Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f67391c2-20e4-37c0-ac45-d0c74eab5ae6.roa
File: f67391c2-20e4-37c0-ac45-d0c74eab5ae6.roa (raw, json)
Hash identifier: 8RbCzUH1QIfATpci/Klj7N08o4RoMaOgGZxk4PRAM4E=
Subject key identifier: 32:6A:43:7B:7F:B7:EB:34:CE:4C:1D:AC:BB:9A:38:27:17:49:4E:4F
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858491246FCDBBA43582F1E854200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f67391c2-20e4-37c0-ac45-d0c74eab5ae6.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 701
IP address blocks: 157.130.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:fc:db:ba:43:58:2f:1e:85:42:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=a5e5d2d7-6a7c-42d8-aa49-50bb6142a3f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:87:34:95:1c:1b:86:e8:1d:e0:4b:82:f0:ad:
1e:b9:40:bb:ac:10:39:3f:95:86:ce:7f:11:1b:40:
7e:b6:2f:b5:38:2b:ec:c5:a6:fa:f4:45:68:db:e1:
ea:8e:b0:83:90:55:e7:fb:e8:68:63:8c:28:b7:2f:
c6:32:ad:59:9e:ad:00:82:92:ec:4e:b1:42:70:fa:
ee:11:92:2b:16:ad:8e:00:c6:82:5c:6c:9a:c3:5f:
83:88:77:c1:57:2b:94:85:d6:86:4a:5a:a4:56:b3:
49:85:c4:f2:91:f7:a6:2f:80:9e:e2:3a:54:50:1b:
db:d1:c4:fd:c9:cf:5a:d5:54:60:e1:96:2d:63:51:
d2:0b:73:2e:85:28:a8:37:f5:f0:1c:0e:45:77:c0:
ee:18:c7:9d:54:1e:89:91:78:a1:c1:dd:3d:fa:00:
96:9e:be:ae:20:3a:5e:e8:53:f1:a6:ff:e9:83:74:
b2:2c:76:8c:b1:30:09:fe:61:82:d3:3b:64:a9:43:
23:a7:10:b9:95:85:e1:9d:15:15:51:5e:3b:cd:79:
5f:ea:d0:c0:17:2a:ab:c2:76:02:a5:ae:a0:87:e3:
26:9b:dc:cd:72:64:e2:14:87:df:90:9e:fd:ac:f9:
80:c2:50:d4:8a:9f:46:b3:fe:f6:c6:8f:53:4d:3f:
40:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:6A:43:7B:7F:B7:EB:34:CE:4C:1D:AC:BB:9A:38:27:17:49:4E:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f67391c2-20e4-37c0-ac45-d0c74eab5ae6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
157.130.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:c5:66:fc:2f:f5:c8:b2:a8:6d:2a:72:df:04:ae:63:75:43:
a4:e0:d1:97:fe:57:eb:1b:45:f3:07:bf:8a:5b:a2:e8:d0:45:
fe:7e:b1:80:08:1b:24:2d:24:02:a1:be:af:f9:ee:b2:d1:41:
77:a0:c4:06:5f:28:ee:51:54:dd:fa:6a:0b:bd:7a:95:f2:89:
87:37:0e:26:1a:5d:8a:74:69:6a:7a:aa:c2:e4:c9:f5:4b:7a:
ff:d5:5b:52:c4:4c:d4:94:b0:8c:b9:7c:e6:d3:57:75:08:c0:
75:45:94:7f:3d:33:98:14:15:36:2b:40:d1:e9:d1:01:2b:aa:
55:f0:15:7d:4d:4e:80:db:fe:26:a1:d9:89:db:76:d9:bd:f4:
0d:44:0f:a6:7d:2f:4e:74:7e:70:1f:9d:9d:c9:e7:b5:f9:b1:
21:2a:95:ce:4a:51:14:ff:25:78:1c:63:13:ab:b7:67:72:7d:
4b:28:3d:d9:be:a9:29:e8:14:8b:7e:f2:69:93:ba:62:15:3a:
eb:27:58:b0:8c:e5:c7:13:42:41:b5:34:9e:35:03:27:19:5e:
78:84:9a:a1:7c:fd:39:b9:b1:07:fa:7a:cf:46:6f:37:e9:17:
ed:89:e1:6b:73:58:c4:72:b9:70:dd:3b:97:ac:1e:f9:29:c0:
60:85:da:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 23:24:38 2025 by rpki-client