Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/9c8e17a0-b624-3b98-92e7-fbd40f1f5eb7.roa
File: 9c8e17a0-b624-3b98-92e7-fbd40f1f5eb7.roa (raw, json)
Hash identifier: YTbzs4VEY0j6DrAsLVF5yxKOw6DmGYVUyd/kzzpCMOQ=
Subject key identifier: 9A:08:6E:B0:C1:E4:75:FD:4B:EE:AE:1B:97:56:B5:12:D3:A2:17:C0
Certificate issuer: /CN=4c85e42d-2171-4f6d-837f-3f7bac9d9a3d
Certificate serial: 010D0C9F432858491AA6CFEEAFBF63B260073400
Authority key identifier: 4C:31:43:41:4B:7B:18:75:0D:A5:83:40:42:11:7D:4D:95:0E:A3:0C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/9c8e17a0-b624-3b98-92e7-fbd40f1f5eb7.roa
Signing time: Fri 07 Mar 2025 02:00:39 +0000
ROA not before: Fri 07 Mar 2025 02:00:39 +0000
ROA not after: Thu 05 Jun 2025 01:00:39 +0000
asID: 54579
IP address blocks: 65.255.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 16 Apr 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1a:a6:cf:ee:af:bf:63:b2:60:07:34:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c85e42d-2171-4f6d-837f-3f7bac9d9a3d
Validity
Not Before: Mar 7 02:00:39 2025 GMT
Not After : Jun 5 01:00:39 2025 GMT
Subject: CN=f7a350a4-38bb-49cf-8c32-f3cd538fb2b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e2:ad:20:41:46:bc:1b:5f:a2:b6:9f:f9:91:
e5:62:1b:38:3c:06:20:18:ff:ca:61:b2:18:d5:ab:
cc:6d:2f:b4:ee:4e:13:1c:19:e9:4f:d8:a4:0a:5f:
05:ed:58:4b:7a:12:bb:95:f2:99:7e:c9:28:49:3d:
8e:df:07:67:65:8f:fb:5b:60:43:a6:cb:24:3a:67:
4f:66:c8:87:05:27:e8:14:92:bd:91:80:be:5a:b0:
4c:88:cc:ad:f2:4e:98:bc:7c:0f:71:af:52:2d:61:
b9:0e:ba:5d:f8:ad:b9:01:a9:82:08:5e:47:99:b2:
4f:6f:a3:c5:b6:d1:86:00:f7:37:86:73:a8:8d:d7:
cf:3d:84:ff:f7:da:d1:36:20:b5:3b:65:24:b0:db:
c7:7d:59:c1:f4:da:41:29:cb:1f:75:1a:5f:eb:a8:
eb:e8:42:98:21:cf:7b:76:c6:35:9a:e1:4b:21:56:
25:1e:ce:19:c4:c6:4e:ee:e4:11:7a:aa:f5:65:92:
8b:50:8d:73:a8:26:06:a7:9d:e0:d7:29:d4:22:08:
1b:65:d6:43:03:f7:1c:ab:c5:f3:82:9d:1c:41:8b:
d6:39:38:85:19:9c:f7:27:3d:77:eb:8a:28:c6:3c:
5c:bd:3b:82:8a:e8:fe:f3:3b:0c:b4:00:09:08:10:
13:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:08:6E:B0:C1:E4:75:FD:4B:EE:AE:1B:97:56:B5:12:D3:A2:17:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/9c8e17a0-b624-3b98-92e7-fbd40f1f5eb7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.crl
X509v3 Authority Key Identifier:
keyid:4C:31:43:41:4B:7B:18:75:0D:A5:83:40:42:11:7D:4D:95:0E:A3:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.cer
sbgp-ipAddrBlock: critical
IPv4:
65.255.130.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:5c:20:18:20:03:82:88:05:43:2d:9d:3f:8a:e6:7a:53:a0:
5e:c2:cf:ee:2a:66:2b:6f:29:9c:65:2a:7c:6a:a9:df:9b:64:
5e:7a:be:e4:c7:68:62:b2:41:6e:d2:42:77:86:8e:36:b6:2a:
85:c7:03:3a:87:d7:2d:9e:ec:c8:f2:4a:ec:fe:3a:62:ab:82:
e5:d4:ab:48:87:48:64:b4:38:0f:21:57:13:bd:35:d2:4b:04:
a7:47:08:42:a2:77:0f:52:66:76:6e:da:3c:a3:a5:c1:b5:1b:
c5:f8:e6:5e:41:2b:4c:27:11:da:ac:8b:22:9a:72:90:8b:4d:
a1:05:dd:3b:51:76:0d:5a:22:b3:d1:12:57:a6:40:b7:c8:33:
67:e0:32:bc:b9:82:b1:77:11:86:70:99:a1:e5:0c:e7:fd:34:
e0:88:b7:1c:3d:da:8b:f1:2a:52:0c:7a:88:1a:06:8e:f2:3c:
53:a7:fc:f3:bd:1e:09:c3:4d:b1:50:9c:9a:7d:99:26:aa:4f:
33:28:85:77:32:d4:86:80:62:5a:86:14:58:25:85:b9:00:a1:
94:f8:67:32:28:5b:18:be:fd:68:84:a8:a4:c6:68:e8:09:21:
7c:a0:67:f7:2c:4a:11:b6:b8:30:09:8b:24:db:e9:24:04:04:
1d:68:4a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 11:53:11 2025 by rpki-client