Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/27f79c66-ade1-34d1-b698-4ce6813ddd0f.roa
File: 27f79c66-ade1-34d1-b698-4ce6813ddd0f.roa (raw, json)
Hash identifier: Zs+zjp8oR61Q/Ss7dJeWDRbIvHgkuP6e4OR+O+jVxgg=
Subject key identifier: D7:1E:42:75:9C:5D:E9:F3:D0:2B:22:0E:43:F6:22:11:20:14:6E:7C
Certificate issuer: /CN=2775f7c3-c238-47d5-98c9-835a28d9095e
Certificate serial: 010D0C9F43285848D0ABC36432FA09AFEA5DB740
Authority key identifier: D1:24:DF:CC:7F:5B:80:D2:8D:EC:FE:EE:8C:CF:52:33:8E:B5:21:44
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/27f79c66-ade1-34d1-b698-4ce6813ddd0f.roa
Signing time: Sat 08 Feb 2025 14:00:52 +0000
ROA not before: Sat 08 Feb 2025 14:00:52 +0000
ROA not after: Fri 09 May 2025 13:00:52 +0000
asID: 62467
IP address blocks: 104.167.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/2775f7c3-c238-47d5-98c9-835a28d9095e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/2775f7c3-c238-47d5-98c9-835a28d9095e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 08:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d0:ab:c3:64:32:fa:09:af:ea:5d:b7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2775f7c3-c238-47d5-98c9-835a28d9095e
Validity
Not Before: Feb 8 14:00:52 2025 GMT
Not After : May 9 13:00:52 2025 GMT
Subject: CN=0a265629-0c68-49d8-ad29-1ad2b31d4bcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:76:05:67:18:0a:08:93:88:7e:28:ea:a2:35:
15:bb:5c:ff:23:e1:6d:c4:01:b6:46:7a:b3:ab:2c:
11:5b:9e:ce:cb:74:28:98:42:10:b3:0d:4e:c0:d6:
8d:a2:5c:26:61:46:0d:24:1b:5f:fa:a5:35:0e:7c:
45:36:c4:19:0d:4b:8e:3e:26:20:fc:b8:76:36:a7:
fc:b4:30:99:06:30:28:9a:09:47:67:2e:69:60:f6:
14:66:ed:49:f2:6b:95:9c:82:d1:30:33:bf:77:9e:
44:ce:2d:41:ef:0a:88:95:b5:ed:64:f2:ce:5e:01:
c5:f2:ba:bf:c4:e0:68:41:72:bd:4f:6b:93:60:d8:
aa:44:d0:b2:7a:d8:52:42:49:94:4d:30:9e:ec:cd:
ff:51:1f:ea:82:34:35:d5:eb:23:14:aa:c7:d1:de:
f7:ee:f8:15:0a:9d:8d:fd:ba:af:cb:b4:e1:21:14:
f0:97:44:96:9d:93:0f:69:65:80:c6:6b:5c:d6:03:
00:5c:41:87:69:24:9f:bb:1a:75:a0:e4:a9:25:36:
72:e1:3a:bf:63:6f:1a:a5:c9:bf:d6:52:be:89:88:
70:9d:ab:66:f5:1e:8e:e8:a7:21:36:32:b2:57:c8:
97:d2:d7:2b:c2:43:f0:d8:1f:37:d5:22:2f:b9:fd:
3b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:1E:42:75:9C:5D:E9:F3:D0:2B:22:0E:43:F6:22:11:20:14:6E:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/27f79c66-ade1-34d1-b698-4ce6813ddd0f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/2775f7c3-c238-47d5-98c9-835a28d9095e.crl
X509v3 Authority Key Identifier:
keyid:D1:24:DF:CC:7F:5B:80:D2:8D:EC:FE:EE:8C:CF:52:33:8E:B5:21:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e.cer
sbgp-ipAddrBlock: critical
IPv4:
104.167.240.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:4e:5e:0e:7b:07:2c:f3:85:22:31:45:cb:a9:e4:c9:49:ba:
14:b7:0a:c6:fa:27:d8:92:62:49:62:a5:86:b2:a3:7d:64:f1:
be:db:da:11:71:fc:20:b9:74:f9:f2:48:27:50:15:f1:b9:b6:
23:cc:f2:8d:80:8e:ec:17:9a:3e:34:6a:6b:14:32:48:6d:e8:
0d:84:6b:53:ba:a3:0f:a3:0d:19:fc:33:7c:95:6e:fc:5f:95:
a1:64:16:49:10:98:33:ef:fd:2e:b7:bb:06:bc:21:cc:9d:0f:
41:d8:e8:10:c7:f7:b9:a7:e4:08:34:4f:66:fb:ed:a0:26:9f:
8f:e8:5b:59:ff:cc:92:28:65:0c:9c:c8:39:58:9b:ea:c7:a8:
6e:d9:c5:95:9a:46:b9:74:31:60:09:30:d0:e0:07:cb:20:bb:
39:6c:ef:c6:23:ae:26:7b:a1:98:53:dc:6c:e6:92:2f:fe:b6:
5d:28:5a:cb:3a:a1:cf:9d:b1:fe:d1:a1:93:b9:aa:de:da:ce:
d9:e1:ef:2d:05:2e:a0:12:03:4a:8c:47:bb:79:3c:ed:d0:83:
ec:37:db:8e:ab:65:82:f1:66:e2:c0:20:fb:f3:ff:36:09:e7:
1c:24:63:14:e4:ac:a2:6d:8b:8e:d9:b0:9c:d7:1e:34:f6:19:
ad:54:fe:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 18:59:29 2025 by rpki-client