Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5f897571-536c-317b-9b03-08612bb0c312.roa
File: 5f897571-536c-317b-9b03-08612bb0c312.roa (raw, json)
Hash identifier: yBMSk5SvaHDSIzmpgORbdi5x457dANVYhXHJdpO1/JI=
Subject key identifier: C4:57:BC:27:FF:E2:89:3A:6F:65:D7:2B:68:7F:07:3D:06:B3:A5:23
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F432858384FF2421B6C0497FCB2AA9240
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5f897571-536c-317b-9b03-08612bb0c312.roa
Signing time: Fri 18 Dec 2020 05:00:00 +0000
ROA not before: Fri 18 Dec 2020 05:00:00 +0000
ROA not after: Fri 11 Dec 2026 05:00:00 +0000
asID: 11427
IP address blocks: 24.162.0.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Apr 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:38:4f:f2:42:1b:6c:04:97:fc:b2:aa:92:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Dec 18 05:00:00 2020 GMT
Not After : Dec 11 05:00:00 2026 GMT
Subject: CN=0d168f84-5bba-4e0f-b99f-6ae33c8589f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:85:a8:3c:d1:c2:e0:b4:45:d0:ec:0a:b3:16:
df:21:64:ff:d8:eb:0c:9f:d3:be:53:53:e1:79:b1:
08:75:41:22:b8:7e:f5:1b:77:de:90:a7:53:6d:9b:
de:5a:8c:87:4f:cb:ea:79:05:b0:b0:16:a7:ba:a0:
a8:a8:d8:87:b3:f1:c3:40:69:81:1d:34:03:f0:46:
96:27:91:f2:cb:ef:65:24:cc:b9:f4:15:8b:ef:2a:
f9:e6:77:e6:ba:f2:d6:7c:5b:de:f1:9c:a2:f3:96:
82:0f:d1:5f:2d:da:f0:49:95:38:5a:db:7a:a8:4b:
cb:16:02:1e:2e:76:b1:fe:e0:24:b8:3e:c2:4b:c8:
e0:07:2a:26:d7:fc:a8:9e:d7:2c:6b:17:a0:f1:a1:
0e:ab:16:2b:0d:13:03:2b:85:83:6e:d9:a1:94:d6:
6b:95:21:0e:1d:3b:39:53:f6:0f:6e:46:09:1c:04:
f5:66:c5:fa:76:e1:75:80:0b:63:69:81:e7:ba:e7:
99:eb:b0:e9:f9:c9:75:e4:d6:d7:60:76:18:eb:6d:
f5:cf:c7:3e:d5:a9:3d:66:07:01:d0:d5:73:ee:af:
7a:a1:4d:62:4b:e4:ad:46:f1:3a:2c:a6:2a:dd:00:
5f:c6:88:fc:1a:34:64:bf:2e:e2:56:ab:16:e0:4b:
dd:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:57:BC:27:FF:E2:89:3A:6F:65:D7:2B:68:7F:07:3D:06:B3:A5:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5f897571-536c-317b-9b03-08612bb0c312.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
24.162.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:63:bf:8a:90:6f:24:0b:cf:ec:87:2b:2f:f3:f9:a3:4f:88:
aa:24:35:9a:7f:c3:b9:f5:6c:5d:15:cb:98:d3:6e:96:69:ab:
70:e6:93:f0:9a:38:54:79:39:fe:d2:5c:fd:c0:cc:c4:47:3c:
25:7b:e0:d9:c2:de:23:ec:fe:4a:48:9c:3d:44:ad:7f:64:09:
b6:09:88:d4:4f:c4:1d:95:eb:4a:de:fc:29:c4:a4:b8:4e:9b:
74:0a:c8:30:ff:0a:e1:d0:b0:f7:79:11:f2:85:b4:6e:87:ee:
a0:6d:ae:6f:12:6e:38:47:40:c4:a8:66:27:fe:5c:a6:c3:bd:
96:0a:64:32:38:cc:89:38:15:a3:0c:d6:1b:e3:24:fe:e7:9d:
10:cd:c8:3c:d4:27:2e:84:e3:99:bb:5d:0b:54:db:cc:80:b3:
a3:37:a3:c2:22:5b:70:0a:6b:54:62:46:21:04:fb:85:f8:fd:
31:04:02:c8:65:d3:39:43:e6:4e:44:10:95:ad:0f:4b:32:53:
99:fc:d7:19:24:a3:a0:d1:95:a3:ed:94:c3:de:58:1c:27:3e:
a7:cf:1e:67:99:75:6d:ec:c0:71:d5:62:0f:6e:f9:12:33:e4:
78:c3:46:cf:7f:dd:b3:b4:94:c7:bb:f5:fa:e8:80:3b:b5:53:
c6:83:d7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:37:47 2025 by rpki-client