Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c93af7ed-a75c-3594-b683-02cdbfa441a1.roa
File: c93af7ed-a75c-3594-b683-02cdbfa441a1.roa (raw, json)
Hash identifier: mfNhTiAE8xzCm36IoR7nrbnuV7rantnI/9sxqZwtcY0=
Subject key identifier: 8D:EE:8B:52:30:C4:3B:E8:0B:A3:F2:71:D5:6E:E1:73:D4:30:57:63
Certificate issuer: /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial: 010D0C9F432858491AA6C3ACFAE12777BF589400
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c93af7ed-a75c-3594-b683-02cdbfa441a1.roa
Signing time: Fri 07 Mar 2025 02:00:39 +0000
ROA not before: Fri 07 Mar 2025 02:00:39 +0000
ROA not after: Thu 05 Jun 2025 01:00:39 +0000
asID: 21704
IP address blocks: 64.125.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 09 Apr 2025 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1a:a6:c3:ac:fa:e1:27:77:bf:58:94:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Validity
Not Before: Mar 7 02:00:39 2025 GMT
Not After : Jun 5 01:00:39 2025 GMT
Subject: CN=199924b8-b4cd-4a59-b214-22e954f910ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:01:0e:10:77:ea:2c:c6:12:98:68:14:1f:46:
d1:02:38:06:ff:c6:89:d5:e7:df:db:3d:38:75:c2:
a9:33:3c:76:db:a6:18:58:13:4c:bd:bc:47:7e:af:
6e:92:94:eb:f2:b4:cc:d1:d4:7f:db:ca:a8:ab:80:
76:a2:47:a1:d2:77:0c:8d:65:84:fd:06:fc:1b:63:
07:98:4d:04:2d:12:73:53:9f:68:a1:87:b0:37:f0:
07:cc:53:b9:94:98:42:83:f6:c9:2a:a5:3e:49:59:
9e:d8:94:84:84:87:37:af:b2:9c:5b:45:11:93:78:
fc:ed:c0:6c:2b:5c:26:92:f6:e5:db:aa:fb:9d:bc:
9a:e7:ef:9b:29:22:02:69:b6:12:df:f7:03:93:9c:
88:1d:16:0e:e9:bf:79:ff:cd:7e:c8:c7:ab:56:d8:
cc:bd:20:2c:c7:4d:de:8c:63:9d:de:fc:d3:ef:98:
a4:6a:1c:78:ea:14:ed:96:cb:1c:19:e9:f1:b7:26:
51:d5:27:30:b8:47:8a:a3:96:a1:bb:84:80:34:0b:
d1:6b:f1:df:45:9e:88:d5:e1:43:9e:63:3a:4f:76:
f4:28:01:56:3a:45:c9:48:2f:4a:11:f7:45:56:96:
28:f2:cd:89:d3:8a:a6:32:e6:fd:f2:c2:e2:cb:1c:
e2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:EE:8B:52:30:C4:3B:E8:0B:A3:F2:71:D5:6E:E1:73:D4:30:57:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c93af7ed-a75c-3594-b683-02cdbfa441a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
X509v3 Authority Key Identifier:
keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
sbgp-ipAddrBlock: critical
IPv4:
64.125.58.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:7f:07:59:64:5a:ad:dd:28:9f:37:2a:98:29:90:04:3f:ac:
59:31:7b:5e:10:65:80:6e:1c:05:8d:16:d9:70:b5:93:94:38:
82:d7:d9:3a:ef:d3:34:00:03:ab:0c:67:70:c4:7b:4d:b1:e2:
3c:80:be:0c:6e:64:1e:49:9b:1f:f2:45:1a:60:7b:f1:b0:4b:
11:18:7b:47:52:7b:2b:19:22:e4:15:c1:1a:59:a0:8d:fa:03:
a5:9f:77:83:85:d0:59:fe:b6:da:88:1b:44:49:c3:6f:de:91:
1e:1d:e5:16:9d:22:7f:ca:22:64:b2:23:d7:64:7b:e1:45:bf:
1f:5f:7c:2d:76:91:18:e5:17:db:8f:2f:f0:71:30:fa:d1:be:
2f:f5:f4:37:65:a2:f8:05:24:a2:23:63:b5:2b:9a:cc:7f:1e:
f5:d0:1f:7d:4c:e3:b4:d2:63:c7:cd:d6:71:f6:47:ce:66:e8:
f4:3c:93:6e:d9:ff:58:2a:9e:57:96:8c:2e:eb:94:09:ff:42:
c0:f7:97:40:d8:2d:51:6d:ea:f1:7c:49:35:13:e4:cf:bf:1c:
98:c3:1c:cd:56:27:8d:52:a0:c1:ea:39:bf:e0:fa:6e:f4:c1:
40:70:f4:4b:76:75:68:8d:ca:03:06:ca:72:f3:7c:ef:11:28:
f7:8a:d4:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:40:38 2025 by rpki-client