Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/215c6206-8c8c-313b-a11a-9a3c9453d0a1.roa
File: 215c6206-8c8c-313b-a11a-9a3c9453d0a1.roa (raw, json)
Hash identifier: Ii3Wsjd0BovpNEX4fasQGDPOnQMN93qfYkYzt5a4VaQ=
Subject key identifier: C5:9B:D7:05:24:C8:CE:F0:B5:5B:B5:8D:39:65:58:01:25:C2:6A:47
Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial: 010D0C9F43285848BBBB7449AB714CBCD972ED80
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/215c6206-8c8c-313b-a11a-9a3c9453d0a1.roa
Signing time: Sat 01 Feb 2025 02:00:39 +0000
ROA not before: Sat 01 Feb 2025 02:00:39 +0000
ROA not after: Fri 02 May 2025 01:00:39 +0000
asID: 394437
IP address blocks: 74.124.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bb:bb:74:49:ab:71:4c:bc:d9:72:ed:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Validity
Not Before: Feb 1 02:00:39 2025 GMT
Not After : May 2 01:00:39 2025 GMT
Subject: CN=bb42a393-1241-4ea0-bccc-9a3f15b007bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9e:d0:80:70:16:d8:0e:c8:e0:cd:58:28:50:
16:4b:53:90:f9:5f:6c:c2:9e:c1:c4:39:b8:89:c7:
c9:11:07:4f:f1:c7:27:74:b8:43:35:8d:0c:c9:bf:
15:10:cc:e7:16:23:a2:a1:f9:cb:14:0e:ec:97:e9:
78:5e:aa:e7:26:67:d2:52:28:27:90:94:78:27:46:
cd:08:46:b5:98:35:3b:c4:ed:19:e1:2e:c0:86:eb:
e9:62:6c:36:41:a9:5a:5d:7f:f1:87:e9:a5:45:16:
01:c9:57:b1:39:53:65:6c:63:50:b6:d5:05:03:9c:
74:65:fb:0c:8f:85:b0:4a:0b:90:77:92:0d:b0:f3:
83:71:97:e8:e2:49:4d:a7:5b:33:6d:00:6f:9a:d4:
72:ed:34:81:44:98:cd:c1:c3:82:4f:df:81:cb:52:
0a:8a:83:79:0b:0d:5e:ae:fa:93:a7:ff:c5:ec:bc:
4b:b4:ca:14:eb:73:cc:b8:4e:4f:bc:7f:80:00:eb:
8c:af:19:f6:75:b8:be:2d:52:ed:c5:56:16:71:d0:
f6:55:96:39:54:ed:7b:e8:bc:dd:75:b4:c7:06:44:
7b:f5:f0:46:e4:a7:d2:41:3b:82:02:9c:75:67:7b:
3c:a3:26:8a:61:c0:0a:7e:ec:43:4f:6b:c0:e3:46:
33:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:9B:D7:05:24:C8:CE:F0:B5:5B:B5:8D:39:65:58:01:25:C2:6A:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/215c6206-8c8c-313b-a11a-9a3c9453d0a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
X509v3 Authority Key Identifier:
keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
sbgp-ipAddrBlock: critical
IPv4:
74.124.58.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:b9:f8:93:9d:b6:7d:fa:a6:24:2b:9d:82:f6:e4:41:a6:62:
14:5b:04:8a:9e:51:f9:10:e4:34:cc:ec:02:27:aa:7e:be:f6:
53:35:bc:8d:fb:ec:b4:d4:6f:08:59:a5:e0:4a:c8:61:6a:57:
cf:aa:af:51:2e:1f:0f:87:27:3f:8c:e0:cf:e9:a5:c6:03:48:
51:45:81:2d:1a:8c:c8:00:8e:55:c8:2b:72:7f:d1:1a:2f:f6:
78:33:1e:79:04:ea:85:5a:67:bb:47:2a:48:95:4d:d4:e2:4e:
b2:8c:b0:43:41:94:8f:cd:f4:2b:91:87:cc:87:37:04:92:e8:
83:1a:0f:ce:43:5d:2b:b6:33:0f:18:15:95:83:2e:72:67:f9:
26:15:8a:93:13:52:e7:7c:88:c8:37:38:21:a5:39:fc:95:4e:
cb:f8:16:68:53:cc:46:15:eb:62:db:1f:b4:a4:35:77:01:ef:
06:69:61:66:0f:a4:a3:12:be:00:b3:2e:92:eb:ec:85:44:5f:
e5:83:ed:ce:2e:0f:e8:48:95:1d:9c:43:02:7d:35:89:5a:4a:
59:1c:2c:09:9f:a1:93:45:48:85:ed:a5:2b:ae:fc:6f:fb:7e:
91:d5:36:04:2f:ab:62:02:a3:f6:31:a3:70:58:83:c8:5f:12:
d0:5a:2d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:26:07 2025 by rpki-client