Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d2725eba-2eef-37e0-891e-ebb7e0548c6d.roa
File: d2725eba-2eef-37e0-891e-ebb7e0548c6d.roa (raw, json)
Hash identifier: Bexh+CsPYCGm1ufdUePMq0V1YEqmyOkJT49lrCBEzFg=
Subject key identifier: 0F:A7:BE:C6:0D:20:82:AF:AD:A7:8C:77:53:01:9B:B8:09:0C:1D:8E
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285848CDE10299FB95040D379BCEC0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d2725eba-2eef-37e0-891e-ebb7e0548c6d.roa
Signing time: Fri 07 Feb 2025 14:00:53 +0000
ROA not before: Fri 07 Feb 2025 14:00:53 +0000
ROA not after: Thu 08 May 2025 13:00:53 +0000
asID: 396608
IP address blocks: 216.168.228.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 17 Apr 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cd:e1:02:99:fb:95:04:0d:37:9b:ce:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Feb 7 14:00:53 2025 GMT
Not After : May 8 13:00:53 2025 GMT
Subject: CN=3bdfa50f-050f-4856-aac1-b55568fc32c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:21:b0:35:03:b6:e1:b9:0d:01:86:b1:99:c8:
6c:8b:df:bb:c4:1f:28:26:df:f2:05:bd:4c:b9:f6:
1d:cc:66:55:45:ed:6e:5b:cd:0c:4f:9a:19:40:cb:
b4:bd:94:24:be:88:e5:ab:0a:f7:b7:7c:63:05:46:
27:f2:d2:70:76:f8:42:45:d4:e8:92:23:ef:41:cf:
9c:6f:3e:f3:ff:95:e7:c6:de:d0:be:48:2f:6b:79:
72:38:83:29:d7:14:23:a5:25:cf:84:c3:b1:83:4f:
e3:44:f1:ca:96:3a:35:73:69:61:07:c3:22:2f:10:
d9:76:81:af:71:47:39:f1:0f:6e:27:33:9c:68:6e:
09:93:1d:f5:24:6d:9e:cb:c2:da:f5:71:18:cf:fc:
bd:75:57:44:e5:49:78:73:c8:f7:74:0b:f3:12:f3:
af:4f:da:e4:2a:af:08:5d:af:b8:78:2c:7f:7a:e6:
f5:f4:05:50:69:22:69:33:61:17:e9:08:99:7d:86:
2b:e4:db:47:ea:37:46:66:c3:7b:33:cd:9a:4e:a4:
1e:69:dd:c7:4c:89:7b:ad:75:6d:f0:f3:6a:a9:c6:
49:cf:9c:30:9e:aa:4c:94:c9:b6:45:19:f3:66:e2:
e5:ab:19:d2:ae:5f:74:d8:be:ee:93:a7:b1:3b:8d:
07:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A7:BE:C6:0D:20:82:AF:AD:A7:8C:77:53:01:9B:B8:09:0C:1D:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d2725eba-2eef-37e0-891e-ebb7e0548c6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
216.168.228.53/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:3e:e8:61:be:25:b8:fe:de:fd:ca:dc:17:e8:8f:06:4b:79:
5c:d6:28:9e:5e:0c:be:9b:b6:aa:ed:4c:56:ad:42:9c:1b:45:
3e:23:07:40:1c:a9:4c:4f:f0:1e:9f:83:4f:9a:a6:b0:25:65:
f9:1e:cf:07:0a:67:0b:4b:c6:70:93:c7:85:63:34:b7:cb:d9:
72:f1:e0:bd:18:c4:a8:b1:0a:60:05:a8:d9:1f:13:3a:2e:cc:
54:b7:86:ba:1d:95:bb:72:a8:85:c8:74:41:1b:4a:92:58:27:
f3:7b:c2:af:51:5b:68:ca:fa:2d:4f:3c:94:c3:1b:ca:e4:51:
03:f0:b8:71:36:1b:b9:25:bd:db:06:fb:08:6f:73:48:bd:d3:
2a:07:70:9c:40:02:7c:71:51:68:29:1c:5e:a7:3d:bc:fe:8e:
ac:5a:0d:51:3b:4c:6b:2c:8f:21:d3:30:4c:e9:4f:9f:71:e8:
fd:92:ce:db:92:bb:c6:44:79:81:a8:ec:e7:e7:b3:45:3f:18:
9d:0b:19:dc:c5:dd:1f:ab:c0:fc:d6:c2:df:08:4a:ae:f5:f5:
05:ee:d1:0a:94:6c:97:ed:47:a6:d3:05:5f:35:40:90:29:eb:
5d:26:d2:14:40:8e:af:a7:2e:42:36:3c:5e:10:9d:0d:e8:c1:
6c:dc:08:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 20:10:09 2025 by rpki-client