Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/b7751a83-4d77-3534-a692-22c9f15e2c5e.roa
File: b7751a83-4d77-3534-a692-22c9f15e2c5e.roa (raw, json)
Hash identifier: oigJ3xd2lvai4nuSalSEjlCpUJi68TFaGqn4AYpo520=
Subject key identifier: 08:D0:CF:94:70:00:47:68:15:B3:24:35:2B:18:A6:1B:4A:83:78:AE
Certificate issuer: /CN=1cf435c0-9d28-477a-90a9-1b4fd75cda76
Certificate serial: 010D0C9F432858495EEEE6AACDAE1766D71419E0
Authority key identifier: D5:3F:14:5F:41:53:5A:F0:41:C2:D2:BF:7D:3B:50:E6:35:32:FF:D4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/b7751a83-4d77-3534-a692-22c9f15e2c5e.roa
Signing time: Mon 31 Mar 2025 13:00:59 +0000
ROA not before: Mon 31 Mar 2025 13:00:59 +0000
ROA not after: Sun 29 Jun 2025 13:00:59 +0000
asID: 14618
IP address blocks: 199.187.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5e:ee:e6:aa:cd:ae:17:66:d7:14:19:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cf435c0-9d28-477a-90a9-1b4fd75cda76
Validity
Not Before: Mar 31 13:00:59 2025 GMT
Not After : Jun 29 13:00:59 2025 GMT
Subject: CN=44394e59-d7fe-4e31-b38f-9e46baa5b3a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:05:3a:5f:de:5e:1d:fd:6c:d3:ad:c7:eb:54:
32:97:c4:09:a4:f9:52:77:e8:07:60:ae:3b:64:8f:
27:38:70:a4:8c:40:66:2d:c0:a5:d1:b0:bd:b3:f2:
ac:8b:9b:18:59:14:18:21:78:b9:de:9c:00:e5:87:
43:16:f7:19:44:37:34:97:d6:c1:59:13:ec:c2:9a:
3f:d7:57:44:26:06:02:39:7b:23:2c:1f:d8:8b:56:
b2:9e:48:95:4a:88:56:0e:21:da:1e:be:91:74:35:
6b:84:c3:65:5d:b6:3c:fd:92:c5:78:01:75:cd:4d:
5a:99:71:86:4e:4a:43:11:35:da:b4:bb:51:88:97:
1f:04:54:2a:7f:41:f9:f4:3a:0c:5b:f2:f8:87:88:
b0:54:33:a2:e1:d4:92:ad:b0:71:7e:4d:31:49:3b:
7c:ed:a3:07:97:b0:0f:21:ac:f4:61:34:58:dd:6a:
ec:1f:82:e0:5a:12:a0:92:1e:9d:78:29:4a:25:6c:
50:91:b1:cb:78:aa:b2:20:55:01:71:97:bd:7f:37:
60:0f:34:fa:ae:d3:6d:29:03:fc:b7:88:b7:bf:a6:
52:3a:57:cc:e2:c7:98:5d:a5:7e:80:b4:7a:7f:a3:
29:d9:0e:1e:6f:1a:88:5f:15:5e:d6:7b:7b:05:d9:
fa:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D0:CF:94:70:00:47:68:15:B3:24:35:2B:18:A6:1B:4A:83:78:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/b7751a83-4d77-3534-a692-22c9f15e2c5e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.crl
X509v3 Authority Key Identifier:
keyid:D5:3F:14:5F:41:53:5A:F0:41:C2:D2:BF:7D:3B:50:E6:35:32:FF:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer
sbgp-ipAddrBlock: critical
IPv4:
199.187.170.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:15:9f:36:80:33:fe:a0:d0:10:b3:f7:9a:90:69:e6:a4:7f:
10:70:f3:17:4d:ad:32:53:ea:60:57:21:bb:60:b3:d5:f1:44:
c7:56:bf:ef:0c:8a:ed:ea:79:90:18:6b:71:89:b5:0b:a4:cb:
4c:c4:18:73:92:39:a1:10:18:e8:03:a2:b7:52:71:83:a9:82:
bd:de:1c:10:3f:cd:ba:c9:c2:b5:47:fc:4b:56:68:9d:dd:78:
c9:06:d6:06:18:b3:66:ac:2f:b2:7e:b3:c5:c5:43:ec:d5:f5:
6f:19:11:11:7c:35:65:df:e0:60:33:c4:db:a5:c2:69:2b:64:
23:6a:56:86:91:02:ed:83:59:40:0a:7e:b0:2e:28:f4:31:28:
71:d7:f6:6c:9a:4c:b6:7f:3d:19:0a:8b:c5:32:27:da:4d:df:
dc:ec:0a:59:d3:5d:0e:16:ca:75:0b:0a:f6:87:e3:ad:9a:4d:
cd:79:bb:7a:a7:d7:63:6e:07:72:13:00:9d:a0:c9:c9:3b:e5:
9d:90:65:97:3f:f0:10:ea:03:60:12:ec:15:1a:99:19:20:66:
2c:16:13:86:e5:d0:1e:91:f7:53:06:ae:0d:9a:c0:32:3e:dc:
4a:54:49:04:b4:20:35:18:80:ed:2b:25:e9:38:30:de:ef:23:
2c:5e:a3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 11:33:14 2025 by rpki-client