Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/6e8e5099-ccc7-3bb8-a37e-64925913851a.roa
File: 6e8e5099-ccc7-3bb8-a37e-64925913851a.roa (raw, json)
Hash identifier: eNlL9JtQx9HHeSTBopNYRxnHVq/Mt+JW8p7sfib9Hwo=
Subject key identifier: BE:37:50:1F:99:90:F1:84:38:48:10:8E:61:FA:AA:58:3E:62:05:F9
Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial: 010D0C9F4328584953C43090FC9B6E8ADAA8C980
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/6e8e5099-ccc7-3bb8-a37e-64925913851a.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 54113
IP address blocks: 140.248.248.0/25 maxlen: 25
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 05 Apr 2025 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:30:90:fc:9b:6e:8a:da:a8:c9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=c5a1fd1f-5068-41f5-8b4b-b6b4ebe73b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e8:51:05:71:55:ff:5f:ec:61:ed:ef:8e:7e:
0d:be:58:17:c9:82:ab:90:83:09:63:b3:34:a0:98:
7b:00:81:58:a3:39:b9:f1:77:d0:1a:99:8a:3b:cd:
37:34:d9:7e:61:a1:f5:6c:99:63:74:3a:d2:2a:88:
3b:5b:5e:7e:6c:41:75:f1:7c:a2:b8:50:df:c4:01:
e1:d9:d1:f5:9d:23:cb:dc:0c:22:bc:c3:bb:16:e6:
44:2b:d6:f9:03:79:85:b7:2f:08:8d:a7:22:14:69:
cb:b6:25:01:0a:06:e9:61:59:67:e2:d2:79:11:6f:
12:4b:3f:b2:ef:50:4b:1a:c8:0b:0c:a1:0c:0d:13:
5b:39:10:95:be:f0:fd:00:f8:0f:1d:a1:8d:b4:20:
44:ba:4a:c1:40:9e:57:b7:67:22:ab:a0:3f:ff:27:
37:e3:64:27:f7:87:c6:b9:11:e7:7d:7f:75:2f:bf:
9b:ba:a6:18:92:19:92:66:42:93:13:79:17:66:a5:
f9:12:8d:1b:51:28:1e:f3:85:3a:d3:6a:c8:3e:ab:
e4:7c:00:9a:da:2a:e6:7e:19:83:76:bb:f2:e2:05:
eb:4c:c5:99:4b:8d:3a:90:8c:43:b6:54:6e:57:7f:
33:36:d6:28:59:bd:05:f0:dc:50:30:85:fc:a4:4c:
bb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:37:50:1F:99:90:F1:84:38:48:10:8E:61:FA:AA:58:3E:62:05:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/6e8e5099-ccc7-3bb8-a37e-64925913851a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
X509v3 Authority Key Identifier:
keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
sbgp-ipAddrBlock: critical
IPv4:
140.248.248.0/25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:c6:f5:92:cd:4d:c5:35:25:af:02:9c:20:4a:54:e3:74:5f:
d3:d7:ff:61:9e:06:7f:c7:0a:46:70:cc:26:ab:ea:2a:1b:62:
9d:c8:1d:77:26:6f:25:c1:cb:27:f8:65:59:11:c2:2c:f5:27:
f4:be:0c:78:00:5f:79:41:ac:e5:3e:bd:dd:fa:5f:f7:58:02:
29:61:d6:91:29:a8:d7:68:27:c9:70:75:e3:e1:94:b8:d0:59:
dc:33:b6:58:9e:58:18:9b:fa:34:c4:76:63:21:a3:f0:ba:20:
8c:5a:c7:38:72:d3:a7:11:fe:b0:c3:56:85:95:d1:e6:4b:f2:
d0:5d:23:5c:b8:34:7b:51:0f:2d:cc:26:98:ba:e4:b8:08:24:
47:32:86:06:57:d8:5c:bd:d4:ff:d4:cc:47:5d:24:72:7d:be:
17:5c:4b:b4:2c:d8:eb:8b:47:cd:cc:f7:26:3c:9f:38:f5:c3:
e9:21:ad:63:d8:ec:da:66:16:5c:58:f9:85:cf:bc:bf:2b:6f:
d2:5d:e1:ad:77:48:b4:d6:c3:54:40:71:8f:0c:3b:94:37:4d:
2d:42:ef:d6:a2:7f:49:b9:39:5d:69:5b:ef:c3:25:f5:40:8a:
22:62:3e:8f:bc:f6:d5:4a:50:cb:7c:75:9b:45:8b:6e:ba:0f:
c3:24:b9:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 13:38:26 2025 by rpki-client