Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d2cdbe64-1d96-3386-8448-287e8591c613.roa
File: d2cdbe64-1d96-3386-8448-287e8591c613.roa (raw, json)
Hash identifier: 3JxaHIoNYo1agoUZu0jaYCVib5iFB6IKbr6yj5evQ4s=
Subject key identifier: 10:63:D8:64:32:D1:71:9E:CC:78:C7:FA:AC:FD:07:3E:E3:92:87:32
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F432858496E4980DCF3DC6AD37C3E8900
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d2cdbe64-1d96-3386-8448-287e8591c613.roa
Signing time: Sun 06 Apr 2025 01:00:47 +0000
ROA not before: Sun 06 Apr 2025 01:00:47 +0000
ROA not after: Sat 05 Jul 2025 01:00:47 +0000
asID: 214238
IP address blocks: 23.230.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6e:49:80:dc:f3:dc:6a:d3:7c:3e:89:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Apr 6 01:00:47 2025 GMT
Not After : Jul 5 01:00:47 2025 GMT
Subject: CN=97a404ec-8e52-45d9-862c-4d329d928157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c3:d7:77:e6:5f:ba:2c:e3:c2:97:b5:3b:d6:
1e:86:06:88:d3:3d:89:bc:0e:a4:48:57:fc:d5:cb:
38:e4:e3:79:f6:e1:26:f9:b2:f9:3f:b3:0c:41:ee:
47:e5:d1:01:cd:14:a3:b7:5b:4a:e2:a0:2c:6b:cb:
53:05:46:f0:b2:12:91:b9:5f:52:95:98:ec:e6:c6:
24:f1:7e:a4:d5:59:50:08:d6:1f:56:8a:53:e0:9e:
b4:30:af:67:49:ca:cc:c5:d3:13:57:09:3d:63:bc:
c5:b3:65:33:46:e1:43:f7:c5:d8:ce:dd:1c:a4:c1:
c0:48:7f:32:8a:e3:bf:ef:fe:64:11:e2:ca:30:da:
71:00:9d:6c:aa:87:80:66:a4:66:2b:4a:0c:8b:d3:
58:b4:91:de:e5:1b:53:ab:01:25:f4:49:4d:be:fd:
b6:fa:3f:13:9d:28:a7:9b:d5:20:f7:a2:2d:af:bc:
48:d2:af:1d:8b:08:e0:40:33:06:f1:d1:00:22:02:
28:cb:1f:61:6f:26:93:1a:38:38:8b:94:8c:8a:37:
f8:fe:89:10:c0:75:e0:5d:80:06:2b:1c:e6:89:cd:
bf:77:fc:e5:97:20:05:00:12:c2:bb:a5:e8:10:05:
b2:78:0f:86:32:92:63:10:80:81:dc:d4:2a:13:c1:
9a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:63:D8:64:32:D1:71:9E:CC:78:C7:FA:AC:FD:07:3E:E3:92:87:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d2cdbe64-1d96-3386-8448-287e8591c613.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.230.33.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:e5:3a:2e:db:23:66:36:df:e3:82:6a:c7:57:6d:ba:fc:f9:
85:ac:ad:26:cf:b5:8f:74:ad:b2:91:ee:4a:ef:c1:05:40:b7:
95:b2:61:3c:b7:d4:2b:37:d8:3a:bb:e1:5a:fa:cd:9b:37:d8:
b0:70:f9:54:f3:ce:61:84:6d:ab:17:0a:db:87:46:a7:87:62:
f9:2f:07:0e:ac:2b:4b:ad:e3:81:e4:98:ec:de:27:6e:64:34:
c0:68:d2:5a:eb:76:ef:c4:a7:df:9e:38:2b:7e:2c:1a:e5:50:
f7:41:ee:0a:05:ea:6e:ac:4e:66:dc:97:9d:8d:91:d1:51:15:
49:5b:a2:f1:7e:70:46:d5:24:06:40:14:81:6f:01:10:c0:f2:
42:5f:e9:e2:af:2c:3e:7d:d7:ea:c1:fa:1c:2b:77:7d:13:79:
74:da:6f:7f:86:d2:ed:aa:2a:67:b0:2d:1c:0a:bd:ce:9b:31:
a8:ab:5e:f6:1f:d9:9d:e4:ed:b4:1a:77:54:ba:45:18:8a:9a:
a7:19:9c:39:78:0d:8f:28:58:2d:cb:90:97:ed:7c:4c:74:d5:
47:20:ae:db:f0:2a:b2:16:da:34:58:ea:d5:4b:fd:d9:9c:e2:
fd:fc:e6:a8:7f:81:61:e9:fd:8b:22:20:7f:2a:23:d7:f2:a6:
9d:88:47:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 16:01:29 2025 by rpki-client