Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35ff11e1-7841-385b-9a1d-a6b4ca25098a.roa
File: 35ff11e1-7841-385b-9a1d-a6b4ca25098a.roa (raw, json)
Hash identifier: EUBMWLibE5ZkdR0Si7V0CwjhI31nByKC5RDG7iPsw5c=
Subject key identifier: DC:8D:40:96:5C:44:ED:B4:7C:2E:20:64:3D:8B:CA:2B:D1:3D:36:14
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848EF616EF5E757258632E57080
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35ff11e1-7841-385b-9a1d-a6b4ca25098a.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 22394
IP address blocks: 174.41.192.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:6e:f5:e7:57:25:86:32:e5:70:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=1ab6ad0a-71c4-408e-a97d-38a67e621a46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0a:b4:ec:0b:cd:f2:a9:7b:26:bc:2e:0e:22:
24:b3:75:4a:2e:95:eb:0a:ca:45:2b:c3:90:37:a7:
db:c3:21:7d:38:29:6f:12:20:5d:03:6e:24:80:df:
c3:27:02:da:d6:af:ca:5b:8e:8c:72:35:eb:ae:53:
71:cb:4d:4f:c4:03:d4:17:b7:e0:d8:a2:5b:e4:b2:
f0:46:06:63:08:f4:5c:42:67:e9:14:b3:b2:bd:cd:
05:bc:06:c7:b6:52:61:32:be:76:6a:88:c3:f7:f9:
cc:b9:64:00:4f:23:99:63:a5:e8:52:af:1c:be:4b:
f9:f4:ca:1d:a4:c7:b4:35:68:96:0e:a4:99:e4:be:
8d:5a:34:90:6e:14:08:2d:a4:3b:de:aa:85:67:a4:
68:ca:18:78:8d:5d:e7:e4:7d:6b:55:2b:ff:17:10:
3f:ee:da:74:fa:9f:fc:5c:0b:da:58:c9:da:42:ed:
85:01:4c:e8:d1:2a:7f:79:6b:73:26:f1:be:21:40:
cb:39:e9:bc:3f:d0:3c:2e:d4:5e:ce:34:0d:91:da:
75:f9:d3:b9:71:b4:39:39:40:7b:a3:98:f5:58:e5:
22:19:50:fe:b8:07:bc:2f:84:fa:2d:fa:35:c7:dc:
74:4f:4f:b6:ad:80:7c:66:18:6e:41:76:af:ab:1b:
66:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:8D:40:96:5C:44:ED:B4:7C:2E:20:64:3D:8B:CA:2B:D1:3D:36:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35ff11e1-7841-385b-9a1d-a6b4ca25098a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.41.192.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:84:ab:6e:68:10:61:f7:1a:cc:30:f5:81:44:fd:99:d7:f4:
af:2e:27:41:81:87:fa:65:e7:bd:3c:3d:c7:41:41:b2:22:56:
c4:45:bd:cc:af:74:ae:4a:69:85:21:67:af:6a:27:59:c1:c7:
c0:35:ff:58:b0:e5:7b:9c:aa:29:ac:fa:37:46:e2:64:3c:95:
3e:ef:fd:ec:01:9f:f4:1a:f6:dc:0d:62:57:0a:42:e7:d5:6f:
43:3f:6d:33:75:04:8f:ed:87:a1:e7:01:c9:cf:a2:d2:1b:96:
ee:ec:85:ec:11:7c:2f:73:14:bd:fe:cc:cf:6a:70:22:a2:e4:
cd:3e:f7:17:28:07:85:5f:82:9c:76:79:e4:a9:d2:fd:b4:01:
e3:44:3b:1b:9e:cb:de:4b:36:f3:ee:37:7d:bc:d2:a1:eb:9f:
36:a9:55:46:7f:c9:6d:a6:ff:20:f3:8e:79:01:22:ac:02:65:
61:98:d8:cc:db:4f:ce:45:ed:90:6d:ac:5b:f4:f6:ab:25:db:
1b:f5:1c:4f:a4:78:cf:d8:4e:0d:b6:c4:c2:3f:ab:1d:65:63:
b9:3d:e5:74:59:1a:9e:30:55:29:83:11:98:8b:3a:30:21:f1:
fe:7b:1f:32:fd:70:d7:ab:d0:76:1b:3c:8e:ca:53:70:5a:e4:
92:ee:54:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 02:14:29 2025 by rpki-client