Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/bd273475-ae2c-31d4-a1a1-612a8be36924.roa
File: bd273475-ae2c-31d4-a1a1-612a8be36924.roa (raw, json)
Hash identifier: qDj1rGaRtd4RcDTDrPFqbh7e+YeEVF3tLVenoY493j4=
Subject key identifier: 7D:0A:87:06:87:6C:28:9A:AD:DA:30:B0:A5:77:8B:0F:17:AE:DD:4A
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285848B62618C2C718C85937719780
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/bd273475-ae2c-31d4-a1a1-612a8be36924.roa
Signing time: Thu 30 Jan 2025 02:00:40 +0000
ROA not before: Thu 30 Jan 2025 02:00:40 +0000
ROA not after: Wed 30 Apr 2025 01:00:40 +0000
asID: 852
IP address blocks: 64.114.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Apr 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b6:26:18:c2:c7:18:c8:59:37:71:97:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Jan 30 02:00:40 2025 GMT
Not After : Apr 30 01:00:40 2025 GMT
Subject: CN=b49bf6fb-2310-4e75-8b1c-ab6233d4664b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5d:e8:3f:a0:a0:e1:c8:12:f1:82:7f:9a:ee:
64:1a:3f:e9:2a:4a:2c:c6:61:7d:70:94:f3:a4:10:
95:2e:a8:a3:f6:f1:3e:d3:1d:00:f3:cf:c8:cd:75:
41:e7:6b:8f:95:9b:3b:53:1b:d9:22:c4:a0:6a:2d:
06:4a:9e:b2:6d:2f:92:64:af:a9:0b:5f:cb:04:57:
57:24:67:7b:82:e2:2a:a6:81:35:32:77:dc:89:96:
30:09:ad:05:e2:9c:b0:ff:de:ad:28:7c:f2:ff:30:
c2:dd:d4:45:4f:92:19:90:91:52:66:3d:5e:57:c4:
87:2f:6c:65:ac:59:6a:66:3f:2f:08:59:d9:e2:7c:
3c:f3:fd:dd:d8:fe:3b:d9:cd:2f:36:30:b0:79:58:
9c:0f:a8:ff:73:62:24:16:3d:43:d8:aa:de:86:42:
b7:5e:49:f9:1c:77:cf:f5:e5:a7:83:cd:f9:54:6f:
f2:ca:19:03:3c:6e:b5:c3:d0:74:84:5c:d8:26:25:
40:9b:b7:61:a7:9b:51:dc:3e:7e:ba:0a:30:ff:56:
1c:03:de:55:18:f3:48:af:d5:00:dc:1a:d0:8e:3a:
01:4f:21:83:8a:5f:4b:39:42:fc:7c:d3:b9:34:1b:
a1:07:db:bf:4d:d1:69:2b:0c:bd:f3:2f:ee:89:6d:
d6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:0A:87:06:87:6C:28:9A:AD:DA:30:B0:A5:77:8B:0F:17:AE:DD:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/bd273475-ae2c-31d4-a1a1-612a8be36924.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
64.114.37.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:38:e7:38:82:a9:7c:bd:54:7e:bf:3f:dc:c0:48:2f:9e:aa:
81:08:14:1d:50:ea:8d:da:87:b3:63:36:64:a8:2f:37:e5:7a:
ac:e1:a1:36:41:ca:d2:28:fb:2a:b8:a0:21:af:31:ee:4c:fa:
15:6e:1e:7b:9f:32:55:1d:c8:c0:62:ce:14:e0:44:09:bf:75:
c4:cb:7a:98:a8:74:b3:4c:b7:3b:a7:a7:ec:03:62:c1:a8:9b:
5c:c8:de:26:2e:3f:be:ff:ae:2e:43:c7:9c:25:65:f4:e2:ad:
0e:a5:b0:78:24:6e:55:a8:f1:bc:78:a2:27:7a:dc:ee:12:dc:
f0:b1:65:cf:cf:40:eb:cf:93:7e:0c:18:f0:8f:b3:17:3f:4d:
f2:c9:6e:25:38:30:69:2c:5b:bd:2e:5b:8c:3b:50:e1:f5:7a:
71:cd:5d:cd:ac:6c:4a:49:d0:48:bf:52:0c:ef:a4:38:d1:49:
40:ee:7b:ec:45:aa:34:f2:b6:dd:f0:2c:33:2f:16:87:ce:7c:
b2:ff:70:3f:d5:50:45:e5:77:3f:6b:54:fe:fd:01:f1:04:2c:
72:cc:8e:9d:7b:0e:c5:37:cd:e2:5c:fe:d3:cd:b1:ae:ac:80:
65:3d:e7:e6:58:dd:0b:55:58:33:6c:56:3b:d2:c4:63:8c:69:
04:a0:db:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 04:07:37 2025 by rpki-client