Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/5d43ded9-5a0b-38ca-bc16-7e8d3bafa7f5.roa
File: 5d43ded9-5a0b-38ca-bc16-7e8d3bafa7f5.roa (raw, json)
Hash identifier: 5RM5gWN2UAPgYHjs3M0qyoJXFHhNp4xGvsUVjufJXfo=
Subject key identifier: 91:21:05:7B:77:70:C0:52:5D:BE:E6:68:59:C9:E3:C3:30:71:FD:84
Certificate issuer: /CN=a6261878-5ef4-4f99-8d09-b6d2493444c5
Certificate serial: 010D0C9F43285848A13611A9477B67369E804700
Authority key identifier: E4:38:00:B2:2B:D1:1D:44:66:B7:39:46:FF:3D:45:52:DC:BE:DC:1A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/5d43ded9-5a0b-38ca-bc16-7e8d3bafa7f5.roa
Signing time: Wed 22 Jan 2025 14:00:52 +0000
ROA not before: Wed 22 Jan 2025 14:00:52 +0000
ROA not after: Tue 22 Apr 2025 13:00:52 +0000
asID: 399122
IP address blocks: 72.172.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:36:11:a9:47:7b:67:36:9e:80:47:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6261878-5ef4-4f99-8d09-b6d2493444c5
Validity
Not Before: Jan 22 14:00:52 2025 GMT
Not After : Apr 22 13:00:52 2025 GMT
Subject: CN=bec51a43-83de-474e-a397-a9e0dd1915ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c0:ec:5a:5c:0a:41:16:11:20:cd:6a:73:27:
c6:c0:03:58:46:e0:16:21:6a:9d:b1:e1:5a:91:98:
ce:03:26:0d:67:ac:24:d9:3b:50:a0:d8:5f:66:29:
9c:57:55:09:f5:2b:60:32:94:d7:5d:86:f7:df:1d:
e3:e3:20:19:86:85:de:56:38:04:5e:69:3b:e1:cd:
c6:e9:70:30:bf:fc:74:5a:6f:ac:d2:34:56:cf:13:
d8:f2:c2:a4:77:65:a0:46:28:c7:89:e6:ac:59:41:
81:99:4f:29:8e:7e:fb:e7:04:82:6a:b9:0c:4a:f9:
33:07:33:1f:ff:ee:19:95:14:3f:62:81:66:d2:3c:
c1:8a:4d:ba:8d:ff:79:d8:ac:b7:59:14:60:57:dd:
c4:ee:f0:58:2b:b7:f1:41:c5:9c:65:2c:1a:f8:b9:
a8:bf:c2:da:ce:29:7d:d9:0c:e8:7a:8e:37:9e:c4:
70:8b:91:f9:12:d8:30:4a:36:33:3e:4b:45:c2:29:
2b:27:f8:73:13:b0:8e:70:a3:3a:8e:dc:0b:34:40:
5d:20:d1:1d:1a:c1:b8:96:0b:70:38:28:fa:82:fb:
98:40:63:10:50:f1:b6:61:54:7a:b9:2e:69:12:45:
d9:68:63:01:b4:21:26:8a:21:42:f3:c6:0b:ca:4a:
92:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:21:05:7B:77:70:C0:52:5D:BE:E6:68:59:C9:E3:C3:30:71:FD:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/5d43ded9-5a0b-38ca-bc16-7e8d3bafa7f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.crl
X509v3 Authority Key Identifier:
keyid:E4:38:00:B2:2B:D1:1D:44:66:B7:39:46:FF:3D:45:52:DC:BE:DC:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer
sbgp-ipAddrBlock: critical
IPv4:
72.172.72.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:85:35:b2:d1:ad:13:3d:0f:de:d2:56:41:00:d8:d0:5d:bc:
5d:3a:1f:1e:db:1f:f5:35:ce:12:00:44:93:11:23:da:ba:a2:
89:20:e2:9a:56:99:5e:33:49:e6:d2:ae:6f:c8:b2:63:22:37:
6b:5f:e2:84:60:67:86:92:7e:cd:c8:6b:5d:cc:0d:7a:34:38:
1b:ff:af:34:94:24:89:3d:ef:b1:7c:a2:82:1b:4f:ee:2d:6b:
28:8c:6b:8c:82:24:a4:57:58:ae:85:8a:98:78:03:20:2c:b0:
5a:b6:2e:4a:6c:6f:21:ad:0b:4a:a9:ce:05:02:9d:e2:49:7d:
99:27:a8:80:e4:c2:5c:78:6d:f0:ee:ac:2a:80:cc:77:a3:15:
bd:c8:cc:85:58:47:85:c0:0b:22:04:fb:4f:c6:40:ef:2a:89:
e8:ab:2c:a7:b8:70:7c:c6:29:d7:3a:9c:3e:be:64:fa:79:6c:
ea:10:02:b8:e8:0b:64:7e:93:7d:0b:9d:33:4e:6c:49:bc:59:
0b:13:1b:9f:c9:21:26:4b:a9:41:69:82:b5:8b:fb:53:06:96:
cd:22:32:8e:d5:90:37:0c:59:d5:3c:60:37:47:69:2b:5b:28:
13:9f:f1:d1:49:0d:e5:47:68:69:50:56:cb:01:7c:bf:7d:70:
96:d8:e3:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 11:46:26 2025 by rpki-client