Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/0f6241fd-ac1e-3909-8b8f-cbbdd0e7bf62.roa
File: 0f6241fd-ac1e-3909-8b8f-cbbdd0e7bf62.roa (raw, json)
Hash identifier: qMJL8fnKya8WS3hgzjmvjhY+rekXBA2gjZ5viwSLQ8c=
Subject key identifier: 54:8E:45:67:A6:FB:33:F8:96:5A:4D:1C:D8:3F:81:30:5C:8F:03:05
Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial: 010D0C9F432858489E6CD9C9DDE655387F8A34F8
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/0f6241fd-ac1e-3909-8b8f-cbbdd0e7bf62.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 54113
IP address blocks: 140.248.254.0/25 maxlen: 25
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 04 Apr 2025 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6c:d9:c9:dd:e6:55:38:7f:8a:34:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=84eb198a-b7d0-469d-bad6-6704266c8145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:2b:81:74:d1:09:d3:fc:b5:b0:f1:46:3a:e8:
ac:ec:b0:2b:03:ad:eb:b5:a6:dc:5a:dc:f3:1b:bc:
b9:22:5b:dd:b5:c1:3b:d8:bd:bd:7f:e1:04:47:bf:
47:9c:3e:e7:2e:91:50:de:74:22:ca:79:34:03:93:
18:b1:b0:17:be:4d:e8:85:1f:1c:6e:6a:df:46:c4:
b0:64:de:1b:4b:9a:6b:a5:58:6b:02:f3:8a:bf:98:
e5:ff:d6:d0:58:09:77:46:62:6a:f3:c4:d1:e3:83:
d2:eb:ce:b1:e0:9f:85:ad:ed:1a:b0:be:af:b4:51:
09:82:6f:47:b9:4f:ce:72:b2:20:0f:20:fa:b8:9c:
08:39:ca:e1:b4:c1:43:7c:60:2c:03:1c:58:0f:2c:
64:d8:58:cf:7d:70:13:27:71:0e:5d:80:b2:94:b6:
94:31:2a:9e:6a:ff:67:6c:e3:01:1a:59:c4:1f:c3:
30:c8:78:65:24:a2:07:0d:88:3b:bc:90:36:a4:cf:
f5:e9:4f:b4:e5:6d:56:ed:46:8a:50:bb:4a:a6:b4:
19:f6:39:7f:ef:d1:f4:81:03:c8:9b:bf:a5:8d:2b:
8a:2a:65:65:88:85:29:db:c1:14:2f:5e:73:10:b5:
95:11:c0:9e:87:66:57:e8:04:b2:5b:88:d4:5f:93:
b9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:8E:45:67:A6:FB:33:F8:96:5A:4D:1C:D8:3F:81:30:5C:8F:03:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/0f6241fd-ac1e-3909-8b8f-cbbdd0e7bf62.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
X509v3 Authority Key Identifier:
keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
sbgp-ipAddrBlock: critical
IPv4:
140.248.254.0/25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:2f:2f:62:ff:a7:49:8a:fe:88:2f:a3:a0:4f:13:8f:9f:ec:
25:35:89:4c:f8:7a:29:54:bf:19:a8:1d:d5:82:66:8c:a0:43:
92:ed:82:71:d9:57:d3:1a:b0:c4:03:80:90:5a:08:5a:ff:ee:
39:81:11:e6:18:b8:03:f1:84:33:08:15:a6:c5:62:33:39:e6:
d9:71:86:16:dc:e9:c9:1b:ab:30:36:bc:45:c8:6f:fd:0e:bf:
95:06:22:a1:0c:1e:32:29:5d:82:bf:10:b5:30:cc:b1:74:36:
8b:e8:26:4f:43:da:ca:78:36:ad:dd:83:cb:df:fb:24:e4:0f:
a6:38:bb:22:7c:dd:69:cf:14:6c:52:fa:e2:c5:e4:2b:3b:90:
2d:20:93:e5:2c:f4:4a:e5:a5:4f:07:68:d3:32:d5:c4:10:b0:
ab:08:4a:27:57:2a:d5:ba:04:f7:c1:bf:6a:57:1e:d7:8a:90:
3c:76:69:b4:d1:59:2e:a0:ef:72:b8:fb:66:ff:7c:b5:ba:2e:
65:a7:e1:ef:fd:a4:37:08:1c:85:0a:f2:5b:32:dd:77:f5:73:
1d:79:f4:99:cc:69:4e:bb:4d:61:94:f4:7a:97:b8:f3:29:50:
cd:70:00:8a:1d:59:f4:8c:98:5f:94:db:c1:17:66:e4:9a:d6:
fd:f3:51:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 19:26:23 2025 by rpki-client