Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/da25f6d9-6c92-3d3c-88bc-7b6349062f25.roa
File: da25f6d9-6c92-3d3c-88bc-7b6349062f25.roa (raw, json)
Hash identifier: bfUKmJI1zKnfJNt4kbm23POpRiXc4HlFn9U40/D9lkE=
Subject key identifier: 37:22:8D:2C:45:D6:ED:70:C0:58:6B:5A:53:E4:02:BF:EA:6A:7F:3E
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C84C17465534EE7D41B7E380
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/da25f6d9-6c92-3d3c-88bc-7b6349062f25.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 396982
IP address blocks: 34.67.128.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Apr 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4c:17:46:55:34:ee:7d:41:b7:e3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=cea4a00e-1ceb-49dc-a768-0fec3fc6657c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a8:d3:54:58:9c:98:10:0f:f3:9e:4c:28:ce:
ed:a8:55:2d:6a:90:de:c2:69:00:ea:59:c1:82:60:
31:fd:b6:ef:0e:5e:9e:20:bf:e5:de:56:64:0b:81:
8b:b8:bb:5c:3d:c0:83:c1:73:b6:6a:71:ad:47:54:
22:e1:e0:cf:ae:5f:b4:14:75:b0:3d:a5:c6:60:88:
5e:c0:a9:9b:24:a4:6b:a7:eb:d6:9a:de:f2:a8:10:
31:75:50:76:63:5f:19:dd:1d:fa:4e:81:21:7e:b0:
d2:95:83:ec:cd:52:35:eb:b0:6f:34:93:b2:76:14:
7d:78:c8:73:49:68:2b:73:5b:e8:83:98:eb:27:e1:
66:62:2a:c5:c7:e3:9a:c4:06:48:b6:b9:c2:a8:0e:
b9:57:89:31:e4:7f:e6:f1:d8:b8:e5:09:58:0b:58:
0f:40:cc:95:87:b3:da:3e:51:4a:7c:5b:6d:4e:fe:
50:06:1f:a7:ba:eb:32:9c:dc:0b:38:a2:0b:05:da:
49:e1:e7:e1:2f:11:fb:ca:3e:c4:06:8e:3a:1f:f6:
55:cd:83:05:75:62:31:02:4f:a1:34:cd:eb:5d:68:
b0:39:16:8b:8e:ec:e3:f6:4c:09:d7:f1:4a:1d:6c:
d7:a3:49:6b:9f:61:98:da:9b:e5:a2:fe:4b:3a:2e:
e0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:22:8D:2C:45:D6:ED:70:C0:58:6B:5A:53:E4:02:BF:EA:6A:7F:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/da25f6d9-6c92-3d3c-88bc-7b6349062f25.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.67.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:87:3e:6e:f4:df:af:77:c2:df:82:8b:66:cf:55:9f:ab:12:
15:b0:ef:60:b0:36:f2:22:17:c3:20:dc:65:ea:81:54:20:0c:
f0:d1:c1:11:33:46:bc:94:a2:c2:c1:e3:5f:af:e6:b1:5d:64:
f9:d4:55:5e:97:b9:2a:8d:30:9e:ac:2f:7d:73:c1:6f:50:32:
4f:03:02:2b:eb:d6:2a:70:c9:15:ed:e7:ff:65:f3:9d:23:e2:
0a:17:f2:f1:11:4e:6e:58:83:46:e3:a7:37:51:46:04:7b:36:
bd:02:03:2d:3c:83:c3:a4:7d:d4:bd:06:3f:69:b3:b7:fa:12:
40:49:86:0c:39:4a:b8:f2:fc:74:c0:fd:be:0c:ad:98:42:b1:
eb:a7:a0:f8:03:50:82:d3:ce:e4:ee:04:94:36:24:d9:c7:55:
6d:23:31:3c:ed:78:f4:02:75:0a:62:e2:13:6d:5e:02:88:e6:
88:33:70:4c:ce:27:57:6c:fb:ab:3b:07:75:60:21:20:a8:36:
f0:b3:d9:2f:94:3e:d2:ac:cb:da:90:83:b5:fe:f4:60:6e:c2:
24:18:df:22:2e:66:02:fe:4e:a4:66:e0:a3:62:96:ee:d2:78:
13:34:67:2b:9c:1a:d8:23:47:70:f7:3a:9d:0e:1e:9d:5a:ae:
8c:e5:06:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 00:21:04 2025 by rpki-client