Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/db276d5e-d619-3e2a-bcc0-ef4aa9a7e694.roa
File: db276d5e-d619-3e2a-bcc0-ef4aa9a7e694.roa (raw, json)
Hash identifier: UIfaiZfcUPFEosIUDoMu0TYVON20gqWdS68Owd4iMnM=
Subject key identifier: 06:4C:D3:B5:40:0F:DF:81:36:58:B3:3A:2F:2D:D7:16:BE:75:97:BB
Certificate issuer: /CN=647216b7-a938-45d2-8264-7d448a4eaad9
Certificate serial: 010D0C9F43285848DA70F44E7D6F5264E49D1300
Authority key identifier: 22:F2:0C:84:C3:0A:1A:BD:DE:8D:E1:DF:1C:5F:13:78:C3:D9:44:5F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/db276d5e-d619-3e2a-bcc0-ef4aa9a7e694.roa
Signing time: Wed 12 Feb 2025 02:00:39 +0000
ROA not before: Wed 12 Feb 2025 02:00:39 +0000
ROA not after: Tue 13 May 2025 01:00:39 +0000
asID: 398143
IP address blocks: 208.103.128.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 17 Apr 2025 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:da:70:f4:4e:7d:6f:52:64:e4:9d:13:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=647216b7-a938-45d2-8264-7d448a4eaad9
Validity
Not Before: Feb 12 02:00:39 2025 GMT
Not After : May 13 01:00:39 2025 GMT
Subject: CN=52caceea-c254-45bc-a365-e27f632f5d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f4:9d:ae:19:08:1c:92:e9:b3:5e:57:fd:dd:
0e:e3:5a:26:6a:58:33:1f:e5:9e:18:73:7a:b3:c2:
ba:2e:06:4b:4a:47:4a:16:d0:6e:f4:12:d4:61:20:
78:60:fa:7d:46:2e:af:35:32:7e:e5:25:5b:11:46:
93:36:24:13:74:72:a1:a3:fa:86:ee:5d:07:43:5f:
98:88:e4:5c:1c:9c:f9:b6:21:10:0c:59:5a:9c:2f:
51:49:53:e9:5e:20:b3:d8:8d:e4:24:b3:b3:8d:11:
b3:6b:45:05:14:58:4b:fa:f8:7a:e9:ad:1d:a7:ff:
47:8f:34:da:a7:b0:86:28:26:8b:4b:98:b8:9e:ee:
96:47:55:0a:72:81:3b:bf:26:e6:77:80:22:84:a1:
17:36:a7:4e:c1:f6:2f:f2:59:8f:fd:2f:fa:35:11:
09:11:79:b1:f9:6d:a4:43:b0:df:ed:dc:43:a7:42:
6b:ce:50:41:33:37:39:56:80:e7:12:9e:eb:ef:c1:
90:79:37:2a:ac:f4:7b:57:cb:9f:f9:a2:b3:57:8d:
ec:64:3a:af:ea:22:d8:16:a5:cd:c3:52:1f:1a:ed:
84:61:d6:04:45:cb:c6:76:97:35:49:63:f1:71:83:
4f:98:86:02:50:24:6b:96:cc:01:ab:8c:0f:f4:4a:
24:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:4C:D3:B5:40:0F:DF:81:36:58:B3:3A:2F:2D:D7:16:BE:75:97:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/db276d5e-d619-3e2a-bcc0-ef4aa9a7e694.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.crl
X509v3 Authority Key Identifier:
keyid:22:F2:0C:84:C3:0A:1A:BD:DE:8D:E1:DF:1C:5F:13:78:C3:D9:44:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer
sbgp-ipAddrBlock: critical
IPv4:
208.103.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:7d:73:64:83:db:7e:f1:e7:01:5d:af:f1:5f:57:a1:b5:6c:
12:bc:41:77:14:0d:38:c4:2d:11:2e:6f:e1:ee:55:61:c1:32:
09:63:53:59:bb:cd:7e:73:2a:00:48:02:f9:bd:37:49:97:fd:
01:75:ee:ed:d5:88:e1:d9:05:17:f8:6c:5b:fc:fd:2e:fb:1f:
48:66:54:9a:5c:51:8e:fe:54:43:94:38:ac:88:3c:21:8c:d2:
5d:4f:c4:7a:83:e7:1a:80:08:89:73:df:22:4d:28:12:02:95:
bd:b2:cc:fe:8c:4f:cf:1c:09:06:e6:31:f1:df:01:71:f7:c4:
7a:32:8e:28:b4:2f:a0:d9:5b:aa:63:06:44:c9:11:4c:ac:39:
ca:19:24:52:4d:b7:d5:93:c4:54:b7:9e:eb:8d:42:d9:9a:9b:
f5:30:4e:b7:25:8c:6a:8d:4e:91:7f:db:37:87:c9:f7:32:d3:
36:5d:c7:6d:44:a8:b3:a9:12:5d:d6:20:71:94:91:7e:bf:8b:
cd:0a:2a:1e:c5:ef:fc:3a:45:97:e0:55:35:0f:da:1b:c6:b8:
7c:b3:30:23:7c:d9:a6:c6:1c:bd:46:00:c3:ac:8c:0d:2b:64:
95:7c:b8:74:cc:a5:84:79:15:36:8a:03:9e:83:a4:8d:c1:4d:
01:d3:0a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 05:11:16 2025 by rpki-client