Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/be103ab9-f254-308e-9595-59376841b2ef.roa
File: be103ab9-f254-308e-9595-59376841b2ef.roa (raw, json)
Hash identifier: e+n++BcuDeN0xiXGxzAmfGshy528LTFwpsMMaIunhvU=
Subject key identifier: 65:3A:79:51:6D:8B:6D:A4:82:E3:72:03:5D:1B:76:CD:98:D9:DE:AC
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F4328584964844C36F17BB31A9D8C57C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/be103ab9-f254-308e-9595-59376841b2ef.roa
Signing time: Wed 02 Apr 2025 13:01:01 +0000
ROA not before: Wed 02 Apr 2025 13:01:01 +0000
ROA not after: Tue 01 Jul 2025 13:01:01 +0000
asID: 400536
IP address blocks: 172.252.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Apr 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:64:84:4c:36:f1:7b:b3:1a:9d:8c:57:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Apr 2 13:01:01 2025 GMT
Not After : Jul 1 13:01:01 2025 GMT
Subject: CN=ca431690-9e70-47f4-b422-ff7a8f46453f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:21:c3:d6:52:32:a4:f4:f1:df:de:cd:55:40:
94:f5:5f:1f:0b:8b:b3:16:02:46:94:53:1f:9b:21:
62:4f:0e:9c:54:87:dd:9a:4c:15:fd:7d:aa:ca:bb:
0b:83:2c:05:91:0e:b6:49:a0:3b:40:d4:a2:8a:0d:
01:93:0d:d2:cf:2c:31:67:9a:c8:4f:ff:b7:63:87:
e2:0b:c3:6d:56:85:5c:af:26:8b:93:e4:a1:03:e0:
ff:c0:d9:f8:f6:fc:3d:0f:62:1b:7a:bf:59:67:21:
ab:80:56:91:7e:27:7f:84:22:fb:64:d1:46:93:d2:
2d:d2:74:a3:30:a6:e5:de:08:05:52:7f:e6:23:f4:
46:ed:ff:98:1c:36:e7:90:39:a1:11:20:94:8c:d8:
21:fb:c0:0f:e8:2f:a9:27:7d:19:8f:dc:82:77:fe:
7b:15:d1:92:fa:40:bc:49:eb:3b:fc:58:64:f2:69:
2e:5d:8a:ff:f8:c0:8a:41:b5:82:79:90:0c:ce:4e:
ca:ad:f1:59:e2:6c:69:45:17:61:b3:7b:86:8c:47:
62:b3:52:06:49:44:b6:d7:93:ad:e9:2a:64:ce:aa:
11:51:8d:a7:81:98:1d:13:65:91:ae:7d:95:e5:26:
da:63:7e:9c:d3:ea:40:6c:f5:18:17:50:04:f8:20:
27:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:3A:79:51:6D:8B:6D:A4:82:E3:72:03:5D:1B:76:CD:98:D9:DE:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/be103ab9-f254-308e-9595-59376841b2ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
172.252.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:40:d3:d8:4c:64:79:66:7a:fe:0e:9e:b3:b8:ed:0b:fb:9c:
24:16:73:83:c2:2e:7d:cc:3f:33:b9:5e:51:6a:70:b3:c5:84:
72:12:99:8c:80:05:a0:cf:be:53:87:c6:c8:9b:fb:09:2a:36:
d9:09:6f:30:9c:a8:3b:1b:db:47:56:3f:9e:8f:e7:50:eb:2f:
2a:cf:9d:35:1b:00:6a:d6:0a:2c:ad:ed:b8:37:ce:4b:7f:54:
10:b1:d0:0b:17:67:78:03:b3:9d:ba:1e:39:33:4f:15:93:35:
25:19:5e:69:e1:4c:7f:6d:f0:8f:d0:99:d2:6e:3c:75:8b:91:
6e:ce:e5:c1:04:f7:13:26:37:c6:2a:48:45:ff:95:9f:ca:68:
de:47:13:14:64:45:53:59:36:aa:1b:af:d3:b3:ee:7c:b2:53:
07:d4:04:0c:75:40:7c:bf:b0:cd:70:ae:5d:e8:13:21:9c:91:
b7:54:b3:bb:d4:12:07:a4:36:60:67:6d:a0:c3:6a:2f:c7:9e:
2a:05:4f:e5:15:dc:06:db:49:18:25:07:b3:93:ec:83:52:dc:
d5:e3:a6:ba:5e:90:5b:f1:ef:10:19:20:1d:00:43:ab:0c:19:
c5:81:4e:21:92:f9:75:de:66:2d:3a:2a:8c:33:44:24:6e:31:
9b:09:d1:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 03:55:14 2025 by rpki-client