Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/cd9fadc9-a02c-372f-9e73-ef1b2bae5d8a.roa
File: cd9fadc9-a02c-372f-9e73-ef1b2bae5d8a.roa (raw, json)
Hash identifier: tovu0m6AWeu+Sv7mqkoKI55z81llJr1EPbx1aeQijxs=
Subject key identifier: 18:7D:88:FD:2B:7E:41:09:F9:A9:26:53:F4:01:73:03:AF:6C:6D:1C
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F43285848CC7B980B5010C0CC35975EE0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/cd9fadc9-a02c-372f-9e73-ef1b2bae5d8a.roa
Signing time: Fri 07 Feb 2025 02:00:39 +0000
ROA not before: Fri 07 Feb 2025 02:00:39 +0000
ROA not after: Thu 08 May 2025 01:00:39 +0000
asID: 64267
IP address blocks: 149.20.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Apr 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cc:7b:98:0b:50:10:c0:cc:35:97:5e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Feb 7 02:00:39 2025 GMT
Not After : May 8 01:00:39 2025 GMT
Subject: CN=051538d6-d6f6-4e89-b7b0-c790d1d57d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ba:e8:cd:ae:0f:ad:90:9d:97:2b:dd:8a:f2:
d2:26:a3:f1:42:cc:49:a6:bc:30:29:0b:94:ee:2e:
9f:dc:57:81:99:90:8e:ff:9f:35:b8:52:8f:88:21:
3a:78:43:2a:bd:93:9b:e2:8a:4e:dc:93:fa:2b:1f:
26:1c:4b:8e:ca:f4:c5:92:93:31:f6:19:68:28:c6:
9d:ec:60:88:92:b4:81:71:09:6d:8a:7b:ed:3b:eb:
6e:7e:7f:d4:12:1e:e0:81:0b:1c:a0:7c:f1:6a:fa:
55:ab:00:67:b7:00:5c:37:a5:ef:fe:32:25:e5:f5:
e3:f1:b9:dc:e3:b2:88:0a:3f:1c:ff:b6:39:41:77:
63:99:2f:4e:ea:b8:d9:0f:c7:09:87:5a:e8:fe:72:
9c:5a:95:34:6b:97:fc:c5:29:8f:be:6c:79:15:fc:
cb:0e:0e:b0:5e:1e:84:01:26:3a:00:f3:07:52:48:
7f:06:73:2a:76:7c:bf:89:b5:16:88:ca:b7:88:56:
2f:af:80:6a:e3:60:23:42:d1:b0:e9:9a:f4:f2:d7:
1e:bc:11:b6:5f:6d:5b:ac:48:44:b4:a1:62:c9:d0:
a2:61:9a:eb:6e:a1:d6:35:60:cc:22:a4:c6:8b:8a:
5e:4f:98:24:fa:7b:50:c8:9b:2d:a7:55:40:2b:c9:
4a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:7D:88:FD:2B:7E:41:09:F9:A9:26:53:F4:01:73:03:AF:6C:6D:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/cd9fadc9-a02c-372f-9e73-ef1b2bae5d8a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
149.20.246.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:27:bb:76:b3:a8:58:ae:eb:3a:13:dd:df:34:e9:b7:b7:71:
91:0a:46:56:10:51:02:59:b4:33:97:d4:77:91:6c:0b:4e:91:
6d:7d:16:88:a5:61:54:68:fa:96:be:53:e0:ca:08:97:27:ea:
4f:c0:a8:35:8e:dd:f9:0a:34:31:37:f6:ea:91:78:14:d5:35:
48:60:7b:b3:e0:5b:ae:20:a9:ec:1a:5e:3a:c7:89:82:f5:82:
8f:63:9e:fd:7c:2c:a4:85:55:52:d7:ce:64:ae:61:8c:c4:84:
98:ce:e4:ee:30:ee:0f:17:b0:84:6a:e1:a6:dc:7d:9c:e5:bc:
e8:95:57:ab:5e:6e:70:3d:04:fc:3e:13:9f:22:fa:af:4d:f6:
45:1d:19:6f:37:1e:02:87:14:3e:0b:0a:84:50:b1:06:b8:a3:
2b:87:a3:4a:ca:ed:ae:8b:3c:b8:e5:9b:b2:49:7d:6e:72:09:
4e:d5:ad:9d:99:11:8b:c8:1d:3b:a6:96:8a:df:95:15:a2:08:
4c:59:70:e7:d1:09:f7:cc:5d:a0:56:19:38:bd:34:ab:e8:92:
5b:d6:09:1d:49:4b:b9:50:e8:b9:8d:79:3d:88:6b:1d:87:37:
52:53:6e:ea:4f:4b:37:13:58:65:5a:ed:8a:ea:42:b9:ba:2d:
33:62:f4:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 07:00:09 2025 by rpki-client