Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/9a2045a2-d1cc-36ea-ad77-cecc419b305e.roa
File: 9a2045a2-d1cc-36ea-ad77-cecc419b305e.roa (raw, json)
Hash identifier: q+7eUMkTzZirMEGPwsCuBaab3COqjEVoOZMxHKMG8YU=
Subject key identifier: 04:51:F9:CD:D0:3A:E5:CB:F9:8A:C4:B0:DA:42:BB:0D:7E:FC:99:68
Certificate issuer: /CN=a90f006a-b108-4757-9dfd-b36376534658
Certificate serial: 010D0C9F4328584950F96332AB5A67634CFFBD80
Authority key identifier: 56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/9a2045a2-d1cc-36ea-ad77-cecc419b305e.roa
Signing time: Wed 26 Mar 2025 13:00:53 +0000
ROA not before: Wed 26 Mar 2025 13:00:53 +0000
ROA not after: Tue 24 Jun 2025 13:00:53 +0000
asID: 7029
IP address blocks: 45.43.7.0/24 maxlen: 24
45.43.8.0/24 maxlen: 24
66.11.125.0/24 maxlen: 24
104.192.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:50:f9:63:32:ab:5a:67:63:4c:ff:bd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90f006a-b108-4757-9dfd-b36376534658
Validity
Not Before: Mar 26 13:00:53 2025 GMT
Not After : Jun 24 13:00:53 2025 GMT
Subject: CN=c5d203fd-df80-409e-9556-c5ce1ea8aea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:03:fb:26:8a:ed:d4:b8:70:f1:ef:51:9a:60:
81:46:f1:36:eb:15:80:7a:64:9f:39:b2:ab:ae:b5:
29:fb:1d:71:40:53:19:12:cf:b0:24:d8:62:37:32:
2e:7c:b2:c4:08:36:e3:61:e6:f8:56:9e:99:35:11:
11:ac:7e:55:71:be:99:71:81:87:2b:55:39:34:63:
ac:88:2d:9d:7b:9d:99:bf:79:9a:57:99:c6:22:e5:
3a:3f:87:38:3f:92:e7:32:2b:bd:12:a4:e0:60:00:
7b:9b:d9:48:e0:06:d0:62:28:a3:27:49:62:7f:f8:
54:0f:13:46:81:11:4d:02:b3:b5:05:d6:6a:ed:e1:
85:98:84:15:7c:80:94:2b:3e:92:b5:06:17:7a:53:
a3:37:89:b8:e1:e1:f4:44:99:37:95:4b:fc:1b:d4:
35:ec:78:28:cc:a8:72:1b:ed:1b:86:4e:84:11:d1:
12:04:da:90:cc:c5:a7:e5:21:26:fb:d8:84:8f:d6:
4a:ef:39:6f:ad:d2:24:2a:04:8c:04:ca:a3:0c:32:
dc:d2:d5:6c:8a:fb:da:9b:10:05:f8:f7:8e:ac:01:
8e:7f:c6:3c:39:6b:f2:a8:5b:7a:0d:f9:d4:23:99:
3d:8c:f0:66:7a:ee:a9:fe:e1:9d:b6:e6:60:83:2d:
69:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:51:F9:CD:D0:3A:E5:CB:F9:8A:C4:B0:DA:42:BB:0D:7E:FC:99:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/9a2045a2-d1cc-36ea-ad77-cecc419b305e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl
X509v3 Authority Key Identifier:
keyid:56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer
sbgp-ipAddrBlock: critical
IPv4:
45.43.7.0-45.43.8.255
66.11.125.0/24
104.192.103.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:76:7a:ac:46:7c:cd:71:50:57:ac:78:89:6e:2c:d1:c6:ae:
f4:df:43:ee:c6:48:dd:c7:93:e0:66:1a:9a:ae:52:ba:77:8f:
74:92:25:5d:8d:29:3f:d1:47:fc:f0:e9:b6:09:3d:22:50:9d:
dd:f0:e3:06:80:c9:2f:52:82:f1:34:5b:bf:39:0e:2d:91:0f:
87:ce:15:8c:ca:45:e5:fb:b1:87:14:75:fb:76:12:a5:ca:1f:
b1:f0:b7:f6:1d:0a:1a:ac:b6:c3:8c:7a:25:50:95:9f:55:d7:
78:cc:0b:95:c0:09:53:7b:fe:d1:0d:fd:1f:77:af:a5:b7:9e:
5f:fb:ac:8e:57:70:36:bb:5a:85:5c:05:f6:bb:68:0f:8b:62:
21:0f:8f:01:46:b5:4e:de:d0:ef:2e:37:c9:91:ef:b2:9b:1d:
55:3e:c8:34:50:b1:98:e7:b5:23:4c:55:46:05:3f:50:d7:b1:
20:62:b1:9c:38:6f:07:6e:c0:42:6a:5c:a7:d7:a6:70:da:b9:
9b:66:f0:e5:74:93:04:94:a8:93:51:3d:96:1d:a2:88:dd:60:
1d:85:39:90:d7:35:38:85:1c:49:f4:bc:d6:e9:db:8f:5a:7d:
38:d6:e1:42:03:97:14:2b:57:fb:2c:5d:e8:f2:f8:56:f6:3b:
a7:76:7f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:37:54 2025 by rpki-client