Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6a4227de-446b-3a2c-8da9-61e4da730c97.roa
File: 6a4227de-446b-3a2c-8da9-61e4da730c97.roa (raw, json)
Hash identifier: J5LY/NCdNz7/BcX6LCtwmU6jR1KZxCxCoqQ+GDxcFvI=
Subject key identifier: 53:A1:34:45:AF:B1:C8:FD:BC:10:AC:CB:C6:4E:1E:BC:A0:70:88:D6
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D2111E545246FB5A0B078A40
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6a4227de-446b-3a2c-8da9-61e4da730c97.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 7029
IP address blocks: 72.8.0.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:1e:54:52:46:fb:5a:0b:07:8a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=25240e8c-9e92-4b6c-ae4f-5e4b6b1af27b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e9:4f:0b:09:af:45:cf:88:34:42:e3:43:20:
80:2d:64:33:c6:8f:1f:41:9d:e7:0e:ce:46:42:a1:
de:8f:36:98:95:8a:7a:04:b2:83:d7:76:d2:18:04:
ac:6b:49:4c:19:db:6b:62:10:e3:b9:29:8d:8d:74:
e8:a8:01:4a:8a:60:87:8d:cb:a5:03:ab:97:3d:a9:
a9:f6:c8:86:a5:06:23:e1:70:0b:46:15:06:ef:22:
cd:6a:92:55:a9:ce:5c:a8:ac:39:cb:91:7d:10:2b:
74:79:52:9d:cb:18:08:8b:f5:4a:5c:d0:89:6a:47:
99:aa:9c:4e:f2:16:6e:c8:1a:55:33:7e:ec:c5:1a:
29:cb:08:54:ce:83:9f:f7:5b:c7:c6:c3:9f:02:c2:
44:90:6e:b6:ab:fa:e7:95:89:03:47:cf:19:60:e8:
28:f8:54:5d:6c:b6:56:f1:44:68:4f:cb:8f:0b:0b:
90:97:83:eb:20:f6:ff:bd:f6:bf:cd:d6:22:f3:50:
33:58:ac:3f:e2:bf:9b:c6:c8:e9:4d:2b:72:61:ba:
6a:30:fc:e8:8c:ee:f6:ec:45:ee:89:17:b7:bf:56:
68:07:81:1e:14:38:b8:9c:1e:60:ce:c5:96:79:a9:
fb:2c:b8:33:41:be:d2:1d:27:d0:97:ae:fa:91:e5:
a9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A1:34:45:AF:B1:C8:FD:BC:10:AC:CB:C6:4E:1E:BC:A0:70:88:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6a4227de-446b-3a2c-8da9-61e4da730c97.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
72.8.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:1c:ee:8b:5d:e9:0a:b1:5f:bd:bd:0e:b7:fd:00:db:7c:dd:
6a:09:26:5e:6c:91:41:e6:c6:45:93:0d:00:81:9d:3e:45:26:
aa:ce:71:67:54:c4:92:ab:7f:eb:c9:ee:ee:4b:df:ee:93:c7:
b7:e4:77:8c:3a:f1:fb:69:8a:c0:d0:99:34:fb:86:42:b2:53:
63:bd:69:1c:d8:91:32:7e:80:fe:70:20:2f:74:9a:5b:62:fd:
77:2b:7b:4c:64:5d:c3:0b:56:9f:34:c7:e9:28:ab:51:df:30:
10:44:f8:fe:7b:83:cc:30:da:4d:c0:2a:7b:08:2c:35:d5:75:
cf:ad:8c:af:b7:cd:f3:a1:7a:3f:47:09:6a:e4:8a:e7:4c:ce:
fd:ab:f9:28:bb:1f:93:e5:1c:29:d8:9c:b2:91:f9:bc:ae:16:
6f:79:6f:df:ec:0e:4a:6b:02:25:90:97:f9:d6:1e:27:a8:c1:
11:43:0b:97:8c:39:74:1d:f8:6c:90:80:0b:e1:a3:36:d1:7c:
e6:84:fa:99:b2:89:c7:c0:65:64:61:0c:01:cf:c0:97:0e:fa:
fb:40:78:c0:07:d7:31:92:aa:b8:70:96:95:cf:4b:11:4f:87:
94:cd:dc:00:e9:66:01:d3:c9:91:f3:e7:f9:5d:c8:1a:c5:80:
1c:fd:e3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 11:46:31 2025 by rpki-client