Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/bd9fa510-4cb1-36ac-b6ef-d4748c094e1a.roa
File: bd9fa510-4cb1-36ac-b6ef-d4748c094e1a.roa (raw, json)
Hash identifier: 4/4IPPy6CsjLsqHg7Iz4OiD0nvbT7ekqfYSMv+8AvaM=
Subject key identifier: E7:96:B6:EB:F3:AF:2D:5A:14:8C:4C:71:FB:35:B0:C0:81:0F:CE:DE
Certificate issuer: /CN=5e22c59e-2904-4ea6-b044-0a9fac3946cc
Certificate serial: 010D0C9F43285848DEE88E74A390FD05AB26FF40
Authority key identifier: 54:0A:B5:F4:0E:EB:3F:FD:EA:F3:22:6E:E6:44:F6:EF:EB:CC:90:69
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/bd9fa510-4cb1-36ac-b6ef-d4748c094e1a.roa
Signing time: Thu 13 Feb 2025 16:24:55 +0000
ROA not before: Thu 13 Feb 2025 16:24:55 +0000
ROA not after: Wed 14 May 2025 15:24:55 +0000
asID: 399624
IP address blocks: 23.129.68.0/24 maxlen: 24
2602:f7a7::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/5e22c59e-2904-4ea6-b044-0a9fac3946cc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/5e22c59e-2904-4ea6-b044-0a9fac3946cc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:de:e8:8e:74:a3:90:fd:05:ab:26:ff:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e22c59e-2904-4ea6-b044-0a9fac3946cc
Validity
Not Before: Feb 13 16:24:55 2025 GMT
Not After : May 14 15:24:55 2025 GMT
Subject: CN=d769430b-e88d-4354-8133-f4153d547c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:78:2c:d4:78:6b:8c:d6:0f:6e:19:1c:78:be:
cf:3f:e8:04:e5:c7:eb:9c:8a:b5:64:9f:ab:dc:a9:
81:bc:c6:d3:43:3e:5a:4a:3a:eb:e3:1f:f1:45:81:
a8:71:d5:03:f9:2e:fd:63:59:6d:43:11:a3:06:fd:
34:c3:df:80:be:d5:88:6a:a5:a7:df:6e:5e:6e:b4:
69:ac:de:6b:b1:48:b3:31:67:73:f8:67:18:24:dc:
e2:d8:b0:f1:25:29:76:ca:c2:fd:7d:fb:05:d2:cc:
af:c2:73:0e:f9:9e:fd:b9:2e:49:10:4e:96:d1:5b:
1e:19:af:b5:42:8a:68:84:36:42:2c:90:98:8f:1e:
59:00:fc:b2:ac:0d:08:fa:6a:06:8e:ee:03:26:21:
b9:88:c9:12:72:a3:96:d9:af:13:d1:f2:7a:9f:1b:
25:e4:67:c3:73:a8:a7:40:39:4b:7f:9f:59:8a:b8:
de:40:f2:51:39:d4:ce:2f:fb:2d:c9:8f:ec:5e:b0:
2a:61:cd:01:11:bd:d5:74:bd:81:ba:a2:e0:f4:32:
40:01:44:15:dc:b6:d7:87:1e:c8:29:db:de:d9:16:
bb:0b:d5:d4:dd:5b:8e:79:ca:61:1a:56:8a:7a:09:
ce:43:44:c3:43:21:91:f9:cc:ec:c6:26:20:67:5b:
e3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:96:B6:EB:F3:AF:2D:5A:14:8C:4C:71:FB:35:B0:C0:81:0F:CE:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/bd9fa510-4cb1-36ac-b6ef-d4748c094e1a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/5e22c59e-2904-4ea6-b044-0a9fac3946cc.crl
X509v3 Authority Key Identifier:
keyid:54:0A:B5:F4:0E:EB:3F:FD:EA:F3:22:6E:E6:44:F6:EF:EB:CC:90:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc.cer
sbgp-ipAddrBlock: critical
IPv4:
23.129.68.0/24
IPv6:
2602:f7a7::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:2c:66:c3:df:c6:d2:6a:3e:c6:2f:3e:97:36:76:eb:7f:c2:
e9:3d:77:65:16:7a:39:4c:27:fa:0c:80:be:f9:92:ed:b2:fd:
e0:c5:f3:4f:40:b8:16:78:93:c7:9c:88:44:bb:b8:89:c4:23:
af:9e:e2:18:69:01:e8:81:ed:22:84:0f:d8:87:3a:3b:f1:c0:
c4:c6:cf:3b:39:e2:c4:3a:ce:f2:d3:b2:26:61:83:7a:43:18:
00:e5:5f:c2:85:cc:1f:e1:bf:d2:99:fc:7f:fc:5a:5b:28:e3:
a3:87:54:3f:c0:d7:1d:c3:6d:ac:e2:25:f6:86:48:8d:52:e9:
d6:90:a9:c8:08:9d:3d:56:8a:2a:ba:e4:c7:02:49:bb:7f:9b:
bb:7e:4a:ee:fa:72:b8:f0:77:9a:58:68:12:a2:c6:38:ec:f1:
e6:cb:62:91:f0:69:bc:aa:34:a9:f8:b6:a2:55:e7:5a:50:16:
80:b2:12:b3:0a:29:19:11:6e:e9:d2:fa:6e:31:6b:71:8c:8e:
8d:21:54:e4:85:56:92:78:5c:c4:5c:4c:16:57:75:2d:60:0c:
1b:34:be:2c:b2:ff:19:1b:73:48:b4:cb:4a:6a:89:28:9f:71:
c5:fb:fc:f9:ee:f5:98:a8:6c:bc:58:31:f8:8c:b5:7a:42:51:
a8:4d:b6:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 04:07:50 2025 by rpki-client