Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cdef32d2-6104-3260-af9a-288481209d08.roa
File: cdef32d2-6104-3260-af9a-288481209d08.roa (raw, json)
Hash identifier: jtDTmbpdZiBHEYsToSW2pdxm328LimBh07grGD5+GYc=
Subject key identifier: D3:53:90:86:EE:0B:83:03:E0:30:B0:D5:D5:BA:68:BB:A3:AF:AB:B4
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584922E8F80ECF6D1FDA08E7EF00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cdef32d2-6104-3260-af9a-288481209d08.roa
Signing time: Mon 10 Mar 2025 01:00:39 +0000
ROA not before: Mon 10 Mar 2025 01:00:39 +0000
ROA not after: Sun 08 Jun 2025 01:00:39 +0000
asID: 6167
IP address blocks: 174.254.160.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:22:e8:f8:0e:cf:6d:1f:da:08:e7:ef:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 10 01:00:39 2025 GMT
Not After : Jun 8 01:00:39 2025 GMT
Subject: CN=0a1b06dc-a6c9-4d55-868b-6aafe73b1cf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8b:7c:89:42:8d:a9:c2:41:b8:30:18:cb:73:
e3:20:57:8c:00:16:f4:d2:58:ab:78:8a:3f:6b:10:
60:1b:0b:c5:55:d0:74:e4:93:ec:aa:19:d7:10:6c:
01:55:09:2a:ef:92:50:38:68:51:15:e9:a2:58:b8:
8b:79:93:ab:15:c3:15:33:01:ac:1a:0f:d4:68:65:
77:25:81:f1:e5:f3:0e:03:9f:a0:46:4a:4d:ec:eb:
8c:0d:7b:35:99:70:f8:13:ad:27:bb:3a:67:d7:60:
bb:5b:d3:0d:5e:9d:49:80:6c:1d:a4:1e:f5:f4:2a:
23:31:f8:8d:2f:52:f1:ec:5d:db:11:2c:40:7f:60:
90:df:27:40:9f:7d:a8:2f:78:14:76:cf:7b:60:ef:
9b:08:66:e6:aa:82:1b:bc:68:e7:4e:0d:c5:dc:9d:
6f:7e:f0:06:af:29:a2:c7:54:23:f8:ec:ba:46:7b:
4d:18:62:ad:6e:f8:bd:7f:af:6b:ad:8f:e0:5f:ae:
97:96:75:e9:83:1e:29:23:75:34:23:fd:77:64:7f:
82:a4:98:41:73:1d:24:64:41:ae:8f:4b:de:c1:72:
9a:f1:29:d4:02:da:dd:97:2c:8d:c9:86:e7:52:94:
58:f2:97:94:1a:04:4a:35:fc:a0:a9:1b:8e:e5:36:
58:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:53:90:86:EE:0B:83:03:E0:30:B0:D5:D5:BA:68:BB:A3:AF:AB:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cdef32d2-6104-3260-af9a-288481209d08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.254.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:a4:a6:14:e1:58:ae:1c:38:94:ca:d1:cb:30:4b:19:21:be:
24:40:80:b6:7c:3b:f0:57:d4:c7:3f:bc:fb:82:22:3b:25:c9:
6e:90:45:85:d5:70:af:f4:b1:94:2d:6a:53:0b:b3:f0:7a:ad:
9a:06:70:0d:fd:71:e6:84:79:5d:94:6f:05:67:0e:bd:55:97:
88:8b:70:42:53:c1:91:04:a8:cc:01:c7:75:d6:67:6c:3c:84:
50:d8:6c:67:b7:e4:ef:3f:79:62:0a:60:96:30:78:dc:23:59:
a5:c1:b7:2b:5c:b5:16:f8:b0:7c:c0:60:76:e7:ab:84:4d:89:
a5:d0:62:13:09:ca:47:e8:80:2b:73:1f:a1:56:ce:dd:69:f6:
7a:c7:dc:e4:ce:51:58:86:a5:af:8b:74:52:07:94:53:1c:2a:
2b:e3:36:17:93:b5:65:ea:55:58:45:14:64:be:81:98:79:ec:
b1:a6:3d:e3:b9:85:3b:8b:87:b9:7b:bd:e2:c7:66:2a:f1:5d:
fa:99:85:17:51:b3:3e:6d:70:39:26:2f:d7:61:6f:f5:dc:b7:
e0:52:31:54:91:61:f3:b4:51:27:a3:b7:ec:d1:1d:9d:70:06:
8d:73:7b:80:a9:6f:90:2f:9e:a5:0d:41:2a:5d:10:2a:25:e3:
ec:c7:0c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 11:17:41 2025 by rpki-client