Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1b1e5a89-4f63-36a0-98b7-9db46a3dc603.roa
File: 1b1e5a89-4f63-36a0-98b7-9db46a3dc603.roa (raw, json)
Hash identifier: xEedPqItOTkq7xF9qc1blUcGqveKLVtKFilHr+gIUBA=
Subject key identifier: A0:D3:9E:01:FD:3F:9C:4F:B3:4F:18:7E:0B:66:A1:9B:60:C2:D8:80
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285839321885FACF455501841A4300
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1b1e5a89-4f63-36a0-98b7-9db46a3dc603.roa
Signing time: Tue 09 Mar 2021 05:00:00 +0000
ROA not before: Tue 09 Mar 2021 05:00:00 +0000
ROA not after: Tue 02 Mar 2027 05:00:00 +0000
asID: 33363
IP address blocks: 67.79.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Apr 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:39:32:18:85:fa:cf:45:55:01:84:1a:43:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Mar 9 05:00:00 2021 GMT
Not After : Mar 2 05:00:00 2027 GMT
Subject: CN=c9d737dc-4a1a-4af2-96bd-072a56bd4a9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d6:e9:88:d3:08:8d:83:bb:97:69:b4:42:ce:
a1:8b:20:eb:8e:0f:a4:29:80:24:aa:47:c1:4f:73:
fa:65:6f:42:c9:d5:53:9f:e9:19:c6:0d:9f:9f:0f:
53:17:51:66:06:76:ef:68:b5:64:d2:f7:80:7b:12:
77:95:96:d3:c3:f5:82:04:10:08:dd:08:fa:b0:f0:
f3:16:a4:e1:a0:10:f8:7b:9c:84:56:1d:5e:8f:4e:
35:05:2f:63:51:5c:a9:a6:08:94:22:54:84:27:8d:
3a:7e:5b:45:ff:b3:b7:b9:d7:78:8c:86:0c:79:98:
52:f4:bf:98:9d:34:d2:95:6a:5f:88:36:f7:f6:6f:
07:25:32:94:94:0b:8f:5f:5d:39:12:01:b5:a2:76:
3a:38:01:28:79:61:17:11:93:5b:80:d4:6c:35:b5:
1c:b2:05:50:19:17:5d:b6:02:58:ea:85:e8:8a:3d:
3f:0a:8c:1f:b2:10:4c:04:b3:52:e4:dc:4a:f5:d1:
85:17:f8:73:6c:14:6d:44:5c:1c:b0:56:78:c0:63:
ea:50:51:7b:b4:f8:c4:1d:09:30:70:14:64:31:d6:
d2:b2:13:8f:74:bc:95:b8:bd:53:72:40:41:aa:66:
d2:e8:b2:45:4d:7f:df:61:92:25:43:03:69:f5:fe:
d5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:D3:9E:01:FD:3F:9C:4F:B3:4F:18:7E:0B:66:A1:9B:60:C2:D8:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1b1e5a89-4f63-36a0-98b7-9db46a3dc603.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
67.79.171.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:1d:2c:88:85:cf:19:90:78:e0:66:e7:a2:2e:0e:4a:14:c2:
fa:ab:88:f2:d9:ec:e4:1c:f2:1d:a0:bd:e8:b2:66:a7:2f:a6:
bc:e2:65:44:80:fa:fb:f6:6f:5b:a6:9e:a7:c0:2e:28:6b:d2:
06:32:82:bb:75:62:a2:1b:ab:ff:f6:ed:57:5d:ea:18:d3:7d:
15:8e:b9:d7:cf:a9:28:41:3c:4f:9d:ef:56:70:47:3c:7e:e3:
c1:13:42:4f:5d:38:b9:0b:16:9d:d1:07:ed:b3:c4:f5:6f:7d:
f9:83:34:33:44:0e:36:3a:39:20:c5:ef:8a:e4:ab:e5:30:83:
16:2d:7a:54:99:07:2b:24:b0:c8:84:c6:e9:13:da:17:41:91:
24:a2:26:2f:d3:bd:51:13:2a:d9:4e:64:54:62:87:56:5a:32:
68:bd:c3:9a:d8:37:24:20:f5:53:27:e2:d1:d5:c1:f2:88:8f:
4b:4d:c5:d1:70:51:65:b6:fe:f0:b5:2f:70:c3:fa:c4:01:a9:
2f:8d:cb:f9:65:9e:7a:80:a6:6e:53:3e:7b:c0:d4:36:29:2e:
2c:bf:c7:62:87:69:b1:76:49:36:3c:dd:63:dc:4a:e3:d5:4c:
d9:f3:7e:af:78:ce:10:7f:01:80:06:b7:63:0e:0c:ff:27:09:
2c:71:2b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 07:00:06 2025 by rpki-client