Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/ceb06be8-602c-3b37-8ee5-ecc299990815.roa
File: ceb06be8-602c-3b37-8ee5-ecc299990815.roa (raw, json)
Hash identifier: i19GDSYWZEvZiKhf0YSyq7b0spxZDHgPeJOFRNbZyCY=
Subject key identifier: 51:E4:79:33:4E:F1:16:80:AF:21:8B:0A:66:94:FD:D5:06:EE:19:A6
Certificate issuer: /CN=52fbdac8-20c0-4da4-8654-27b4bf592930
Certificate serial: 010D0C9F43285848BE86311FCCCC93F1558BA580
Authority key identifier: 83:F5:A6:59:FF:1E:96:96:C8:E5:B4:B9:DF:F6:3D:37:29:30:A4:75
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/ceb06be8-602c-3b37-8ee5-ecc299990815.roa
Signing time: Sun 02 Feb 2025 02:00:39 +0000
ROA not before: Sun 02 Feb 2025 02:00:39 +0000
ROA not after: Sat 03 May 2025 01:00:39 +0000
asID: 394491
IP address blocks: 45.45.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/52fbdac8-20c0-4da4-8654-27b4bf592930.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/52fbdac8-20c0-4da4-8654-27b4bf592930.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:be:86:31:1f:cc:cc:93:f1:55:8b:a5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52fbdac8-20c0-4da4-8654-27b4bf592930
Validity
Not Before: Feb 2 02:00:39 2025 GMT
Not After : May 3 01:00:39 2025 GMT
Subject: CN=a33e6860-c97f-4bf1-a388-bf7f2abf9b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e7:54:71:e6:0b:b3:d7:75:14:3b:e8:38:a9:
42:54:c9:97:76:0f:52:11:b9:c2:6d:c2:51:2a:5e:
e8:6a:1b:63:f5:2f:b2:1d:4f:fd:ca:3f:f7:56:04:
1e:97:19:08:e9:b0:59:ca:54:59:f2:43:57:ef:79:
83:4e:26:74:fb:83:22:2d:fa:9d:98:7a:99:19:d4:
c5:2d:f1:4b:bd:cc:30:0d:d3:fd:bc:62:84:19:db:
dd:f3:e9:e2:e1:f0:cb:7e:ce:f3:cb:72:40:a3:fe:
3b:90:a1:ca:12:b2:29:54:61:1d:8c:7b:8b:42:92:
2f:67:c2:57:38:30:d4:51:bc:99:45:f4:1e:d2:ac:
39:a2:b6:a5:29:36:64:09:2a:26:c3:cb:55:06:6c:
d9:16:54:31:4a:49:aa:c4:c9:ed:d4:81:75:b1:17:
14:d4:e8:60:7c:7f:4a:94:49:13:43:05:c4:da:a6:
c4:fe:96:aa:e0:cb:53:17:5a:5f:04:93:5c:d8:30:
94:3d:3f:78:bd:41:08:80:38:43:b8:97:94:11:10:
d8:26:5b:6f:e4:f1:d7:18:e1:78:a2:66:75:f7:d6:
38:2c:93:bd:ee:d3:98:f9:50:23:c5:25:98:7b:2b:
32:60:be:05:e8:d2:09:34:96:ba:4b:54:b5:b6:17:
d8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E4:79:33:4E:F1:16:80:AF:21:8B:0A:66:94:FD:D5:06:EE:19:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/ceb06be8-602c-3b37-8ee5-ecc299990815.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/52fbdac8-20c0-4da4-8654-27b4bf592930.crl
X509v3 Authority Key Identifier:
keyid:83:F5:A6:59:FF:1E:96:96:C8:E5:B4:B9:DF:F6:3D:37:29:30:A4:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930.cer
sbgp-ipAddrBlock: critical
IPv4:
45.45.252.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:65:1c:33:42:40:2e:e5:22:e6:34:07:67:46:56:53:87:7a:
2d:12:a4:cc:44:b7:7f:99:0c:b2:b5:8c:27:96:a7:a1:54:ac:
06:1e:90:b7:b7:cc:f9:63:b5:41:d1:bc:2f:73:5f:36:53:5e:
cf:08:0a:88:65:4c:aa:c9:b2:e6:e8:9d:32:80:cf:5d:aa:af:
a8:21:85:6d:80:5e:b0:18:f9:c3:73:66:72:72:0f:2c:86:a4:
59:29:fb:cb:60:d9:ad:42:e5:f3:92:6a:e6:1e:0f:d2:21:42:
a3:25:03:2a:9e:9d:60:88:34:56:4c:33:95:84:05:ac:6d:b5:
32:f9:5f:da:58:7e:98:ca:6e:38:3c:da:ce:97:f1:5a:32:46:
e8:44:d9:a9:6a:9b:c5:63:43:34:e8:7e:89:3e:5e:17:46:cc:
30:06:51:2c:43:35:28:76:e0:36:6e:ef:a1:b8:16:5a:d3:ea:
dc:41:41:20:5e:16:37:60:35:69:50:d5:d1:e4:29:90:98:45:
6c:35:6f:53:8f:00:33:45:9b:bc:16:70:0b:5d:fc:7c:5f:b2:
40:8c:20:4d:7f:95:23:d7:d4:d9:e3:15:34:65:a3:8a:37:33:
58:11:28:27:56:c3:54:a2:21:c1:3c:2f:c9:be:2b:05:e1:c7:
59:dd:4c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:46:19 2025 by rpki-client