Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/d7af2784-e0b4-3602-b904-7421484b5dad.roa
File: d7af2784-e0b4-3602-b904-7421484b5dad.roa (raw, json)
Hash identifier: /5KhexL2Vz//YMBh2ewze50DYOw00ZUlK5Tsc0c674U=
Subject key identifier: 7F:6F:F1:79:24:2F:D9:99:32:A3:86:1D:C5:9D:A7:BD:4F:08:7B:79
Certificate issuer: /CN=1a90933e-2005-4c33-ae3f-744b7b70ed7c
Certificate serial: 010D0C9F43285848EF615E0970F3A98FE26C9E80
Authority key identifier: D4:74:AB:93:77:F0:FA:3C:14:E8:78:A8:8C:F7:C0:43:24:37:68:E9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/d7af2784-e0b4-3602-b904-7421484b5dad.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 394667
IP address blocks: 52.129.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/1a90933e-2005-4c33-ae3f-744b7b70ed7c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/1a90933e-2005-4c33-ae3f-744b7b70ed7c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 09 Apr 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:5e:09:70:f3:a9:8f:e2:6c:9e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a90933e-2005-4c33-ae3f-744b7b70ed7c
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=f2a53903-8758-40a0-9f7b-861f8413bb86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:97:89:8b:6d:de:db:47:f9:bd:f5:e7:2b:fb:
65:af:5d:4b:05:da:35:83:a9:6a:08:ba:3f:87:0c:
81:4c:fe:12:f2:ca:69:96:d4:ff:80:e9:40:f9:0d:
c1:3a:b6:fd:20:11:b7:37:f9:44:6a:ca:b5:a9:df:
ac:85:92:2e:26:d8:56:de:91:f6:85:fa:e4:b7:73:
ae:39:41:d4:a8:03:ea:64:0d:a6:77:7b:a0:bc:d8:
da:50:a5:1e:92:91:c0:a2:5e:05:3e:0c:84:9a:f4:
9b:77:1a:85:e6:8f:1e:77:3c:48:e7:44:74:e3:f3:
7b:a3:c8:2b:03:fe:08:b2:42:9a:83:e7:14:37:fc:
bf:81:87:16:c9:84:d7:3f:e7:a9:a6:0f:2c:42:a7:
3e:48:d3:4d:e8:b0:9e:59:60:c6:56:3a:0d:03:03:
ee:a3:20:aa:ac:93:7a:5a:47:34:45:c3:10:49:ff:
97:b1:32:cd:5f:83:ba:ae:14:eb:4f:a3:fc:6d:69:
6a:67:50:09:ba:93:03:1a:db:f2:3c:14:86:e3:9a:
4e:ca:bf:42:95:07:09:db:7e:ec:a0:84:cb:b9:6c:
38:4f:4e:b1:8f:9a:80:d9:bf:38:ba:81:e8:d8:40:
c3:53:34:55:3b:9c:cb:7e:58:44:41:cc:3e:f1:2d:
06:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:6F:F1:79:24:2F:D9:99:32:A3:86:1D:C5:9D:A7:BD:4F:08:7B:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/d7af2784-e0b4-3602-b904-7421484b5dad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/1a90933e-2005-4c33-ae3f-744b7b70ed7c.crl
X509v3 Authority Key Identifier:
keyid:D4:74:AB:93:77:F0:FA:3C:14:E8:78:A8:8C:F7:C0:43:24:37:68:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c.cer
sbgp-ipAddrBlock: critical
IPv4:
52.129.34.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:5b:c9:81:f5:10:14:cd:8e:a0:60:1d:d0:c5:21:b1:03:32:
1e:1b:d7:ac:42:f1:c2:5d:c8:c1:62:f8:30:a9:7f:b1:0e:cb:
95:f3:cf:88:ab:8b:5f:8b:36:38:3e:4f:fc:52:e3:6c:0e:2e:
24:98:1b:ae:38:70:d1:c4:ca:2c:2a:eb:dc:3c:87:f0:60:73:
b7:dd:80:f5:d4:35:4d:24:60:7b:db:7a:a7:16:af:69:1f:be:
1f:a0:2c:a9:22:ea:b4:f3:34:f9:8b:58:82:5f:56:77:c3:43:
41:21:0d:c0:c1:d3:93:5a:27:19:5f:2b:10:97:22:4c:6c:5f:
34:6c:d8:07:73:ca:43:23:c9:c1:f4:db:38:db:7b:36:01:02:
2e:eb:03:cc:66:e3:29:60:c5:c2:db:e2:4e:d5:c4:69:3d:57:
d5:0b:2b:4c:93:53:79:ed:d9:eb:5e:13:ee:a8:9f:4f:4e:55:
db:d5:7b:64:56:d2:61:20:f5:53:ae:54:58:fa:ae:a2:71:dc:
3c:f4:cf:56:ca:a9:6a:ec:5b:3c:97:ad:b0:15:9e:83:f2:e5:
fa:6d:21:0a:de:28:15:e2:45:bb:e4:a7:30:d0:10:82:91:1d:
da:63:e7:67:7a:bf:d0:0b:91:64:ec:85:de:38:fa:22:6b:1b:
70:b1:ab:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 19:06:56 2025 by rpki-client