Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc7254b9-092b-4c9f-9b49-3f8a520532f3/189fb312-2540-34f6-998b-2703b1dd5026.roa
File: 189fb312-2540-34f6-998b-2703b1dd5026.roa (raw, json)
Hash identifier: pEskIu2iL+g0Id55Kn+5yTxTfkuLEvrZcUgENzQXAzA=
Subject key identifier: 5E:8D:2E:4D:CD:7D:9A:4E:55:56:74:75:E9:67:42:AB:01:A9:1C:2E
Certificate issuer: /CN=fc7254b9-092b-4c9f-9b49-3f8a520532f3
Certificate serial: 010D0C9F432858493C092DEDB87DCB0BF15A4AD6
Authority key identifier: 27:C6:0E:94:27:FF:97:0F:C0:E7:AD:24:01:05:B0:13:4A:A2:A6:C4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc7254b9-092b-4c9f-9b49-3f8a520532f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc7254b9-092b-4c9f-9b49-3f8a520532f3/189fb312-2540-34f6-998b-2703b1dd5026.roa
Signing time: Wed 19 Mar 2025 01:00:40 +0000
ROA not before: Wed 19 Mar 2025 01:00:40 +0000
ROA not after: Tue 17 Jun 2025 01:00:40 +0000
asID: 46998
IP address blocks: 23.186.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc7254b9-092b-4c9f-9b49-3f8a520532f3/fc7254b9-092b-4c9f-9b49-3f8a520532f3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc7254b9-092b-4c9f-9b49-3f8a520532f3/fc7254b9-092b-4c9f-9b49-3f8a520532f3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc7254b9-092b-4c9f-9b49-3f8a520532f3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3c:09:2d:ed:b8:7d:cb:0b:f1:5a:4a:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc7254b9-092b-4c9f-9b49-3f8a520532f3
Validity
Not Before: Mar 19 01:00:40 2025 GMT
Not After : Jun 17 01:00:40 2025 GMT
Subject: CN=8b483f40-ae6f-46f9-9403-decf69e863c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:77:74:16:29:60:17:d4:d8:9b:04:17:ca:73:
d4:8d:aa:19:dd:a0:97:7b:22:1a:35:48:f0:08:74:
44:1f:fb:75:a5:02:64:e3:35:1c:b8:30:d8:48:f8:
58:e0:fa:77:ac:ae:c8:b4:c1:78:ec:af:98:6c:e1:
71:c5:70:5c:ba:0f:07:5b:da:5c:ff:df:95:5e:31:
a8:1b:11:40:fe:93:bf:93:fb:50:75:44:47:2b:70:
51:9e:58:8b:33:d9:dd:12:e0:48:9d:11:a8:eb:cb:
00:ba:ea:fc:89:b8:3e:b1:3a:e9:32:3f:21:61:ca:
14:05:35:3d:44:60:fd:ac:f2:f6:68:ff:2a:37:54:
ff:ad:2d:e4:25:c7:0f:27:bf:fa:b3:96:3c:32:35:
0c:e1:12:77:94:f3:81:e2:1b:b4:45:a6:cf:a0:6d:
30:45:80:f5:a2:3c:2a:8d:9c:92:78:64:67:83:38:
20:1b:1d:d8:5e:8b:aa:e6:3c:b9:f4:d1:27:21:40:
96:a1:c9:cb:07:f1:1e:d1:b7:eb:61:c1:10:dd:ad:
55:e7:70:ed:2e:52:91:0a:7a:7c:58:ae:5f:f7:24:
b6:70:02:00:50:2b:a8:aa:e2:8e:85:9f:4c:4b:27:
72:31:e9:e6:6d:3d:d2:4a:92:ff:07:32:f0:6b:ff:
db:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:8D:2E:4D:CD:7D:9A:4E:55:56:74:75:E9:67:42:AB:01:A9:1C:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc7254b9-092b-4c9f-9b49-3f8a520532f3/189fb312-2540-34f6-998b-2703b1dd5026.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc7254b9-092b-4c9f-9b49-3f8a520532f3/fc7254b9-092b-4c9f-9b49-3f8a520532f3.crl
X509v3 Authority Key Identifier:
keyid:27:C6:0E:94:27:FF:97:0F:C0:E7:AD:24:01:05:B0:13:4A:A2:A6:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc7254b9-092b-4c9f-9b49-3f8a520532f3.cer
sbgp-ipAddrBlock: critical
IPv4:
23.186.72.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:ff:69:d2:c6:84:68:a2:fd:7e:c2:10:55:79:ca:25:f5:dd:
c3:ce:e0:e2:e7:42:a2:3e:94:b2:07:be:32:88:96:86:b8:8d:
16:b3:30:44:16:44:51:f9:67:d7:cf:52:86:8c:b3:66:e2:28:
8b:b4:3d:53:1d:80:ac:3d:2d:e5:76:f6:c5:7f:6c:1f:d1:0b:
9a:63:3c:e1:19:d7:50:0b:01:18:73:99:e2:b0:9a:a8:50:82:
9c:9f:44:38:13:de:10:66:97:0d:a4:8d:c7:d8:06:c8:11:a9:
36:84:e4:94:43:bc:ed:97:87:8b:72:17:51:7c:dd:6e:06:68:
6a:ab:81:4a:ea:93:f1:68:c6:4a:ef:ad:8a:19:35:a2:ed:92:
16:6f:76:50:b0:94:25:b4:50:82:99:c7:14:4d:72:81:f7:45:
35:32:d5:c0:d7:4a:8f:2c:c8:ac:3d:e1:e5:34:c0:f5:96:89:
ee:9f:ab:6b:5e:b3:62:4d:b6:f8:ae:a8:36:ac:66:5a:1f:6d:
54:2e:17:1d:e9:a1:9f:c0:e5:bd:da:75:6c:ad:d9:75:71:29:
54:b3:0d:81:50:8b:e7:f4:4b:60:94:a7:87:a8:e3:9c:f3:16:
73:63:13:19:a2:95:84:e3:dd:9d:d9:dc:04:06:2d:cf:ac:b4:
66:38:33:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:49:48 2025 by rpki-client