Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/814253a9-9aad-32ad-b99c-4b4dc604402e.roa
File: 814253a9-9aad-32ad-b99c-4b4dc604402e.roa (raw, json)
Hash identifier: N3nqsfj1aqfWAWIPTlGcrg/+CiYEJ9P5WkAANUUZfSI=
Subject key identifier: 3D:DF:CA:03:64:C2:B2:33:6C:06:BF:AB:BC:19:ED:30:4F:9B:81:32
Certificate issuer: /CN=517b063f-7f88-4d7a-a5ad-1e487692f063
Certificate serial: 010D0C9F4328584953C44DF1894C2DB9F829CA40
Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/814253a9-9aad-32ad-b99c-4b4dc604402e.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 151797
IP address blocks: 104.251.224.0/20 maxlen: 24
172.81.102.0/23 maxlen: 24
172.81.104.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:4d:f1:89:4c:2d:b9:f8:29:ca:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=d36cee7a-0afd-47e8-baba-61b165e4ea14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:2f:60:9c:77:79:3e:c1:5f:c9:05:92:64:4a:
33:48:70:d5:ba:f0:21:b2:a9:81:75:01:c8:e7:e8:
31:d1:08:4d:ae:79:ea:3d:f0:b7:af:79:ee:c6:71:
5b:6b:80:f1:f0:5a:4b:b5:74:e2:9a:92:d4:8d:ad:
27:2d:b4:6c:6d:ab:17:06:d2:fa:a9:38:b8:2c:e0:
66:fb:31:db:4e:71:c3:70:ae:a4:a6:c8:a4:b3:90:
70:57:35:75:2d:59:aa:4b:56:6e:3c:07:83:ab:84:
a0:65:56:25:69:fa:34:b2:25:ad:9b:75:a5:57:8a:
f0:3f:1e:a1:91:44:b7:ca:ba:fa:dc:37:46:3e:4c:
66:95:46:0c:8b:6c:e1:b6:7e:af:8d:90:59:58:07:
03:2b:a5:91:cc:8f:87:34:bb:a7:5e:3f:d1:f6:1f:
5d:00:82:41:f9:ce:3d:69:ef:38:56:59:62:30:3b:
dd:27:71:32:08:e2:73:f5:ed:0a:e7:0b:27:a2:a0:
89:e2:18:06:6c:ed:bf:da:5d:f4:b5:37:b9:68:07:
65:cc:c5:77:f6:d8:27:21:9c:ca:61:59:2e:1f:5c:
1c:a4:23:fb:c5:17:d8:17:28:2a:b3:b5:d2:8f:60:
03:87:aa:77:03:c2:bd:7c:50:0c:4b:f7:94:af:8d:
20:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:DF:CA:03:64:C2:B2:33:6C:06:BF:AB:BC:19:ED:30:4F:9B:81:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/814253a9-9aad-32ad-b99c-4b4dc604402e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl
X509v3 Authority Key Identifier:
keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
sbgp-ipAddrBlock: critical
IPv4:
104.251.224.0/20
172.81.102.0-172.81.111.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:5f:5e:ce:c1:fa:ff:d1:c5:b6:c3:10:43:5a:46:6a:7a:20:
72:cf:72:05:f6:35:76:33:e6:82:c0:0c:ae:0f:bf:9f:d9:64:
53:2e:f1:d9:ae:76:b2:ca:e4:39:a6:9e:59:a8:ca:9c:ff:7c:
2e:0f:04:8d:73:0d:14:ef:22:a4:61:b0:f8:68:40:ce:15:93:
3b:0d:49:18:e6:ed:03:5a:f4:b3:65:85:fd:a4:90:5c:f0:20:
93:81:f3:d5:6d:88:8c:ab:5b:3c:c5:91:9f:1c:36:73:12:f4:
d8:2a:99:aa:4c:f7:7b:1c:24:99:d9:5e:16:03:74:10:91:f0:
3d:76:89:41:8d:63:b7:d8:54:81:3a:5d:57:57:34:34:0f:f4:
3f:e9:b7:0b:e6:90:97:0f:1f:2e:87:90:24:66:01:d6:2f:ec:
77:9c:ff:5e:cf:d0:11:34:d8:2a:82:dc:10:1d:2d:a5:c5:e9:
79:f0:cc:9e:2b:2a:4c:fe:cf:ab:6b:90:0f:9c:a2:07:c6:6c:
1f:53:0e:fa:97:98:a1:fd:92:73:0d:fb:4f:94:1b:5d:8a:3c:
bc:b1:8c:86:a5:ed:b9:62:5c:b7:e9:be:71:4f:98:98:bc:5d:
83:46:c7:ba:ff:3f:a3:80:c7:59:79:35:d5:d7:81:83:44:f7:
31:fc:b0:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 23:24:37 2025 by rpki-client