Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/21fb089b-7a3f-3833-9fd1-3e05fc9ebe04.roa
File: 21fb089b-7a3f-3833-9fd1-3e05fc9ebe04.roa (raw, json)
Hash identifier: 1TLKJlpcyZrVULsBokqRS3rLJuW5+W849FlUpQbuDCg=
Subject key identifier: F5:03:ED:21:65:B0:CB:B7:4E:EA:18:81:BC:ED:4B:00:AA:DC:2D:4D
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C582190E7CD56F2D43E7D2C0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/21fb089b-7a3f-3833-9fd1-3e05fc9ebe04.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 15169
IP address blocks: 142.250.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 07 Apr 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:82:19:0e:7c:d5:6f:2d:43:e7:d2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=79e46c8a-ae1d-4951-a444-6ac032d773a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:71:15:cf:2c:70:91:b5:46:81:25:88:33:e5:
c3:82:bb:78:75:9d:e7:62:cd:ed:5e:da:3d:b9:0f:
81:df:28:66:98:81:6b:40:b8:6e:50:c0:4a:dd:c6:
2e:30:8d:61:3c:f2:6c:ab:e3:0b:6f:18:10:51:77:
db:bb:e1:ec:06:f4:f4:94:3a:91:8b:1e:72:99:32:
49:ea:ff:d5:62:bd:54:fc:62:6b:3f:41:91:9a:76:
fb:e6:40:c7:51:80:f9:81:34:fa:a8:4f:81:a9:6d:
55:d8:4b:9f:1b:48:da:ce:1a:6a:68:f2:d3:1d:a9:
fe:ea:3d:e4:16:b8:41:8f:70:76:c0:8f:b8:66:a1:
eb:13:6d:36:38:f7:da:48:49:0f:86:76:2f:fb:48:
eb:fc:4e:c8:e3:dc:de:a3:83:24:1b:c3:11:6e:2d:
43:67:89:c3:84:80:7c:fe:6d:e9:b9:47:a6:09:53:
87:2c:54:4c:17:c3:c9:e8:83:9f:9d:dc:f4:2e:7a:
5f:2a:47:ae:bf:0f:3c:e0:51:d2:24:4b:ec:a4:b4:
29:48:9c:52:81:c7:5a:2e:ee:f2:bd:95:dc:9e:89:
f1:b5:14:d9:f2:e4:c2:d8:04:7c:cb:fc:e2:f6:07:
33:fc:91:9a:2a:5e:a6:71:3d:35:87:18:69:19:7e:
5d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:03:ED:21:65:B0:CB:B7:4E:EA:18:81:BC:ED:4B:00:AA:DC:2D:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/21fb089b-7a3f-3833-9fd1-3e05fc9ebe04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.80.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:4f:cc:2f:eb:ba:36:29:6f:54:6c:90:3e:a5:43:11:76:9f:
8f:08:32:64:4e:d8:26:82:63:9d:f4:0b:c2:c3:18:60:a5:95:
ad:7e:c7:83:80:eb:21:d7:22:06:be:d8:44:13:5c:21:c8:26:
56:61:23:5a:62:82:a4:4f:21:43:02:f7:ec:37:30:0f:24:a2:
56:8e:ae:08:52:09:af:32:47:01:f5:e4:88:18:a6:90:b8:90:
ed:61:ce:ca:3b:f3:68:9d:96:92:ad:86:c8:1a:67:d2:a1:ba:
2b:e2:de:21:eb:87:08:40:02:07:dc:8f:79:ad:53:d5:77:36:
ff:86:62:5e:09:2e:d7:bf:64:44:90:7e:42:3c:3d:08:4c:81:
5c:ee:74:55:8b:1b:6b:75:ac:c2:72:b5:9c:c0:a1:9e:07:d9:
69:68:25:95:32:f5:12:32:dc:e6:4f:32:3f:07:b9:bb:e2:c2:
47:57:aa:74:11:12:58:94:2d:94:3e:76:e6:0f:ce:49:c2:14:
09:3a:13:c8:e4:c4:91:6a:da:74:9f:7e:fb:b2:76:fe:ac:0f:
56:4c:9e:a4:bb:7c:bf:fa:47:53:dc:a9:a0:be:32:39:53:d4:
1f:be:04:95:00:32:ce:c3:e0:2a:ed:85:b5:d2:61:f4:0e:0f:
90:f4:0f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:28:50 2025 by rpki-client