Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4725f7f-a2fe-4f08-bf13-7c0246b12935/68280e69-39b4-3c53-acac-adb2b940162d.roa
File: 68280e69-39b4-3c53-acac-adb2b940162d.roa (raw, json)
Hash identifier: IUwKLyzQcEnextmPF61rtpElBJu16hbFMXbdUKL+3LU=
Subject key identifier: 4A:F3:72:D2:83:29:E0:11:BA:5C:1D:F1:82:DB:2E:6A:80:01:12:E1
Certificate issuer: /CN=a4725f7f-a2fe-4f08-bf13-7c0246b12935
Certificate serial: 010D0C9F432858490F7BFCC7C071B67E8E2F1C00
Authority key identifier: 36:94:80:A4:2A:2D:19:AD:B5:61:F2:70:11:24:5F:DE:8D:19:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4725f7f-a2fe-4f08-bf13-7c0246b12935.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4725f7f-a2fe-4f08-bf13-7c0246b12935/68280e69-39b4-3c53-acac-adb2b940162d.roa
Signing time: Mon 03 Mar 2025 02:00:39 +0000
ROA not before: Mon 03 Mar 2025 02:00:39 +0000
ROA not after: Sun 01 Jun 2025 01:00:39 +0000
asID: 1099
IP address blocks: 67.217.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4725f7f-a2fe-4f08-bf13-7c0246b12935/a4725f7f-a2fe-4f08-bf13-7c0246b12935.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4725f7f-a2fe-4f08-bf13-7c0246b12935/a4725f7f-a2fe-4f08-bf13-7c0246b12935.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4725f7f-a2fe-4f08-bf13-7c0246b12935.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0f:7b:fc:c7:c0:71:b6:7e:8e:2f:1c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4725f7f-a2fe-4f08-bf13-7c0246b12935
Validity
Not Before: Mar 3 02:00:39 2025 GMT
Not After : Jun 1 01:00:39 2025 GMT
Subject: CN=5b3ae1ae-c260-48cb-b0e9-f33b3f6270bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ca:b1:3e:a5:de:a9:08:43:6a:00:12:c5:71:
da:be:92:fe:ed:97:6c:d5:c4:13:65:32:6e:67:11:
fb:3d:f8:68:dd:5d:be:d7:48:75:4b:db:16:b0:cb:
71:46:60:5e:73:30:18:93:d5:a3:06:a0:75:8d:e9:
86:53:ec:a3:ee:23:b2:da:e1:e8:e5:8d:1f:35:94:
6a:e8:12:0d:7b:b9:42:df:f3:c5:4a:40:db:fd:d8:
ba:5c:df:4a:b8:0e:62:c2:99:f7:46:01:7d:ba:cc:
aa:4d:48:49:24:1f:0f:55:5b:a3:b2:6f:33:f0:f7:
ff:87:a2:4c:df:eb:47:50:7f:b4:ad:b7:a2:83:73:
a4:18:bb:53:2a:0a:9a:c6:ba:a0:5a:fd:13:36:1e:
13:60:48:6b:92:be:fd:8a:88:45:3b:e8:24:15:c5:
fa:f0:bb:67:9b:81:36:23:71:b3:0f:df:4c:04:7f:
f8:e7:35:d2:70:7a:3a:e6:f2:7b:06:51:f2:27:f3:
52:43:e3:4a:00:1f:08:25:34:53:d2:73:70:fc:13:
c7:87:28:9a:59:0c:30:d5:d1:52:e2:14:ca:d8:7d:
04:d2:c7:a4:5c:a3:7a:03:31:4d:47:cf:dc:1d:cd:
ce:0b:f4:a0:41:da:a9:6c:ea:20:e0:a2:fb:72:19:
d9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F3:72:D2:83:29:E0:11:BA:5C:1D:F1:82:DB:2E:6A:80:01:12:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4725f7f-a2fe-4f08-bf13-7c0246b12935/68280e69-39b4-3c53-acac-adb2b940162d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4725f7f-a2fe-4f08-bf13-7c0246b12935/a4725f7f-a2fe-4f08-bf13-7c0246b12935.crl
X509v3 Authority Key Identifier:
keyid:36:94:80:A4:2A:2D:19:AD:B5:61:F2:70:11:24:5F:DE:8D:19:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4725f7f-a2fe-4f08-bf13-7c0246b12935.cer
sbgp-ipAddrBlock: critical
IPv4:
67.217.250.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:98:6f:81:e7:b7:e4:d5:64:59:69:76:ee:74:85:75:54:43:
a1:1c:36:c0:5b:4e:d0:b9:d3:02:e3:49:79:f3:a1:87:23:20:
b5:35:5f:59:b4:d9:01:28:97:10:c5:6b:30:a5:c0:c8:1b:f2:
20:64:2c:1d:50:55:8a:80:3f:98:ef:de:f7:8b:6c:81:c4:40:
b5:b8:12:7d:3e:52:c3:d2:e1:b4:83:fc:06:48:e3:e9:cc:21:
7f:63:9e:71:7d:80:f0:1c:c2:4d:1b:25:2e:b3:43:0f:c6:bb:
0e:e1:3e:2d:dc:04:1d:8d:fc:df:d2:58:20:8c:63:33:96:27:
ae:cf:73:fc:be:42:c4:cc:20:b1:67:1c:b1:b9:5a:42:23:06:
d1:64:a0:d3:d8:c9:4b:34:f0:60:fa:41:b4:8c:b6:c3:6c:db:
23:5c:3b:40:a2:8c:90:60:ca:f0:86:16:85:c6:19:93:ca:fe:
38:df:96:fa:c4:ef:c7:3a:7d:1b:3c:48:34:ce:ec:36:60:51:
47:98:0d:85:db:f8:07:4e:60:38:51:4e:8a:b0:a9:ab:17:ad:
5a:c3:64:b1:e2:d4:d2:bc:5f:aa:71:29:72:d5:f4:e4:36:c4:
f4:99:4a:ff:ae:74:cd:cd:d2:fe:15:f4:dd:01:ba:94:be:16:
75:af:66:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:05:28 2025 by rpki-client