Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c371ee8b-4fe1-344a-acdd-fc7e9e2442c7.roa
File: c371ee8b-4fe1-344a-acdd-fc7e9e2442c7.roa (raw, json)
Hash identifier: SQnFlW/hZDNVGl2ajNY+CAgHkeBfuaRdhGNelW/2nZM=
Subject key identifier: 3C:15:41:5D:F9:61:30:9C:66:6D:A6:F8:65:4D:64:C7:02:E1:75:E9
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848DB34B741AC310FA3211A6D80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c371ee8b-4fe1-344a-acdd-fc7e9e2442c7.roa
Signing time: Wed 12 Feb 2025 08:35:08 +0000
ROA not before: Wed 12 Feb 2025 08:35:08 +0000
ROA not after: Tue 13 May 2025 07:35:08 +0000
asID: 15169
IP address blocks: 172.217.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 07 Apr 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:db:34:b7:41:ac:31:0f:a3:21:1a:6d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 12 08:35:08 2025 GMT
Not After : May 13 07:35:08 2025 GMT
Subject: CN=7ec944c6-3b9c-402b-96e0-39ba5fb84f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ad:ba:4d:12:bf:88:3a:6d:1a:00:2c:b7:25:
4b:56:1e:1e:b1:e6:7b:34:48:b9:9d:3b:d9:30:de:
7e:52:7d:6f:22:fd:97:d9:ea:59:2b:65:8d:b6:a1:
22:51:7a:4d:94:2f:b7:f5:f9:c7:fc:7a:35:07:c0:
b4:c5:10:04:16:33:35:d3:d1:53:23:cd:f9:ea:91:
9d:75:da:09:46:fe:1d:e6:b9:b6:8b:56:95:9a:16:
39:fb:0c:19:8f:6a:ad:47:8d:58:6f:21:f5:fd:50:
c9:e2:d1:ca:98:f9:3b:e6:e9:1d:63:c5:10:50:da:
f4:a3:21:95:2d:17:01:c6:ac:74:88:ac:b4:ba:a0:
5f:75:2b:94:78:34:42:ea:46:f5:14:18:5b:cf:91:
d7:b7:f4:aa:3d:b5:3e:46:be:5a:e2:04:d5:27:c2:
6d:21:54:87:7a:1e:0c:f7:9e:0d:49:6c:fc:10:50:
c2:9c:75:a8:d9:da:ee:4a:76:a0:ec:44:40:96:5e:
f9:69:e6:38:15:32:47:95:9a:2f:d9:48:22:11:21:
cb:1d:0b:94:1e:1d:43:29:5b:fe:2e:72:2a:06:7f:
1f:68:4a:ec:31:4b:a0:49:92:e0:af:f0:4b:ef:33:
21:e6:40:44:95:b6:aa:00:cc:3d:2a:a6:72:55:db:
6a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:15:41:5D:F9:61:30:9C:66:6D:A6:F8:65:4D:64:C7:02:E1:75:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c371ee8b-4fe1-344a-acdd-fc7e9e2442c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.217.78.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:23:b9:ec:30:05:9e:ae:a2:e1:3d:a8:c9:f3:96:b6:20:e9:
e9:d0:4e:bb:df:ee:cd:39:41:c4:94:ad:18:bc:33:57:5f:59:
41:b1:3b:d1:68:4f:68:80:b5:c5:b8:6d:8a:5d:2b:96:38:55:
d2:40:84:76:39:20:cd:51:19:54:f3:04:d2:14:aa:6b:ff:96:
bf:5d:9a:80:2b:cc:97:69:cf:a0:dd:f4:49:ad:f7:1e:b0:d9:
36:86:fa:79:b4:60:e4:06:0e:32:df:f7:4a:5c:dd:f3:1f:05:
7d:a9:36:16:c1:53:25:05:fc:68:7c:39:c6:3b:a7:d4:10:48:
2f:fb:af:54:ac:8e:05:fd:d9:2f:b0:87:3d:84:74:b6:f4:85:
25:ea:44:a7:23:e7:28:8c:3d:72:1a:80:77:1d:d9:36:d6:13:
bd:c2:8f:86:cd:31:a4:77:d9:f6:55:b3:e8:f9:e5:13:f3:02:
46:fa:56:c3:ce:d6:6c:41:d2:1e:f3:44:8e:aa:65:52:2b:d7:
82:59:f3:aa:90:09:1f:61:79:ef:12:01:66:a4:03:09:54:0d:
58:6a:c8:ab:61:1e:25:dd:ab:8d:fd:e5:ae:e7:77:cc:4a:b0:
96:e4:50:3d:28:24:3a:3c:ae:f9:58:58:e9:b5:8c:a9:f9:02:
17:a2:ec:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:27:51 2025 by rpki-client