Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3157b2ca-16a5-37f1-8a90-1b219979eb6f.roa
File: 3157b2ca-16a5-37f1-8a90-1b219979eb6f.roa (raw, json)
Hash identifier: RulGaM3QSj7JMsitFpokUwSvTdK/lthbSbWqQQIVcrY=
Subject key identifier: 51:47:9F:CE:9F:47:59:3D:09:F4:0C:69:60:7F:C5:E9:92:6C:B3:3A
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285839321A4A1FB3237CF1C91FAF80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3157b2ca-16a5-37f1-8a90-1b219979eb6f.roa
Signing time: Tue 09 Mar 2021 05:00:00 +0000
ROA not before: Tue 09 Mar 2021 05:00:00 +0000
ROA not after: Tue 02 Mar 2027 05:00:00 +0000
asID: 11426
IP address blocks: 74.218.224.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Apr 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:39:32:1a:4a:1f:b3:23:7c:f1:c9:1f:af:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Mar 9 05:00:00 2021 GMT
Not After : Mar 2 05:00:00 2027 GMT
Subject: CN=686ac31f-0097-4787-9c3a-a3ec67b1719b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:63:a0:55:17:fa:ca:61:0c:58:92:11:da:4c:
a5:94:69:0d:a7:b7:47:ea:5d:61:92:73:9d:dd:24:
25:19:82:00:94:66:54:9b:a5:62:a9:c5:70:59:99:
63:19:37:79:2a:ad:aa:a7:ba:6b:a9:27:01:79:a3:
61:ac:1f:11:bc:30:62:c7:74:2c:26:fa:6e:6e:c9:
59:31:65:95:37:3b:e0:0d:2f:47:fd:49:b7:3b:af:
bd:a8:39:16:c9:00:c0:7b:e0:53:2d:6c:72:81:9b:
51:b0:21:9e:ef:51:e7:7c:8b:25:4b:af:af:36:08:
a0:e9:58:5a:c5:b1:5a:61:29:6b:1d:77:dd:84:f0:
18:a7:ec:d1:2f:39:e4:65:a1:2e:b3:b4:a5:fe:83:
7d:ef:c2:88:3d:1c:23:a5:f7:c2:b5:4f:f1:a5:d6:
49:cb:4d:88:12:c5:97:5a:11:e0:a5:13:19:28:4f:
7b:97:8a:07:c1:5c:8a:b9:28:d6:6f:30:05:55:4f:
7d:ed:cb:f1:65:6a:04:e7:d7:cb:74:62:dc:ad:5b:
a4:60:d5:33:24:a1:27:00:93:a1:7b:c3:35:7b:a5:
c1:9c:35:74:d6:a8:32:2f:2b:a8:d2:ab:58:f9:f3:
6a:81:04:aa:1a:3b:36:31:45:38:a1:86:64:f7:fe:
44:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:47:9F:CE:9F:47:59:3D:09:F4:0C:69:60:7F:C5:E9:92:6C:B3:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3157b2ca-16a5-37f1-8a90-1b219979eb6f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
74.218.224.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:80:0d:70:7a:e8:8b:b0:68:09:b3:1a:ab:27:6d:72:bb:2c:
2d:1b:56:4c:3b:b5:c3:4f:56:c8:bf:80:cf:05:5e:ad:16:02:
36:6d:f1:34:4d:ba:fc:c9:6f:05:cd:35:23:d1:db:78:f0:2e:
da:df:dd:f9:a9:63:5c:cc:66:e2:cd:1b:15:7c:8e:1b:35:4f:
80:d1:5f:25:83:15:3f:c2:db:56:3e:43:97:23:7e:0d:f7:d8:
3c:b9:73:b0:53:b3:54:de:e8:26:a0:58:b7:81:ec:68:63:8a:
c1:67:2e:43:63:0c:f3:ef:e8:e9:f7:0f:45:e4:e7:3a:d6:3b:
29:9f:93:5b:e1:bb:ae:82:d3:15:87:95:9f:a8:1a:e6:5c:e8:
aa:42:4d:f7:aa:06:85:ae:78:36:ea:8d:0d:30:84:f4:f8:18:
b0:b9:46:04:08:3a:cd:55:24:15:52:ed:66:b4:74:f7:cf:38:
02:de:ef:e6:47:28:98:e5:b3:67:ec:6e:70:e5:36:59:79:0e:
58:b4:fe:14:d6:f2:80:9b:fb:21:08:17:4b:db:f1:66:6c:92:
db:dc:3f:61:27:6f:12:75:be:24:da:f5:ac:fe:83:52:7d:d0:
f9:e4:e2:fb:7a:47:a4:f7:4a:d2:2d:52:82:19:f5:0e:e9:4d:
7e:a2:2c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 13:32:41 2025 by rpki-client