Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/0f1294a3-98a4-3ebb-81b4-7f1a9a1d27c5.roa
File: 0f1294a3-98a4-3ebb-81b4-7f1a9a1d27c5.roa (raw, json)
Hash identifier: qaeIPnW0YdQBXZ09DbYtetWavQJitceaoFWuZFBhII4=
Subject key identifier: 95:4D:61:3C:D6:83:53:B2:3F:41:E2:B9:5E:B9:ED:57:82:BB:1C:E2
Certificate issuer: /CN=45de47ca-0b52-44ab-af26-767d8a671192
Certificate serial: 010D0C9F43285848DA70FEBA237D02E4321574C2
Authority key identifier: C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/0f1294a3-98a4-3ebb-81b4-7f1a9a1d27c5.roa
Signing time: Wed 12 Feb 2025 02:00:39 +0000
ROA not before: Wed 12 Feb 2025 02:00:39 +0000
ROA not after: Tue 13 May 2025 01:00:39 +0000
asID: 5645
IP address blocks: 157.52.0.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 16 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:da:70:fe:ba:23:7d:02:e4:32:15:74:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45de47ca-0b52-44ab-af26-767d8a671192
Validity
Not Before: Feb 12 02:00:39 2025 GMT
Not After : May 13 01:00:39 2025 GMT
Subject: CN=46e26260-87fe-47d9-bc7c-9e9c2fc2b209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ab:6d:f0:81:ef:38:a4:03:3f:2a:56:2d:32:
a1:b5:90:4c:a2:72:e6:cb:e3:13:ac:08:dc:be:7f:
18:1f:0c:c5:e0:fd:df:d4:0c:41:76:3a:a2:32:de:
a2:08:eb:a7:21:18:24:39:ea:79:4a:c3:0c:3b:4e:
3f:30:e0:a1:c6:1e:9e:bc:62:1b:50:c7:10:d9:00:
cd:a0:a8:33:19:ff:4e:a7:41:40:ea:1f:d2:e1:ec:
66:47:9f:94:9c:18:19:32:19:a2:8d:34:f9:ef:da:
69:f2:6e:59:d4:fb:dd:37:2f:5f:19:79:81:1c:69:
49:f9:fa:5e:07:e0:98:f9:51:04:7b:0a:4d:cd:ad:
f9:2f:6c:11:44:da:6b:29:a4:7b:b6:37:24:43:ef:
69:0f:fb:eb:df:5b:dd:5a:f5:8e:2f:72:82:4d:1f:
f8:42:dd:d9:1d:fb:55:55:7d:43:17:c1:7a:61:4e:
0d:cb:45:4e:62:cc:9d:0b:ff:79:8b:d2:05:f4:b9:
cd:bc:1a:5a:6b:1d:84:0d:61:2a:04:e3:68:a1:70:
08:91:9a:ea:15:0e:93:68:1b:a9:21:63:b7:bc:0a:
24:31:66:ab:cb:fe:e7:85:f3:b2:13:d3:7a:9a:e9:
da:17:97:bb:b3:f5:27:47:31:40:2b:f8:e0:42:0c:
34:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:4D:61:3C:D6:83:53:B2:3F:41:E2:B9:5E:B9:ED:57:82:BB:1C:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/0f1294a3-98a4-3ebb-81b4-7f1a9a1d27c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl
X509v3 Authority Key Identifier:
keyid:C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer
sbgp-ipAddrBlock: critical
IPv4:
157.52.0.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:f8:75:90:cd:11:50:f4:dc:dc:32:69:a9:d3:10:43:af:8a:
e7:eb:9d:ae:c0:6b:c3:1e:1c:02:7a:7e:16:79:b4:d5:f9:65:
00:7a:27:e5:28:ad:72:05:17:3a:57:45:a8:bf:cc:ac:6d:4d:
0b:7f:6c:af:78:bd:a7:da:af:fb:73:dd:fe:da:0c:06:04:15:
ad:61:c5:1d:65:bb:49:02:ff:88:ef:1b:f5:fa:19:a7:fa:a4:
73:48:43:c4:81:b2:d8:28:8f:22:13:32:36:c0:e9:99:84:de:
0f:c3:07:a3:4b:87:1b:7f:f0:66:fb:77:74:37:73:df:be:97:
0a:64:43:3f:ab:f3:0b:85:e7:90:e8:c7:61:19:73:8a:9d:72:
58:2f:6b:62:5f:aa:b7:f6:b7:ba:1f:2c:12:4d:63:cd:49:1b:
73:b3:6f:6b:c2:7c:6d:f1:2e:06:38:85:eb:99:ce:fc:75:75:
4b:0f:52:eb:f1:ae:12:53:33:5c:97:c5:d7:30:50:f4:04:05:
64:d1:2d:4a:ea:99:a5:73:47:2d:40:5b:ef:7f:94:2c:98:0c:
4e:94:07:ca:64:cb:63:c2:09:c6:2d:3e:ab:7a:e0:8a:d8:54:
4c:4c:26:ec:fd:4e:d1:bb:6e:ab:81:a7:40:83:82:68:40:dc:
dc:3c:46:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:57:22 2025 by rpki-client