Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7087217c-b110-3a9d-a248-2654f8fb711d.roa
File: 7087217c-b110-3a9d-a248-2654f8fb711d.roa (raw, json)
Hash identifier: CGTm+lGK0OcSyuodmhnaO4SyldFS5cc+FPagLrvJLoo=
Subject key identifier: C8:3D:04:85:7F:DB:84:2A:DD:B0:0D:F2:BD:FD:C1:87:FE:1A:29:95
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C84BB212BE21456449D42C20
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7087217c-b110-3a9d-a248-2654f8fb711d.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 396982
IP address blocks: 35.203.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:b2:12:be:21:45:64:49:d4:2c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=ca5e3ca3-36cc-4628-8cdd-38a8619278b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f1:be:89:c1:29:ed:d9:77:5d:ba:4f:c9:23:
50:51:42:c2:6b:f3:e9:8e:c2:26:5f:79:79:0f:0f:
fc:83:37:5c:17:28:43:b4:4e:aa:4a:31:29:9d:d2:
bc:01:17:61:a5:e9:67:b5:09:03:b3:6e:95:4b:e7:
71:b9:6d:2d:4f:40:40:1f:74:b8:71:cf:13:e2:05:
da:3d:36:e7:d0:91:60:cf:bf:43:cd:59:09:4b:22:
ec:db:4c:23:f7:be:6d:27:df:c5:1b:5d:8e:e1:3c:
d0:1b:6e:40:dc:ee:f2:e9:b7:0c:ac:26:85:71:28:
49:c2:74:bb:2e:5d:10:8f:a3:b9:36:02:2b:d6:5a:
80:94:6f:aa:92:d7:2d:14:ea:3a:5a:04:11:3a:1e:
fa:6b:3c:78:b4:b2:7b:0e:22:2f:d2:0f:e0:f1:d0:
17:7d:86:04:f9:16:95:cf:69:ee:d1:ce:28:63:89:
ab:ce:67:ea:e3:e4:f4:8e:0e:44:85:76:82:41:5c:
56:d7:93:48:e2:78:d4:96:9b:0a:bb:91:32:18:7b:
3a:47:66:53:b5:2f:01:28:52:a7:e3:85:c6:7a:81:
08:9c:7e:9a:c4:7d:c1:f7:75:12:c4:ab:b2:cd:08:
48:51:a9:a4:91:57:7b:52:da:0d:71:3b:1e:5e:17:
23:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:3D:04:85:7F:DB:84:2A:DD:B0:0D:F2:BD:FD:C1:87:FE:1A:29:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7087217c-b110-3a9d-a248-2654f8fb711d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.203.230.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:1d:cb:b2:ad:0c:93:b9:9a:73:d4:62:ca:89:5c:38:10:f6:
32:a9:52:20:49:5e:b0:99:19:35:c7:91:3a:0d:a3:1a:90:98:
5a:f2:cc:2e:e1:ae:e8:e5:4b:6c:27:7a:63:c6:91:bf:13:48:
a7:45:10:1f:2b:fe:02:a8:08:e0:6a:67:b3:82:ca:74:e8:e0:
74:be:48:23:c0:83:c4:e6:25:cd:69:fc:6c:3f:62:87:63:38:
a8:bb:cc:d6:51:9d:ee:2f:1e:81:39:d3:e2:42:1a:b1:05:2a:
5a:8c:88:ae:57:bd:1a:26:51:5e:39:fc:f8:de:d1:c7:aa:ca:
72:26:c7:1e:64:ff:76:40:0c:9b:79:86:47:f1:57:0d:26:e7:
e1:79:91:36:85:ea:37:62:0c:51:03:d3:c2:aa:f9:39:2e:b0:
b0:fe:bd:65:94:13:c6:9d:72:ab:2d:7b:c1:d3:25:01:1f:8d:
52:45:57:74:96:c3:c5:c9:2f:bb:92:e6:73:36:bb:e0:3f:f5:
bc:95:f2:9c:90:b0:cf:1b:44:af:b3:3e:02:ea:4e:c8:a4:13:
76:d1:27:75:a5:cf:a4:d8:12:bb:53:b3:23:96:3b:81:2b:c7:
cd:21:0b:b5:d6:3b:6f:a4:f9:e2:06:e8:b0:c3:6a:e7:93:b7:
73:91:a4:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 15:18:09 2025 by rpki-client