Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2d603779-324d-302b-a85c-ab0dcf5f1692.roa
File: 2d603779-324d-302b-a85c-ab0dcf5f1692.roa (raw, json)
Hash identifier: NXHmyfuVy+wu66KCnlmlQgopVBtizpLU2cqFVgW8lr0=
Subject key identifier: 2C:8F:59:D7:35:E1:61:60:87:3F:EA:76:B8:BB:8C:50:F1:BB:1D:2B
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D153B32D62DB562EB4FD5D
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2d603779-324d-302b-a85c-ab0dcf5f1692.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 20001
IP address blocks: 173.197.88.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Apr 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:53:b3:2d:62:db:56:2e:b4:fd:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=841ec18b-3082-4da0-be55-15dc3b114205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:41:cd:20:5f:97:bc:85:d7:67:b2:1c:df:33:
3a:04:77:a3:83:c5:65:31:12:79:9b:d0:ac:e6:ab:
4f:90:00:eb:73:80:d9:e1:31:03:f5:68:ea:aa:89:
27:49:a0:67:7d:a3:0a:d6:52:df:e2:cc:9b:06:60:
22:f3:57:2b:2a:83:1c:a8:79:20:06:19:65:6d:66:
11:2e:ed:c1:f5:01:5c:7d:af:0f:41:f7:49:86:e1:
04:1d:08:93:fa:7f:94:6e:dc:ea:f7:a7:7b:03:50:
0a:8c:8c:45:81:86:2a:bb:c4:11:e5:0f:f3:35:4e:
13:07:4e:66:51:e5:ae:bb:a3:b9:75:b3:1d:f8:6f:
e7:2e:50:d5:6b:7e:28:84:71:59:c3:10:0f:a8:63:
ec:08:19:ab:a1:7e:8c:fe:d2:d9:09:9f:55:2c:2a:
40:a0:cf:cc:69:bd:17:10:06:b9:5b:29:01:2d:7e:
b5:51:83:e1:bb:fc:9a:a9:20:ab:49:d3:f6:91:be:
c8:e6:1f:53:2b:59:a2:8b:56:ad:a8:71:1d:f9:8f:
81:1e:0e:61:3d:1f:d8:bd:5d:99:46:18:89:70:5b:
fa:01:a5:7c:c2:8c:5c:35:23:2c:80:08:7d:d3:73:
c7:27:22:ae:8b:58:c4:f9:f4:ec:a5:e1:56:0f:23:
b0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:8F:59:D7:35:E1:61:60:87:3F:EA:76:B8:BB:8C:50:F1:BB:1D:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2d603779-324d-302b-a85c-ab0dcf5f1692.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
173.197.88.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:f0:16:64:08:c9:13:c0:81:e3:2e:b5:50:44:18:89:56:9d:
21:18:21:5e:07:31:62:0d:ff:a9:18:e0:24:90:1f:d7:c5:0e:
b7:ef:1a:b3:32:b9:da:f6:3d:a4:46:87:ef:bd:17:b8:f3:b9:
c4:51:7f:9f:5d:6c:19:11:86:17:54:ed:b5:72:01:90:46:86:
30:06:40:1f:90:06:f0:57:4b:ae:04:70:9d:eb:33:0f:35:62:
9d:30:d9:5a:b5:6b:be:f7:c0:f0:b0:60:b1:ac:e6:da:7b:53:
88:36:df:f4:d3:94:d5:1a:8c:10:93:0f:5e:ae:40:ea:a7:c3:
a9:86:77:d4:2b:0c:3c:7c:c4:c9:73:d1:7f:06:07:c5:ff:1f:
7c:30:a0:90:f3:c0:7e:67:23:88:31:c9:71:9c:2d:5c:30:dd:
e4:f6:0c:f7:24:b6:fa:35:a3:91:09:ca:b7:7f:ff:a4:5d:f5:
1a:51:61:e2:04:69:9a:e7:31:6f:ae:4d:ca:54:40:91:58:37:
a5:09:1c:c3:0c:65:0c:08:4d:d5:2e:73:7f:4e:ee:bb:02:6a:
d3:87:97:28:d6:91:3b:ea:1e:71:11:5a:85:06:64:4a:97:a7:
bb:12:a0:44:4d:a4:7b:e7:53:50:fa:b7:3f:91:45:cf:4d:6f:
a3:f4:bb:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 19:36:13 2025 by rpki-client