Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57da1f4a-da7b-44cf-8427-a74615d9a53e/85ad93df-d449-3700-80f8-7bf056787ba3.roa
File: 85ad93df-d449-3700-80f8-7bf056787ba3.roa (raw, json)
Hash identifier: 3CJVngzXttTYQfS30nzJSC0fOaejPUZ3fYm1EO9qe5g=
Subject key identifier: A8:61:9B:72:18:CE:C7:CD:92:59:32:6A:CD:D1:30:D1:54:6A:F8:C7
Certificate issuer: /CN=57da1f4a-da7b-44cf-8427-a74615d9a53e
Certificate serial: 010D0C9F43285848D21140D921586B70DA7BDF00
Authority key identifier: DC:59:2E:AA:72:FF:6A:2E:5A:5D:16:DC:29:64:7D:F3:48:0C:2A:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57da1f4a-da7b-44cf-8427-a74615d9a53e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57da1f4a-da7b-44cf-8427-a74615d9a53e/85ad93df-d449-3700-80f8-7bf056787ba3.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 7029
IP address blocks: 162.253.248.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57da1f4a-da7b-44cf-8427-a74615d9a53e/57da1f4a-da7b-44cf-8427-a74615d9a53e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57da1f4a-da7b-44cf-8427-a74615d9a53e/57da1f4a-da7b-44cf-8427-a74615d9a53e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57da1f4a-da7b-44cf-8427-a74615d9a53e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 18 Apr 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:40:d9:21:58:6b:70:da:7b:df:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57da1f4a-da7b-44cf-8427-a74615d9a53e
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=dc1db768-b2a8-48e6-bd27-cef1806d4aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3e:06:35:eb:26:26:e6:8e:fc:e3:26:d9:eb:
84:78:27:01:80:56:28:67:10:a0:4a:ee:7b:33:30:
85:fe:ff:63:2b:5e:57:fc:34:b7:2c:d9:5f:41:eb:
f9:72:10:35:72:be:fd:b1:b0:73:f4:72:55:80:f5:
d5:90:01:25:7e:15:f1:e8:61:95:0f:6f:c7:57:b4:
1b:77:73:2c:ab:01:51:ee:c1:06:bf:64:82:f7:74:
85:f5:59:ce:4a:20:ba:39:da:fb:8a:a3:0d:87:af:
08:6f:3b:e6:06:26:4e:e2:6b:78:b9:cd:cd:1f:50:
da:b1:92:9e:3b:8b:a5:6a:7a:74:92:d6:4c:4a:7d:
76:df:6b:74:8a:ed:3d:dc:e3:89:08:9a:99:c4:7f:
f8:59:6d:d1:bf:33:d8:c8:20:24:74:ec:68:0b:80:
43:e1:29:00:b5:3e:fa:e8:aa:03:de:d7:85:cb:20:
26:cb:51:1e:08:6a:5c:3d:25:2f:19:03:af:cf:89:
aa:90:f0:32:65:39:2b:a4:7b:87:44:e3:4d:0f:17:
ea:4f:87:cc:c5:cf:10:aa:81:e2:32:ad:f6:e7:e6:
88:68:50:71:5c:41:f1:14:15:13:88:5f:c6:f3:26:
44:30:c4:12:4d:0c:53:41:97:62:fd:8f:e6:4b:b0:
8c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:61:9B:72:18:CE:C7:CD:92:59:32:6A:CD:D1:30:D1:54:6A:F8:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57da1f4a-da7b-44cf-8427-a74615d9a53e/85ad93df-d449-3700-80f8-7bf056787ba3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57da1f4a-da7b-44cf-8427-a74615d9a53e/57da1f4a-da7b-44cf-8427-a74615d9a53e.crl
X509v3 Authority Key Identifier:
keyid:DC:59:2E:AA:72:FF:6A:2E:5A:5D:16:DC:29:64:7D:F3:48:0C:2A:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57da1f4a-da7b-44cf-8427-a74615d9a53e.cer
sbgp-ipAddrBlock: critical
IPv4:
162.253.248.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:78:f5:85:b6:e3:32:49:95:21:97:19:b2:e5:97:98:1f:09:
7c:92:a1:58:ed:04:64:24:36:48:dc:9a:29:d7:f8:c5:60:64:
0f:d1:bc:fd:17:89:f4:1d:dd:a6:c9:75:1a:75:a0:09:de:33:
53:83:50:7e:42:72:36:65:df:8f:e2:9d:b2:e0:da:c8:cf:31:
68:7f:e7:da:6d:00:02:50:b0:6b:34:c0:2e:01:58:7d:fb:8c:
af:a1:48:f9:3c:30:49:06:d0:c5:51:a6:85:78:38:ba:2f:89:
0f:54:e6:d4:81:68:e1:11:b4:b6:a4:6f:65:04:55:24:83:87:
8a:ad:0c:47:7a:0f:2e:26:74:cd:e4:59:9d:3e:c8:ba:a2:75:
c6:8f:47:cc:8e:89:87:6f:af:e4:e3:9d:56:73:9b:bb:6f:69:
34:77:44:cf:d4:0e:4e:82:18:4b:c0:85:51:92:5e:d0:28:f2:
31:72:ee:2e:1d:8d:2f:69:99:0c:f8:70:5a:72:10:a2:af:de:
4f:56:3f:aa:a7:81:c3:03:1a:97:ea:07:64:2f:12:8c:c7:7f:
bc:8f:28:13:5b:43:83:8a:62:a7:84:ba:2e:f6:b6:cc:44:56:
de:48:06:8f:37:3f:83:2f:b0:dc:f2:bc:59:d4:ae:6b:e7:a4:
27:f5:30:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:10:32 2025 by rpki-client