Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/13acbb40-56ab-35fe-9d4b-139770943319.roa
File: 13acbb40-56ab-35fe-9d4b-139770943319.roa (raw, json)
Hash identifier: P8jsSYuyPGUj2M5hwCrzL2rfcLBpxQ9pNJdDGbSQiaE=
Subject key identifier: CE:AA:BB:72:F3:B1:B6:89:BE:D7:6E:9E:E0:45:55:4A:98:36:95:99
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D2111C4683CBA1CADA5B1C80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/13acbb40-56ab-35fe-9d4b-139770943319.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 7029
IP address blocks: 67.141.64.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:1c:46:83:cb:a1:ca:da:5b:1c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=f4f945f8-d4d5-41c1-a29f-a7267854fada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:42:2b:5e:43:b7:7c:1d:1b:24:4c:23:36:2f:
9c:97:8a:9a:cc:ca:b8:c2:35:2a:9f:89:ff:a9:f5:
37:9d:3b:dc:3c:58:07:91:20:74:91:5a:89:0b:3d:
fd:71:21:e0:f9:d4:9b:8d:8f:ff:0f:04:8e:8a:d5:
6f:06:7b:80:52:4e:15:42:0e:97:58:d8:36:10:8f:
d0:f0:d1:c2:1f:08:5e:52:77:56:79:e2:29:32:c7:
65:57:29:26:31:57:d7:e9:24:39:7f:84:35:b5:1d:
84:ad:5a:c0:15:2c:55:b1:e4:4c:7c:34:81:67:f1:
8e:66:f2:64:6c:9c:3c:bd:ec:01:6a:32:68:3f:96:
dd:42:b5:44:1d:b8:0b:89:7e:cf:45:72:e9:8a:b1:
07:cc:b3:52:bd:78:75:2b:9a:c1:58:56:7d:ca:9b:
dc:a6:4a:51:34:90:9b:b0:00:b3:ca:c7:30:dc:9f:
37:e6:3c:24:a4:c7:ba:f0:8a:b5:ac:be:c4:10:9d:
c2:69:07:d6:fe:59:89:88:cd:cb:46:dc:54:76:b6:
45:15:fa:c9:e9:e0:89:15:59:72:f7:79:37:0d:80:
7d:e9:4c:97:d5:24:79:45:c1:eb:ac:a2:ec:14:17:
54:2d:17:ac:cb:c8:74:8c:a1:29:38:c2:47:a2:bc:
db:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:AA:BB:72:F3:B1:B6:89:BE:D7:6E:9E:E0:45:55:4A:98:36:95:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/13acbb40-56ab-35fe-9d4b-139770943319.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
67.141.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:92:fc:6a:a3:a7:e7:22:2f:8a:f7:0d:47:99:94:c8:83:46:
68:02:3c:06:a3:2b:d6:6f:01:de:5b:9a:33:3e:6b:40:bc:9b:
f0:a5:47:34:e3:a7:d2:8d:f2:ab:cf:ed:b4:25:d6:3b:cd:8c:
55:86:96:5c:1a:33:99:aa:c4:81:0c:c2:1a:79:ae:8d:36:01:
da:48:60:a1:61:14:10:96:38:ca:80:28:95:1a:4d:25:50:87:
16:ba:84:d5:d6:83:17:8f:fd:30:d8:ab:f8:9e:f2:ad:37:11:
e7:99:64:a3:4f:c5:f4:7b:8f:a4:45:c2:4a:63:e9:c1:bb:2f:
84:38:f7:57:ae:fe:a7:5c:96:d3:6f:ce:f3:b6:ac:65:42:55:
ca:c4:fb:ff:a9:bb:b2:7e:a8:15:84:cd:d4:e7:80:b4:6d:91:
4e:66:43:43:8a:a3:ba:d8:44:5a:21:42:47:fc:a0:7d:82:6e:
28:28:21:59:5f:b3:86:f0:f9:55:01:b8:c4:cd:8d:87:69:06:
97:c0:ee:b7:f6:aa:2d:f2:5f:39:5c:f9:78:5e:e9:25:c5:45:
a3:ce:a9:bf:c2:96:54:5c:26:26:8a:0e:e1:db:d9:30:93:9c:
c9:3e:11:98:df:25:ed:46:be:79:f1:c1:ae:b5:50:14:e8:2f:
c3:e7:80:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:38:04 2025 by rpki-client