Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fec06e6b-355e-3207-9516-1dc2330a28af.roa
File: fec06e6b-355e-3207-9516-1dc2330a28af.roa (raw, json)
Hash identifier: USFKPVWEtqoFIyD/pzDSEe7tSr83oflLOWCCOD77rW4=
Subject key identifier: AF:52:13:33:C0:4A:4E:E5:24:76:D9:16:86:58:29:5C:6F:49:91:36
Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial: 010D0C9F432858494F93F235A2B83FEF9DD96AA0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fec06e6b-355e-3207-9516-1dc2330a28af.roa
Signing time: Wed 26 Mar 2025 01:00:40 +0000
ROA not before: Wed 26 Mar 2025 01:00:40 +0000
ROA not after: Tue 24 Jun 2025 01:00:40 +0000
asID: 8881
IP address blocks: 136.0.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4f:93:f2:35:a2:b8:3f:ef:9d:d9:6a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
Validity
Not Before: Mar 26 01:00:40 2025 GMT
Not After : Jun 24 01:00:40 2025 GMT
Subject: CN=a1a770d5-4daf-457e-ae64-329423da1ce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:dc:19:f0:01:27:2a:8b:a3:9e:5b:9a:cc:ec:
de:19:ad:c9:12:a8:88:f9:55:ef:f5:b0:22:4e:53:
4a:83:18:25:a5:09:f3:dd:10:de:52:94:36:39:5f:
65:9d:1f:b1:be:36:4f:a1:c9:12:dd:2f:1a:3b:f0:
ec:37:d1:0b:dc:42:a4:2f:b7:5f:a2:c0:65:4e:65:
12:46:45:ce:64:a6:15:37:bf:40:47:28:e4:11:92:
ae:3e:0b:2f:7b:89:1c:9d:92:77:4a:c9:71:58:9a:
f4:2e:34:3a:88:2a:2a:ca:6b:ce:18:40:f5:67:41:
3f:19:ad:f4:1f:49:49:83:41:c9:97:84:42:5c:28:
56:cd:57:d6:3d:87:a3:a3:c1:ab:6a:ba:a3:dd:b9:
ab:12:5b:ae:4d:84:ad:ed:10:15:37:7b:eb:57:32:
cb:f1:c2:d4:d4:8d:33:49:97:9e:9b:8b:3a:16:30:
74:95:3b:15:61:b0:ce:32:77:43:72:60:e3:b8:4c:
ab:67:1a:76:08:6a:89:e0:b5:43:c2:07:2a:7d:31:
8f:d8:d3:c0:10:e3:78:63:40:95:3b:7c:8b:d4:58:
ac:0f:10:12:77:27:d8:96:84:2d:5d:39:89:56:a0:
cb:83:55:1c:d2:75:31:43:32:03:92:f1:49:70:80:
02:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:52:13:33:C0:4A:4E:E5:24:76:D9:16:86:58:29:5C:6F:49:91:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fec06e6b-355e-3207-9516-1dc2330a28af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
X509v3 Authority Key Identifier:
keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
sbgp-ipAddrBlock: critical
IPv4:
136.0.149.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:12:29:98:68:3b:3a:88:6f:16:ad:4b:46:93:2e:9e:dc:eb:
e3:af:98:e2:35:1c:8f:96:91:27:17:aa:0b:9c:ba:e4:59:35:
51:7f:56:f0:5e:c7:e9:67:3a:79:08:02:bd:be:b2:96:ba:b9:
76:ae:d1:e1:9d:4e:26:d4:a3:fd:9c:75:28:57:d4:9f:95:e3:
9a:6b:a7:31:4b:02:d1:b6:68:56:fe:94:32:55:ef:5a:52:4b:
68:e0:40:f9:07:ec:19:d0:a6:73:d7:59:3f:f2:be:0c:41:a1:
9f:50:f7:d0:32:d0:2d:13:b0:7d:bc:12:d3:a9:06:1f:59:99:
ce:07:5e:46:30:5d:88:bc:d2:ab:e0:54:07:0f:ef:80:cb:c1:
28:55:0a:f9:1f:f3:0b:26:fb:f8:b9:88:cf:52:b4:5d:57:76:
4c:1e:ee:a1:0c:1d:53:cc:37:d9:12:76:40:00:93:26:a5:d0:
12:0d:48:55:fc:60:ae:78:1e:d3:04:b1:63:56:44:47:6a:bc:
a3:a3:c3:75:67:78:c6:ff:7d:94:22:a6:47:ee:f1:ca:e2:d8:
1c:40:5d:e6:cc:1f:a5:38:ef:6a:73:4f:ae:c7:e1:3c:12:32:
bb:d2:02:80:b3:b8:78:0f:03:eb:dc:2b:23:39:ae:0a:17:0b:
67:d5:4c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:14:04 2025 by rpki-client