Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be206701-373a-467b-8de3-29a82f348469/164a4a38-3cc3-369f-9b41-02fbbe337f76.roa
File: 164a4a38-3cc3-369f-9b41-02fbbe337f76.roa (raw, json)
Hash identifier: 6DY7Qpn4FtEmjKjRWevTzVG+vDqTsOau8JIE++dFr+w=
Subject key identifier: 41:88:BB:07:83:41:50:72:1E:59:AC:4D:89:4E:E3:7C:45:F4:D6:58
Certificate issuer: /CN=be206701-373a-467b-8de3-29a82f348469
Certificate serial: 010D0C9F432858496484421C9C15DE4F1D9BB080
Authority key identifier: 95:A7:1D:64:F6:31:39:42:29:FA:63:D8:E5:7F:B7:EB:C8:0A:92:AD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be206701-373a-467b-8de3-29a82f348469.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be206701-373a-467b-8de3-29a82f348469/164a4a38-3cc3-369f-9b41-02fbbe337f76.roa
Signing time: Wed 02 Apr 2025 13:01:01 +0000
ROA not before: Wed 02 Apr 2025 13:01:01 +0000
ROA not after: Tue 01 Jul 2025 13:01:01 +0000
asID: 62605
IP address blocks: 192.64.176.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be206701-373a-467b-8de3-29a82f348469/be206701-373a-467b-8de3-29a82f348469.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be206701-373a-467b-8de3-29a82f348469/be206701-373a-467b-8de3-29a82f348469.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be206701-373a-467b-8de3-29a82f348469.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 16 Apr 2025 05:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:64:84:42:1c:9c:15:de:4f:1d:9b:b0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be206701-373a-467b-8de3-29a82f348469
Validity
Not Before: Apr 2 13:01:01 2025 GMT
Not After : Jul 1 13:01:01 2025 GMT
Subject: CN=23886030-e7ba-477f-a306-25125acc7d61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:73:c2:32:a1:27:7b:0c:50:b6:cd:a7:3b:e8:
47:c0:b1:0a:61:2c:41:63:32:14:8a:2e:87:d0:d3:
b1:25:a3:f6:1c:67:ef:a9:7d:50:22:7c:d6:5e:04:
56:d8:4d:8e:ac:8c:ab:41:f2:6d:fb:1a:1c:f6:ca:
22:12:62:f2:84:19:0f:49:6f:63:bd:53:8e:23:b2:
b0:cb:e7:68:c6:dd:04:01:1f:bb:85:d4:f6:fc:97:
e8:a9:a0:c7:8a:c3:63:40:ae:43:cf:a0:6c:4e:02:
bf:71:d2:21:19:92:07:41:ba:cb:6a:a5:9b:89:4c:
b4:56:15:a7:6b:88:32:12:21:5d:3d:74:36:17:89:
b1:c7:6f:3d:52:2f:01:0b:02:67:53:ef:d4:fa:11:
48:0a:d6:c7:49:c4:5f:ff:c6:a3:0a:e6:25:d4:0e:
6b:34:d4:dd:0e:43:05:67:08:4e:c2:69:ea:db:3a:
34:10:63:cb:bf:7e:66:d6:c2:6b:27:3a:16:ab:01:
5d:78:1d:5a:ee:a8:28:3d:e6:ba:ed:48:0c:5a:7c:
90:ac:6a:b6:1c:04:70:63:a0:bd:c0:67:4d:21:c8:
a0:2d:4c:ac:8e:23:4b:2a:21:65:39:f9:5f:93:2b:
d5:2b:26:76:03:4e:f7:e7:04:df:d7:2a:58:54:56:
87:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:88:BB:07:83:41:50:72:1E:59:AC:4D:89:4E:E3:7C:45:F4:D6:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be206701-373a-467b-8de3-29a82f348469/164a4a38-3cc3-369f-9b41-02fbbe337f76.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be206701-373a-467b-8de3-29a82f348469/be206701-373a-467b-8de3-29a82f348469.crl
X509v3 Authority Key Identifier:
keyid:95:A7:1D:64:F6:31:39:42:29:FA:63:D8:E5:7F:B7:EB:C8:0A:92:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be206701-373a-467b-8de3-29a82f348469.cer
sbgp-ipAddrBlock: critical
IPv4:
192.64.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:fe:d6:9e:e7:9c:36:8e:d2:46:32:43:4e:3d:b5:00:33:a4:
23:f5:96:21:e6:4a:65:42:a6:70:ce:bb:c1:0b:03:81:d4:ce:
a0:d3:d5:ce:cd:21:4c:70:e3:c0:fa:f4:c5:4d:8d:d8:72:c3:
84:8a:f1:d9:f2:de:82:37:d4:b7:7e:e8:96:fd:d0:a0:af:4f:
d4:b2:11:46:b6:06:ee:56:f3:93:b2:7c:b3:fc:54:8d:b0:50:
15:5e:da:e9:45:d4:7f:3e:d4:47:9d:d3:95:09:e8:02:c2:f1:
42:f7:66:65:16:57:91:df:3f:98:48:13:a9:08:9c:cd:b9:0d:
a6:34:2b:ab:f7:43:e0:d2:83:8a:56:53:28:30:9c:26:2c:8e:
58:ea:ba:ea:54:b6:7e:90:30:9a:76:2d:4e:fb:e2:70:78:b1:
dd:c7:9f:1f:e2:d0:84:c6:f9:72:7c:2f:82:11:9c:55:69:78:
4e:e3:0f:f4:e5:91:ec:9a:31:a7:e9:8b:ee:76:30:b7:8f:4b:
1f:0a:ec:fe:66:d7:a6:74:08:b6:1a:fe:6f:cb:cb:38:e2:ff:
65:fd:6e:1f:82:31:b9:0f:2b:0b:da:d6:b3:2b:a7:d0:4f:fa:
73:cc:63:44:9f:22:f4:62:4a:46:97:6b:d0:e9:aa:b5:b8:09:
c6:85:29:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 22:10:19 2025 by rpki-client