Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/81b08043-aa8e-3de8-a7af-0950367e9609.roa
File: 81b08043-aa8e-3de8-a7af-0950367e9609.roa (raw, json)
Hash identifier: SWCMI+zjgIubyC2UAb1eLbXam/3NIYdYHDH9Uaiqud4=
Subject key identifier: A7:D6:19:BA:85:1A:4D:78:34:A9:33:45:8C:90:72:95:34:21:99:1D
Certificate issuer: /CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Certificate serial: 010D0C9F432858492E13C5EDB439CC2779DEB550
Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/81b08043-aa8e-3de8-a7af-0950367e9609.roa
Signing time: Fri 14 Mar 2025 01:00:39 +0000
ROA not before: Fri 14 Mar 2025 01:00:39 +0000
ROA not after: Thu 12 Jun 2025 01:00:39 +0000
asID: 11260
IP address blocks: 24.137.72.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 13 Apr 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2e:13:c5:ed:b4:39:cc:27:79:de:b5:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Validity
Not Before: Mar 14 01:00:39 2025 GMT
Not After : Jun 12 01:00:39 2025 GMT
Subject: CN=c6f3557c-1d0b-4550-8f0d-d145a7a98f44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:26:21:64:fc:8f:18:76:64:51:a3:6f:e1:af:
1b:13:5f:a0:da:4c:40:9a:00:88:c1:c8:3d:fd:ec:
cc:a8:b5:7f:0e:91:c4:ed:e3:97:04:1c:84:25:16:
d5:6f:78:c9:0b:13:cd:7a:4b:e5:87:5c:ec:fb:aa:
9e:96:cd:06:be:b5:99:7f:80:2a:55:6e:d5:da:97:
1e:a3:c4:06:8c:e5:b3:a7:79:0d:8e:52:1c:78:24:
1c:ce:7d:73:0c:94:70:b5:a6:ea:68:62:12:0f:04:
ac:5e:51:b8:a0:15:9c:a1:5f:23:c2:cf:6d:24:b9:
e2:34:8a:1f:b2:0a:9a:98:84:39:ec:86:4f:28:03:
88:7d:3c:9b:96:00:f2:88:ca:48:aa:76:9d:18:07:
76:3f:46:ff:5c:6c:90:13:14:dd:e3:48:8f:8d:86:
ee:e8:bc:ac:74:d0:fa:16:e2:71:d4:20:76:1f:af:
38:c3:36:a2:1d:0b:c8:6e:1e:a8:9f:4a:c8:8d:3a:
41:9e:a5:98:c7:86:cc:e5:61:26:2e:1b:2d:53:0d:
46:4c:37:c6:a6:43:0f:f7:1c:f8:25:d6:2b:e4:15:
06:fc:ba:e0:f6:5c:a9:1e:50:c7:16:b5:d0:51:5d:
9e:a6:8a:05:25:b7:56:3c:55:d6:81:ed:7c:ad:5b:
03:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D6:19:BA:85:1A:4D:78:34:A9:33:45:8C:90:72:95:34:21:99:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/81b08043-aa8e-3de8-a7af-0950367e9609.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl
X509v3 Authority Key Identifier:
keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
sbgp-ipAddrBlock: critical
IPv4:
24.137.72.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:d0:df:97:90:c8:53:ee:a3:4e:25:c6:cf:13:a8:34:ed:43:
1a:b2:42:0c:bf:6c:34:55:a8:b8:52:1a:c9:03:e1:69:7a:c1:
fc:a8:3a:bd:dc:0a:aa:8c:31:d4:5c:0f:ff:9b:cb:e6:fc:d6:
89:63:3e:88:b4:a5:4c:68:95:aa:21:f3:77:50:65:7b:3f:9a:
cf:45:c2:ce:82:fa:1e:38:08:02:39:c8:a0:1e:f7:c7:a2:90:
3c:6d:21:c4:17:aa:7a:0c:e3:30:ba:48:00:02:b0:a8:ec:84:
2e:f5:e1:33:56:93:7b:a1:fc:0f:da:5d:6c:4b:24:2b:e6:c0:
60:c2:1e:88:21:e7:13:c5:75:77:db:87:7d:74:ae:68:94:05:
90:c0:20:0b:43:ff:72:cb:47:dc:b9:61:ee:18:45:0a:ee:6e:
4c:ab:b6:ab:78:e7:67:de:8d:2d:44:c5:90:d4:ac:d1:52:1c:
94:a7:da:83:fd:21:ba:f0:32:4b:ae:0e:f2:31:bd:24:70:a0:
29:c3:60:a9:97:15:b7:6d:54:f8:da:a3:aa:98:3d:09:b7:37:
29:3f:84:b4:bf:8b:fa:80:08:10:9a:e7:99:6f:07:94:48:80:
7c:76:13:0e:8f:93:d0:6b:29:a5:76:03:e1:ef:f6:6c:d7:33:
41:11:4f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 07:12:20 2025 by rpki-client