Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18/525cb8cc-a19e-362c-834b-664f1ba9b526.roa
File: 525cb8cc-a19e-362c-834b-664f1ba9b526.roa (raw, json)
Hash identifier: U3kqorADlzQkkk8He/CcoFbLamydKvb6+Rw/kW8KaIc=
Subject key identifier: E2:CA:28:C0:7B:93:E2:BF:84:38:7A:F7:66:45:68:B5:0C:00:6F:25
Certificate issuer: /CN=da942a2e-a28e-4dd7-8986-8cd9d0811b18
Certificate serial: 010D0C9F43285848BD20DFCC3E8A0E52EE646280
Authority key identifier: 8F:1F:CA:E6:D3:D2:2C:78:FE:EA:E4:59:F4:AB:6D:12:07:F8:0B:FB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18/525cb8cc-a19e-362c-834b-664f1ba9b526.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 401489
IP address blocks: 23.191.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18/da942a2e-a28e-4dd7-8986-8cd9d0811b18.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18/da942a2e-a28e-4dd7-8986-8cd9d0811b18.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:20:df:cc:3e:8a:0e:52:ee:64:62:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da942a2e-a28e-4dd7-8986-8cd9d0811b18
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=9175e1e3-8ce3-4d89-8420-49397fa2e8ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:af:7e:eb:76:48:e4:fc:47:2f:2a:8b:21:3b:
6e:10:ae:cb:c1:f1:13:1a:92:2e:29:6c:ca:fa:6c:
c6:fc:0a:57:20:5a:ef:db:40:6f:c1:12:61:af:7e:
d5:b3:51:18:f7:df:b7:dd:a7:31:12:1d:c1:c3:d0:
f8:f0:14:e2:b7:4e:16:c9:1d:48:90:b7:0d:9e:81:
d0:d0:0b:91:9f:12:f3:82:d3:80:5c:72:a9:26:78:
b0:bd:c9:a8:6d:f7:ba:fe:d5:79:90:64:09:eb:d4:
39:86:27:ea:f5:a4:c1:65:37:5e:9d:03:f6:40:17:
13:29:2e:9d:df:05:dc:0e:83:52:6f:cb:81:d2:d2:
76:c9:aa:8d:6c:df:03:07:f7:ee:73:d3:d3:8e:02:
fb:41:6d:8b:92:ee:4a:15:a8:1b:cc:d9:91:c9:eb:
1b:c9:66:8b:7d:93:1d:e3:1f:e3:db:a2:9c:a7:9f:
a0:38:01:25:3f:49:77:8f:a9:42:60:cb:53:c5:34:
6e:eb:d0:f8:6b:57:10:97:df:b8:74:40:26:4d:be:
b3:f7:14:57:ef:44:13:93:8c:fd:c5:8b:51:2e:32:
ef:bd:86:3e:87:90:ab:89:8d:f0:c0:7b:b3:2a:75:
52:ed:77:8c:fd:59:7e:f9:8f:f6:5a:5b:38:8f:67:
3b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:CA:28:C0:7B:93:E2:BF:84:38:7A:F7:66:45:68:B5:0C:00:6F:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18/525cb8cc-a19e-362c-834b-664f1ba9b526.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18/da942a2e-a28e-4dd7-8986-8cd9d0811b18.crl
X509v3 Authority Key Identifier:
keyid:8F:1F:CA:E6:D3:D2:2C:78:FE:EA:E4:59:F4:AB:6D:12:07:F8:0B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18.cer
sbgp-ipAddrBlock: critical
IPv4:
23.191.216.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:04:55:cd:f2:ca:41:85:53:2c:06:69:b6:5f:3f:0d:94:f4:
9d:54:64:88:3c:b8:a9:f1:79:66:6c:05:99:96:bd:20:2c:14:
16:7f:70:ed:2b:dd:f0:eb:1c:9b:0e:7b:5f:ba:c4:74:b6:39:
33:72:dc:b2:f7:93:25:c0:ca:91:d9:b3:e3:05:75:46:ee:72:
c5:03:1c:d0:38:1a:68:58:fc:fa:19:f5:24:90:50:e5:10:26:
03:6b:7b:ad:5c:16:7b:c9:e5:ff:34:74:93:96:d3:ab:a7:b2:
1d:f2:f5:fb:b2:7a:8e:9a:86:89:d1:f2:ce:41:fc:b4:4a:9a:
17:1a:bb:08:ed:77:c1:f5:c1:02:f1:02:3e:bc:3a:b3:9f:e1:
6c:6a:66:17:10:1b:26:6b:4b:f4:01:fa:41:53:07:77:f1:11:
7e:b8:09:48:8f:24:a7:7b:86:a1:c0:9d:9d:d6:4b:aa:68:a5:
91:ad:ac:9a:02:3b:1a:56:d8:53:8d:b3:da:2c:f6:85:53:26:
93:fc:25:56:ea:50:a8:0c:62:1b:3a:fa:c7:de:e1:e0:43:c2:
65:bb:cb:6d:e6:4b:e7:1b:54:3c:53:a2:4d:53:2e:31:fe:57:
e5:cd:cf:e5:21:9f:1e:c8:51:29:ee:a4:cd:b8:1b:30:45:79:
61:1c:09:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:35:12 2025 by rpki-client