Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e/03fb9d59-f422-365b-8c92-7177fbbec8bf.roa
File: 03fb9d59-f422-365b-8c92-7177fbbec8bf.roa (raw, json)
Hash identifier: EU+9TPJtnadbEQy+wqtJR3ZBSNHcKYwQoPJ+r5Qdujg=
Subject key identifier: 82:B4:6B:67:F9:73:84:E2:9C:D3:72:04:8A:69:65:83:83:4C:69:90
Certificate issuer: /CN=63dfa533-829d-4752-9f73-458a9e42bd9e
Certificate serial: 010D0C9F43285848EC969C9B7DE84789C19BDD00
Authority key identifier: 8F:85:9A:3C:FA:98:C0:11:67:6D:31:19:94:1D:95:83:28:E2:4C:DF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e/03fb9d59-f422-365b-8c92-7177fbbec8bf.roa
Signing time: Tue 18 Feb 2025 14:00:52 +0000
ROA not before: Tue 18 Feb 2025 14:00:52 +0000
ROA not after: Mon 19 May 2025 13:00:52 +0000
asID: 21700
IP address blocks: 209.151.100.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e/63dfa533-829d-4752-9f73-458a9e42bd9e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e/63dfa533-829d-4752-9f73-458a9e42bd9e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ec:96:9c:9b:7d:e8:47:89:c1:9b:dd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63dfa533-829d-4752-9f73-458a9e42bd9e
Validity
Not Before: Feb 18 14:00:52 2025 GMT
Not After : May 19 13:00:52 2025 GMT
Subject: CN=f03aac71-99b8-4b01-86bc-c5a174dc923f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:eb:8b:22:f5:ce:54:0e:d6:c4:23:ed:6e:18:
db:7d:78:f4:1f:c7:f4:76:34:1e:9a:f7:2c:14:b0:
80:0e:e1:48:03:2e:dc:cd:d0:75:53:8d:99:5f:d1:
3a:6c:68:01:6a:40:d6:71:f2:43:c3:ea:07:f0:59:
df:3a:f7:07:9b:59:d3:3d:28:1a:26:df:a0:4a:fe:
d8:21:bb:1e:f9:d6:fd:3e:20:62:40:c5:4f:55:c2:
a2:3c:39:0a:eb:aa:ca:4a:e3:01:23:1a:1c:36:0e:
ee:4f:ee:5d:32:97:7b:47:3d:f4:87:9e:49:98:cc:
89:a7:0a:00:cb:ea:2c:04:67:7b:a0:c5:3b:ae:e4:
a2:a5:6c:c2:b1:b5:f7:00:f0:d3:12:cc:f0:60:7b:
cc:0a:44:fe:5b:9d:08:fd:9c:b8:8a:b9:37:2a:e0:
90:4d:b6:4c:f0:e9:92:7b:5f:ac:ce:d6:36:06:ca:
e0:7f:6c:e9:08:ac:98:02:10:27:9a:3e:ff:99:e1:
bd:fe:70:55:dd:30:63:43:eb:b2:7a:41:c9:17:7a:
cf:85:da:b8:d7:04:3b:1b:4c:50:d5:8d:03:55:dd:
a5:32:dd:cb:d9:5c:60:40:66:87:68:20:06:fa:be:
b0:c0:88:d7:72:97:eb:37:88:a8:8f:24:af:e3:2b:
4c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B4:6B:67:F9:73:84:E2:9C:D3:72:04:8A:69:65:83:83:4C:69:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e/03fb9d59-f422-365b-8c92-7177fbbec8bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e/63dfa533-829d-4752-9f73-458a9e42bd9e.crl
X509v3 Authority Key Identifier:
keyid:8F:85:9A:3C:FA:98:C0:11:67:6D:31:19:94:1D:95:83:28:E2:4C:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e.cer
sbgp-ipAddrBlock: critical
IPv4:
209.151.100.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:be:e4:21:fc:af:3c:73:6c:d1:a6:ee:8f:63:8d:0f:30:cf:
8b:46:5b:dd:6b:02:a6:96:fe:28:13:20:61:9a:43:54:a3:a2:
de:cf:a2:b2:c5:f3:6c:40:05:17:d3:93:b1:ca:52:81:29:6c:
7d:03:a3:1b:41:69:89:e5:34:f3:38:97:95:fc:41:cb:7f:24:
b4:ba:ef:fa:74:a6:c8:2f:d0:30:f7:59:43:cd:49:10:45:9a:
1a:73:f5:9b:c1:bc:03:c4:ae:6f:6b:4a:40:e3:0d:c1:d0:18:
9d:cc:22:5c:4e:28:f9:85:f1:a5:e5:5e:4a:ab:cd:ec:02:af:
c0:fa:77:48:4a:db:b8:c5:f9:23:b7:bc:24:c9:e0:44:ca:da:
39:08:11:ce:2e:48:76:22:06:a5:fd:bf:51:fb:db:45:d9:d9:
fb:02:ef:a7:aa:2f:da:15:bd:19:8a:90:92:56:db:2e:ec:1a:
91:8e:b2:13:da:62:9f:70:17:f2:a4:d0:21:e8:a9:a6:54:f7:
86:40:ce:11:12:50:17:ea:31:40:cd:46:b3:a2:4f:a1:cc:10:
02:90:2e:9e:29:07:81:51:0f:3c:ec:b2:b4:85:b2:23:15:5f:
47:b1:aa:6f:9c:f9:e7:e5:95:59:0f:71:1b:f4:73:ac:a7:7a:
fa:86:5f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 13:32:27 2025 by rpki-client