Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/03e62a4d-ddf2-3740-b88e-e3944323e47d.roa
File: 03e62a4d-ddf2-3740-b88e-e3944323e47d.roa (raw, json)
Hash identifier: AGERYfkGe52osO2Q8NsVZzQXHBLhpsPlbVEakc+uxbs=
Subject key identifier: F4:25:B8:D7:D2:B3:26:BB:E0:D9:E8:D4:93:FC:98:D3:41:6A:1F:1D
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584915115F1FA24EA62288A06B80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/03e62a4d-ddf2-3740-b88e-e3944323e47d.roa
Signing time: Wed 05 Mar 2025 02:00:40 +0000
ROA not before: Wed 05 Mar 2025 02:00:40 +0000
ROA not after: Tue 03 Jun 2025 01:00:40 +0000
asID: 20940
IP address blocks: 184.85.112.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 09 Apr 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:15:11:5f:1f:a2:4e:a6:22:88:a0:6b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 5 02:00:40 2025 GMT
Not After : Jun 3 01:00:40 2025 GMT
Subject: CN=c0062a41-e6c9-4e12-8f7b-c5d5d6c97e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:87:bc:fb:c6:bc:00:bc:f3:97:3d:6b:30:94:
1b:55:6b:a9:2a:c9:4d:23:b4:5d:18:66:4e:0d:fa:
20:2d:64:d4:26:82:c4:e3:77:54:a4:d2:df:20:40:
ad:23:d5:fc:b1:7f:8f:2b:ae:4a:1d:f4:0c:fb:03:
b1:82:6c:b2:b1:10:b8:73:44:35:e3:a0:f2:9b:d6:
36:04:bf:1d:21:fa:f2:32:79:55:21:56:87:bb:09:
be:e9:64:bd:6e:9b:3f:fa:34:0e:38:7b:92:f0:4a:
aa:e6:82:77:c7:29:ee:3b:82:39:62:c1:c1:6e:66:
a0:fe:66:e3:2f:54:db:77:c6:5a:ff:15:0e:d1:02:
7c:45:09:f0:0f:51:5b:00:ae:a3:4b:e6:40:31:a1:
df:f5:d6:6b:6a:13:c5:f7:5a:85:07:bc:65:59:f3:
01:5f:34:14:fb:e3:e5:61:37:39:7a:68:54:fa:df:
51:25:ac:b2:85:05:52:c3:04:fa:8d:7f:00:89:31:
f8:61:a3:02:15:fb:06:b4:61:a2:91:b0:7a:6e:da:
16:f1:94:86:e9:83:11:09:19:5b:62:cb:23:74:a0:
c1:3a:a7:03:ac:14:23:b1:7b:c5:0c:47:b9:98:5c:
5f:54:7c:c8:0a:a1:e9:97:fd:db:ce:b6:ed:95:d2:
75:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:25:B8:D7:D2:B3:26:BB:E0:D9:E8:D4:93:FC:98:D3:41:6A:1F:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/03e62a4d-ddf2-3740-b88e-e3944323e47d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
184.85.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:05:1c:08:dc:a3:59:9d:73:36:1d:e5:09:7a:ec:b1:9e:2b:
a1:44:21:86:f9:f9:18:b9:86:b1:b9:3e:03:27:c9:c5:e6:95:
e1:99:1a:ed:67:5b:19:b4:18:b5:3a:cd:30:08:d0:9d:a5:5e:
9f:7d:2d:9f:f2:2d:81:2a:14:a6:61:fb:6b:40:f6:1f:9f:92:
c3:f6:33:90:f3:85:ff:61:6b:5a:53:b8:ce:a1:86:39:b3:9a:
46:fa:39:55:a4:17:b4:c3:12:97:a9:4a:1e:94:6a:90:c1:b3:
47:9b:3f:f0:d8:0a:9c:02:31:24:8c:a5:35:a8:14:ce:9e:6b:
13:fe:93:cb:35:04:26:8b:d9:ac:bb:33:20:2e:7f:fb:82:9f:
cb:10:da:2d:6a:2a:90:a2:d2:7e:df:03:07:a2:ef:7b:21:83:
c2:ed:28:13:47:e4:20:f6:d7:41:f0:39:aa:df:d8:1d:6f:3f:
4a:f2:aa:ff:12:28:85:49:b7:cb:5f:e2:bf:af:36:85:02:c1:
d8:7f:3c:82:cb:fe:6f:37:16:bf:7e:88:12:07:59:8d:04:22:
cf:23:d6:7d:c2:c6:9b:26:d4:91:f1:6b:b3:af:f4:94:ec:f1:
bb:c3:34:97:fc:27:e8:a7:8f:3f:bc:3b:f3:eb:f5:ec:84:81:
92:05:98:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:16:46 2025 by rpki-client