Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b8e1beb1-e1d5-3a1b-a0e8-5949fead1bb5.roa
File: b8e1beb1-e1d5-3a1b-a0e8-5949fead1bb5.roa (raw, json)
Hash identifier: oBsjLl/MFnrLo7SaccVo+NNsATTajJO60YwMRcGns4k=
Subject key identifier: 97:00:37:A9:07:DD:6E:F1:C7:BD:13:60:91:EE:29:3C:8B:05:71:AD
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848EF61776CB0CAD4546F96A300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b8e1beb1-e1d5-3a1b-a0e8-5949fead1bb5.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 22394
IP address blocks: 174.41.248.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:77:6c:b0:ca:d4:54:6f:96:a3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=db818577-cf00-4a26-9d90-7943b5b7e07a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:44:6d:f3:5b:5a:39:61:b3:cb:ca:43:ac:25:
ab:b5:e4:9b:dd:1f:f0:a7:f8:fd:12:27:07:96:4f:
78:50:c9:9e:d0:94:83:46:32:23:44:d5:3c:b4:47:
ef:02:eb:fd:4e:71:56:16:fb:12:4f:2d:95:35:ae:
ad:d6:86:43:8e:cf:13:a5:a8:86:d4:00:90:3f:df:
c5:f3:f7:75:7e:6e:e3:f9:3c:9f:0b:da:80:dc:35:
bb:ec:ef:1e:05:23:84:74:a7:46:65:cd:4c:5f:2f:
77:6a:04:32:43:d9:74:b9:dc:7d:7f:ee:20:d2:21:
11:5f:6c:c5:32:38:9a:18:3d:67:a4:73:85:68:46:
f8:94:9f:35:c5:f7:d6:f0:75:a7:bb:e5:f2:41:6f:
36:d3:58:5f:26:42:f7:2f:c9:0e:38:34:8e:fa:fa:
da:7a:a3:9f:08:30:82:5e:a0:80:cf:00:e8:c2:82:
bc:ac:6a:08:e7:5d:da:8d:3e:e1:c1:ac:22:8c:dc:
db:79:94:07:4c:9e:19:4e:02:29:2d:c3:58:b8:8d:
a4:0a:c8:16:39:e0:ea:ba:4f:14:fe:88:61:f0:ea:
77:af:be:5b:0e:b3:26:d8:98:c1:dc:ee:1b:2c:62:
d5:bd:20:fc:b4:d9:9f:1a:7d:98:50:77:49:89:57:
30:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:00:37:A9:07:DD:6E:F1:C7:BD:13:60:91:EE:29:3C:8B:05:71:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b8e1beb1-e1d5-3a1b-a0e8-5949fead1bb5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.41.248.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:11:d7:3d:6e:ef:a0:c8:a3:f5:d7:89:40:b6:a5:39:7c:1f:
5d:e2:ac:bf:7d:30:68:e3:8d:7c:22:e4:b1:66:95:84:bd:9f:
73:78:d2:31:ef:1e:d3:f7:33:ef:36:53:d1:1c:10:29:cb:79:
9b:23:b3:7e:12:7c:cf:a5:38:2b:21:4d:5a:da:93:d1:17:c8:
6b:27:49:88:81:85:57:7c:b8:cd:e2:f6:18:2c:43:34:94:f9:
76:77:34:74:1d:d6:2d:86:a5:d9:e5:8a:a6:d0:76:69:f6:43:
9f:c2:65:5f:cb:04:e8:b7:ba:9c:24:18:ca:df:ce:21:bb:93:
be:7e:5e:39:37:67:8d:f5:4b:16:42:df:4a:4b:2d:30:a5:40:
a7:9c:87:20:00:83:75:44:88:0c:ae:a6:bf:42:65:19:b3:90:
dd:68:00:f0:a6:f1:8a:d0:ea:52:9a:e1:45:a2:1c:7c:6e:19:
3e:a2:3d:6b:28:af:6c:9e:fe:da:05:81:67:29:38:50:a8:07:
a3:b5:02:eb:42:49:c6:d2:43:7f:2d:83:92:18:9e:69:ee:90:
bd:15:3f:f5:9e:b0:0d:38:7c:ef:9d:75:a6:06:ef:fb:4e:87:
fa:e7:1a:1d:c9:60:50:66:a3:bf:b8:ee:d9:39:c2:19:81:ab:
da:49:dd:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 07:07:58 2025 by rpki-client