Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/11274dc3-d729-310f-a5b6-e526a7179fc6.roa
File: 11274dc3-d729-310f-a5b6-e526a7179fc6.roa (raw, json)
Hash identifier: 34TkwtYToJtAda7Y7jr5S+QKC8L6eBJ9+hgMavvSU/0=
Subject key identifier: 8C:38:85:24:6E:8E:3D:FF:80:3A:69:9A:DC:05:E9:49:7D:3C:F1:6B
Certificate issuer: /CN=0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b
Certificate serial: 010D0C9F43285848C85B8616121F00A8774D23C0
Authority key identifier: 19:3F:7A:B0:F9:BA:D3:20:3A:17:05:95:07:CF:93:2A:4E:92:70:2C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/11274dc3-d729-310f-a5b6-e526a7179fc6.roa
Signing time: Wed 05 Feb 2025 14:32:58 +0000
ROA not before: Wed 05 Feb 2025 14:32:58 +0000
ROA not after: Tue 06 May 2025 13:32:58 +0000
asID: 22218
IP address blocks: 204.8.40.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 17 Apr 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:5b:86:16:12:1f:00:a8:77:4d:23:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b
Validity
Not Before: Feb 5 14:32:58 2025 GMT
Not After : May 6 13:32:58 2025 GMT
Subject: CN=14c272cb-3079-4153-b6b5-a948a560689c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:51:26:81:ce:97:0a:af:bf:f3:11:5b:3f:2c:
29:f2:74:d3:f5:48:20:1e:2c:d5:09:76:fa:a2:6b:
aa:89:b9:38:81:5c:4e:3f:9f:ae:4c:5b:4e:8d:45:
ee:2d:3d:05:f7:7e:88:8e:83:c6:92:07:56:62:d5:
29:ec:51:77:6d:0c:0c:85:ab:65:58:10:0d:e7:cb:
cc:64:90:5e:a3:74:54:c8:52:d5:38:18:6c:ee:85:
f7:b5:43:28:9a:bb:1d:48:db:ce:fd:86:97:ae:73:
50:74:f2:97:0b:f1:2d:5a:3d:48:39:05:38:71:2a:
fe:b5:cf:cb:81:f3:d4:b1:0c:a7:e3:5b:19:09:4c:
5e:5f:2e:0f:e0:de:66:a7:e8:26:9b:ca:74:9f:d9:
4a:bc:b0:9f:7e:b2:ff:a8:d3:0c:96:90:91:26:ba:
93:67:25:c1:3f:40:0f:94:ab:76:6b:71:e2:71:d9:
67:61:18:bf:51:e7:1d:4c:6b:1d:4a:25:d7:f5:23:
13:63:0c:0c:db:1f:3f:71:e1:60:53:87:4c:9b:ec:
76:fe:04:b4:ba:de:ca:e0:48:01:28:7f:3c:62:8a:
60:ed:4e:eb:ab:9c:81:f5:f5:5f:e6:bc:52:f8:5a:
5c:01:67:bf:e4:b2:cb:1f:ad:82:30:84:50:ac:10:
90:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:38:85:24:6E:8E:3D:FF:80:3A:69:9A:DC:05:E9:49:7D:3C:F1:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/11274dc3-d729-310f-a5b6-e526a7179fc6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.crl
X509v3 Authority Key Identifier:
keyid:19:3F:7A:B0:F9:BA:D3:20:3A:17:05:95:07:CF:93:2A:4E:92:70:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.cer
sbgp-ipAddrBlock: critical
IPv4:
204.8.40.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:b6:3f:45:ad:7f:89:a0:0f:e9:11:6e:f1:f7:5a:74:02:c1:
b4:7e:86:e5:92:bd:66:32:45:f7:f9:32:ee:12:4e:45:c0:05:
c2:d1:31:57:b6:ab:82:c5:c6:80:e2:5b:df:cc:7c:92:57:e6:
9e:cb:23:7f:cc:67:35:20:88:6c:98:ce:6b:75:d9:e8:ec:fa:
59:a1:9a:1e:8c:19:89:dd:4d:8a:58:8f:90:e4:5b:c2:ba:c8:
1e:84:50:0d:08:00:08:9f:cf:82:fa:5f:25:e5:e6:84:2d:a3:
2d:5c:e5:e3:99:45:07:77:42:6a:0b:3e:20:b7:6f:a5:a6:09:
e9:da:c0:1e:84:98:a1:d7:f6:f3:65:d0:39:8d:03:8d:5a:03:
97:78:ca:b9:b2:f3:6b:fe:de:97:e6:66:d5:66:16:8e:2a:4f:
d0:29:0a:bd:0d:ca:08:66:2d:73:e3:20:1a:e9:0b:d2:3a:84:
d9:c9:47:5c:54:42:97:3c:aa:98:d4:f4:7d:67:7c:b6:52:90:
b4:10:48:34:48:a0:3d:08:72:83:43:91:bb:60:c3:6b:0f:c1:
18:90:9c:fe:cd:8c:33:ae:18:3b:63:6a:57:3b:70:35:22:05:
40:b0:28:f4:b1:0e:91:9b:ca:98:ef:5c:48:42:2b:6d:84:15:
2f:e5:72:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 17:00:59 2025 by rpki-client