Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7/0dd95984-d9ac-3818-b720-6721242d6420.roa
File: 0dd95984-d9ac-3818-b720-6721242d6420.roa (raw, json)
Hash identifier: 4NaEGiSqzv6A6tjqVPwiRNZq91xS5y77z6BR7mc/Fb0=
Subject key identifier: B8:9E:BD:2F:77:8B:BD:44:C9:BF:9F:43:F0:BE:48:5D:98:E5:CE:4B
Certificate issuer: /CN=bcb3b598-8d83-4864-818b-f5833b7583e7
Certificate serial: 010D0C9F43285848F5C3DD720D8912918A2D2900
Authority key identifier: 4F:01:F5:7A:26:9C:8E:91:A9:F4:28:0B:53:D7:2A:3C:49:78:43:A6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7/0dd95984-d9ac-3818-b720-6721242d6420.roa
Signing time: Fri 21 Feb 2025 20:54:35 +0000
ROA not before: Fri 21 Feb 2025 20:54:35 +0000
ROA not after: Thu 22 May 2025 19:54:35 +0000
asID: 213993
IP address blocks: 23.134.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7/bcb3b598-8d83-4864-818b-f5833b7583e7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7/bcb3b598-8d83-4864-818b-f5833b7583e7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f5:c3:dd:72:0d:89:12:91:8a:2d:29:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcb3b598-8d83-4864-818b-f5833b7583e7
Validity
Not Before: Feb 21 20:54:35 2025 GMT
Not After : May 22 19:54:35 2025 GMT
Subject: CN=f5c60de7-cd2d-4429-ac2e-6d99ccbf8ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f1:e1:08:d3:ac:d3:06:9f:0f:1e:31:8c:63:
40:59:c3:b7:40:9a:27:2b:a2:80:0c:c3:39:99:ac:
b6:fd:be:7e:de:15:d6:65:a9:e8:ee:a5:31:96:0d:
84:09:df:29:f3:3a:f6:89:4d:b3:52:8d:5c:f9:55:
d4:df:a5:7f:ca:62:aa:5d:6a:e0:31:39:89:20:64:
8c:b3:66:78:8f:23:0b:ac:05:a3:73:0f:94:5b:c4:
e7:7e:c2:3f:08:87:25:f2:4f:ca:aa:c4:bd:87:91:
83:cc:c4:9e:33:07:c6:34:d5:06:3e:b5:b4:ad:c7:
b6:dc:5c:70:b7:e2:28:16:a6:0d:ea:b1:d4:53:62:
10:66:29:56:68:9a:5e:ce:25:10:64:51:22:d3:ae:
8e:76:16:ab:b1:c4:73:40:23:58:36:3d:b0:87:a0:
23:c7:63:22:a4:de:61:41:38:1a:cb:5a:29:1b:63:
f1:4f:42:fd:0a:bf:6d:68:21:ac:53:b7:47:27:52:
bd:53:c4:27:d1:72:cb:9b:f1:50:1a:79:9f:96:7d:
90:4a:15:6c:aa:59:33:e1:3c:88:d9:58:b0:00:ee:
43:67:93:a8:ab:31:37:fd:28:4b:d8:1b:28:47:37:
76:ad:05:51:db:fc:fe:45:bf:67:90:ae:2b:5d:80:
02:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:9E:BD:2F:77:8B:BD:44:C9:BF:9F:43:F0:BE:48:5D:98:E5:CE:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7/0dd95984-d9ac-3818-b720-6721242d6420.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7/bcb3b598-8d83-4864-818b-f5833b7583e7.crl
X509v3 Authority Key Identifier:
keyid:4F:01:F5:7A:26:9C:8E:91:A9:F4:28:0B:53:D7:2A:3C:49:78:43:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7.cer
sbgp-ipAddrBlock: critical
IPv4:
23.134.180.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:ca:8e:79:e0:29:f6:2a:1a:77:97:d1:6f:44:d9:6a:e2:f4:
69:ff:ec:b1:81:90:3d:0d:dd:c0:b1:f3:8b:5d:8f:12:d4:cc:
36:12:43:da:c1:ee:3c:20:f1:32:e5:21:ee:f7:75:f6:18:dc:
96:03:d0:5f:80:a3:c1:c2:cb:ea:11:bd:4c:e7:d5:70:d2:e8:
7b:a1:09:62:e2:34:78:e2:4e:85:7b:57:bf:e4:08:7b:cd:dd:
97:e1:b8:62:14:03:84:10:91:cf:a2:9e:8e:61:de:90:3a:18:
69:77:36:7b:7c:23:e7:ab:ba:d2:65:db:27:88:f2:07:3f:1e:
32:21:0d:8d:96:5d:ca:27:4d:70:6f:f8:51:5d:06:ba:75:5b:
08:0d:3f:da:e7:ce:a2:c5:ca:24:02:c0:63:15:69:6b:84:7c:
79:7f:1b:f3:7f:0a:c1:51:44:09:b8:e7:12:ff:01:1d:63:d5:
30:5a:3e:5d:f1:81:fc:41:4d:be:aa:f7:c9:47:91:75:92:df:
89:12:ec:40:50:a9:ed:b3:25:1e:79:ef:79:9e:0a:cb:59:54:
82:c1:9d:81:3b:19:87:51:84:bd:f7:0b:19:30:3d:6f:d8:c8:
13:73:4a:a0:fb:8c:47:27:bb:3f:21:d6:d1:70:0f:5c:37:e2:
99:4a:23:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:55:57 2025 by rpki-client