Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2cde7c79-ecb1-32e5-ad68-4e56bb525fe3.roa
File: 2cde7c79-ecb1-32e5-ad68-4e56bb525fe3.roa (raw, json)
Hash identifier: kto3SBlKCbRNP3DV3Jlx1ClqnopXKDnNH2lyhhLuf18=
Subject key identifier: DE:78:55:EF:CB:F7:7C:BF:87:6F:71:8A:B4:5C:68:37:08:FF:7B:15
Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial: 010D0C9F43285849192D171BC4AEFD63EBAA5380
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2cde7c79-ecb1-32e5-ad68-4e56bb525fe3.roa
Signing time: Thu 06 Mar 2025 13:19:53 +0000
ROA not before: Thu 06 Mar 2025 13:19:53 +0000
ROA not after: Wed 04 Jun 2025 12:19:53 +0000
asID: 207266
IP address blocks: 65.22.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 17 Mar 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:19:2d:17:1b:c4:ae:fd:63:eb:aa:53:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
Validity
Not Before: Mar 6 13:19:53 2025 GMT
Not After : Jun 4 12:19:53 2025 GMT
Subject: CN=0665f369-b90d-4758-9159-9fa4a6f1bc75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1d:f6:3f:7e:5b:91:79:86:a6:a0:69:fb:05:
8b:57:4e:c7:c5:a0:35:ef:e8:36:9e:da:f6:e4:7d:
85:b2:11:4d:d7:29:cd:f1:15:9b:ea:62:e3:f1:62:
08:c0:e0:6b:d8:d8:76:f7:2e:2d:2f:3d:96:eb:4a:
e1:7d:2f:80:8a:24:02:42:da:f5:ce:81:69:4f:97:
10:2e:a1:65:3a:03:d0:7e:fc:f7:21:da:40:0f:10:
cf:f9:56:8c:bd:e7:c1:dd:d7:a8:b4:18:21:49:98:
ac:12:c8:5b:d4:26:1c:7b:b2:07:e8:16:c6:c1:77:
76:11:01:c0:f0:5b:71:ff:3d:41:63:ec:33:b9:0d:
7f:38:46:be:5c:06:a0:a7:66:2c:f3:9e:9f:db:86:
c7:d1:ac:59:6e:8d:4f:55:7d:ec:07:36:da:79:66:
4b:68:20:98:b7:12:b1:0c:14:8b:f4:de:aa:76:a2:
76:1d:f7:97:17:79:e4:8f:8c:32:61:c9:ba:ca:7e:
91:7f:2e:40:06:88:64:50:b7:d5:3c:90:d3:65:1e:
11:e0:4a:86:b5:de:d1:7e:e5:46:4e:1a:7e:1e:36:
55:a4:7d:65:0f:d6:15:58:4e:ad:31:56:64:c0:e2:
f4:fc:cd:5c:1d:3d:fe:f1:f5:53:cd:13:14:78:98:
71:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:78:55:EF:CB:F7:7C:BF:87:6F:71:8A:B4:5C:68:37:08:FF:7B:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2cde7c79-ecb1-32e5-ad68-4e56bb525fe3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
X509v3 Authority Key Identifier:
keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
sbgp-ipAddrBlock: critical
IPv4:
65.22.23.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:99:df:6e:f6:1f:82:de:95:f1:36:3f:4a:31:f5:b6:04:e6:
ba:40:59:62:be:b8:f3:33:bd:2e:c1:ff:d8:a5:32:05:81:17:
a7:29:11:f4:dc:97:c9:f1:e6:85:c2:8a:6e:c1:7a:80:ea:b5:
ad:af:19:df:c3:5c:83:93:02:e8:90:60:de:d7:b3:01:39:96:
ee:f4:53:75:6e:7d:0a:c0:37:25:6f:47:e6:01:d3:c4:8c:da:
f5:a0:5e:e4:a9:d1:a0:b3:6e:6a:f7:d7:a0:82:61:d4:a0:cc:
ce:7a:d0:2e:d7:15:8b:e4:52:1c:d5:ab:5d:f4:03:25:05:b8:
6d:f5:0c:c4:a1:65:c4:dd:fc:f7:e6:b1:14:a7:9c:96:e8:c1:
2f:48:04:3f:a3:a7:6d:1d:8b:07:e7:dd:af:f7:b0:5d:3e:d8:
65:69:13:16:06:78:f8:6f:23:f1:19:57:88:97:36:4c:3b:cb:
5b:43:34:14:2f:09:53:59:af:78:66:ec:64:a5:72:5a:61:68:
e2:1a:12:ad:7c:b6:9a:0b:89:c2:eb:8f:9f:89:e8:a3:46:ec:
4d:8e:1d:ea:31:56:16:c4:c4:30:48:17:df:e4:89:57:bf:c5:
f5:8b:09:4f:0d:9d:ad:6f:6e:f8:50:a7:b0:1d:66:d0:d1:7b:
ba:46:b6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 15 21:49:25 2025 by rpki-client