29 Jan 2025 02:00:39 +0000
ROA not after: Tue 29 Apr 2025 01:00:39 +0000
asID: 209854
IP address blocks: 166.88.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b3:5b:77:46:f0:db:c7:3c:89:4b:d2:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
Validity
Not Before: Jan 29 02:00:39 2025 GMT
Not After : Apr 29 01:00:39 2025 GMT
Subject: CN=4ab1d878-28cc-43ca-8668-26a3428d6ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e8:93:35:a6:04:cb:4e:7c:e2:6a:d3:81:97:
b0:c7:ea:eb:6a:bd:80:bf:a1:4d:83:3f:07:6c:f7:
03:93:62:17:70:7a:00:5b:ef:65:d0:cf:09:34:88:
f0:a9:dd:0e:35:b6:3c:5a:e6:18:b8:4d:06:0f:a5:
6d:f2:8c:b0:48:45:91:5a:cd:aa:50:38:e1:6d:1a:
8d:0b:e4:0e:15:30:70:f8:0b:c9:d8:4b:4a:fe:96:
9f:93:a1:be:34:5b:0d:05:ad:91:5c:a6:e4:8c:18:
44:ec:b9:12:69:69:7e:9d:85:39:09:b8:25:8d:17:
43:25:2c:96:4b:35:77:5d:fb:d6:ab:42:cc:2a:52:
91:7e:59:a0:01:96:38:2e:68:26:64:17:e0:56:ac:
f2:ab:f4:d7:a7:1a:0b:41:2b:25:f4:43:fd:b1:87:
bb:00:e7:e2:5e:41:d3:75:fb:59:1a:cc:ce:e5:d6:
54:be:fd:99:2d:cb:72:8e:ed:db:78:6d:08:18:d3:
70:dc:7f:5b:a6:5f:7a:75:ab:c5:06:0f:65:95:5f:
01:9f:24:1c:b2:f4:ed:18:09:09:a8:ca:11:49:c2:
c0:45:cb:16:c6:1e:0b:7e:f2:e5:92:2c:1d:c0:bd:
79:65:0d:4d:e5:64:5f:da:b8:64:63:9b:a6:5a:4a:
a4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:EC:82:FB:F2:30:DE:15:19:5B:EE:5A:C8:23:C7:89:9C:E5:C8:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/df96cebe-5e13-3f30-ae5c-9d42045eaa06.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
X509v3 Authority Key Identifier:
keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
sbgp-ipAddrBlock: critical
IPv4:
166.88.205.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:cf:78:2f:60:1e:d5:94:66:27:34:1f:d1:69:c4:56:1a:15:
83:fd:4e:de:96:2e:db:c1:87:4b:1a:e8:7c:a7:ac:da:a4:75:
20:68:99:92:e5:30:b4:9d:c7:ad:85:d7:39:9c:a7:37:17:fb:
40:5a:18:9f:64:b1:79:d9:f3:42:7a:49:2c:12:59:ed:ee:70:
d5:33:fa:c5:f2:8c:21:f1:de:7f:96:26:2d:65:56:38:7f:4d:
fa:97:87:47:0a:32:f2:3c:4a:ee:b1:03:5b:aa:55:9a:ea:2f:
11:2e:09:f4:6e:06:4d:74:b5:8e:97:89:c1:b5:9f:17:6f:61:
2d:0e:d4:34:fd:ad:ab:38:8e:97:32:61:1a:19:79:f9:b5:98:
de:3b:89:a4:eb:96:2e:94:6c:82:f0:5a:e7:c2:97:11:24:f6:
75:fd:8e:03:90:90:8e:ec:83:5f:1a:14:99:92:db:17:4f:65:
6e:77:f9:27:c2:40:4e:b4:a8:8f:c9:d1:68:41:1f:96:fc:98:
42:b7:f5:a3:42:ca:d2:68:c4:5c:1f:48:c4:4b:97:c3:27:55:
0a:c3:b5:19:bf:b7:5c:b1:79:e1:47:ff:a9:26:b0:e0:ad:13:
f1:ea:9b:35:2d:5b:30:d3:a6:8a:64:43:ab:ac:62:7f:89:b1:
b3:2d:d1:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:39:12 2025 by rpki-client