Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/72f56d1d-6f40-4e54-b467-65c3bb8f12bb/0a8363db-a781-39c6-810b-e2d0e80f5a55.roa
File: 0a8363db-a781-39c6-810b-e2d0e80f5a55.roa (raw, json)
Hash identifier: BRKStITnfVih91qvuQXX+0zk8pQgw9wtZTMU8iIifp4=
Subject key identifier: 53:A8:0C:20:95:30:AB:37:22:24:E0:73:1B:87:BB:95:01:14:EC:BE
Certificate issuer: /CN=72f56d1d-6f40-4e54-b467-65c3bb8f12bb
Certificate serial: 010D0C9F432858497C3EEBBAF7F249B67E41E280
Authority key identifier: BD:CA:DE:94:F2:56:FE:7D:DD:66:E4:C0:CB:B1:19:17:5D:66:44:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/72f56d1d-6f40-4e54-b467-65c3bb8f12bb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/72f56d1d-6f40-4e54-b467-65c3bb8f12bb/0a8363db-a781-39c6-810b-e2d0e80f5a55.roa
Signing time: Fri 11 Apr 2025 01:00:48 +0000
ROA not before: Fri 11 Apr 2025 01:00:48 +0000
ROA not after: Thu 10 Jul 2025 01:00:48 +0000
asID: 22898
IP address blocks: 104.192.240.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/72f56d1d-6f40-4e54-b467-65c3bb8f12bb/72f56d1d-6f40-4e54-b467-65c3bb8f12bb.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/72f56d1d-6f40-4e54-b467-65c3bb8f12bb/72f56d1d-6f40-4e54-b467-65c3bb8f12bb.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/72f56d1d-6f40-4e54-b467-65c3bb8f12bb.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:7c:3e:eb:ba:f7:f2:49:b6:7e:41:e2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72f56d1d-6f40-4e54-b467-65c3bb8f12bb
Validity
Not Before: Apr 11 01:00:48 2025 GMT
Not After : Jul 10 01:00:48 2025 GMT
Subject: CN=1745675d-feb1-4f76-a0ac-0c485ce17e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:44:cd:17:1a:0e:9e:37:68:d3:b0:bd:b4:a5:
ae:cd:16:80:ce:40:1e:66:f3:dc:e4:9c:73:e1:bb:
ea:56:ff:19:4d:ff:fe:76:a4:31:db:ae:b0:af:46:
6e:48:21:bf:19:16:59:0f:95:aa:bb:9a:b8:94:e3:
35:56:5c:d2:d8:b5:42:ab:28:b5:6a:3a:87:4a:f8:
62:b2:9b:b3:3c:2c:29:42:f0:e4:61:6a:82:19:d4:
69:04:cb:40:97:17:4f:f6:6b:c1:2b:e0:7b:02:22:
2a:51:92:f3:db:c7:2a:16:6e:09:67:0b:40:72:f6:
89:63:d9:57:28:af:f6:fa:d2:f5:82:b8:6a:2a:b7:
11:d2:51:43:2c:dd:85:a2:80:e3:8a:be:8f:ab:e5:
7b:5c:ca:3f:e2:d9:73:87:8a:a9:db:a2:23:cf:40:
8a:f1:43:6f:c2:cd:5f:b6:18:27:1d:d4:87:a0:35:
aa:69:f7:ad:de:c8:63:65:c9:8f:01:8b:51:18:66:
7a:9a:89:38:95:ce:a4:d8:1c:22:d9:cf:ec:db:d9:
ae:52:c9:ab:fc:46:38:d3:13:20:1a:2c:3e:8b:c8:
02:72:b7:1c:0a:74:3a:51:cd:52:1b:44:3e:17:30:
64:c2:2c:a0:e4:06:47:fa:a4:35:4a:40:8c:e2:ae:
ac:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A8:0C:20:95:30:AB:37:22:24:E0:73:1B:87:BB:95:01:14:EC:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/72f56d1d-6f40-4e54-b467-65c3bb8f12bb/0a8363db-a781-39c6-810b-e2d0e80f5a55.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/72f56d1d-6f40-4e54-b467-65c3bb8f12bb/72f56d1d-6f40-4e54-b467-65c3bb8f12bb.crl
X509v3 Authority Key Identifier:
keyid:BD:CA:DE:94:F2:56:FE:7D:DD:66:E4:C0:CB:B1:19:17:5D:66:44:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/72f56d1d-6f40-4e54-b467-65c3bb8f12bb.cer
sbgp-ipAddrBlock: critical
IPv4:
104.192.240.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:3c:7b:56:4e:f4:0e:66:ef:6d:c3:cd:45:fc:c4:d0:4b:79:
56:ce:76:a0:87:1e:52:9b:ff:fd:44:f8:77:4b:9d:2f:f8:61:
24:6a:8b:64:f0:69:22:af:2d:60:27:62:67:6f:01:d2:cc:02:
4f:61:27:90:41:72:af:74:09:bf:fb:0f:92:b4:71:0a:e4:21:
29:5d:13:f2:56:f9:9b:4e:22:41:88:76:ac:1e:0d:39:18:6f:
66:5e:d6:a2:0f:02:ef:79:88:ae:18:04:fc:7b:b8:39:8c:92:
89:89:69:f3:9c:2f:74:6b:e2:fe:61:99:d8:2e:fe:bd:b3:ec:
05:dc:db:7c:a6:4a:e9:de:8d:dc:70:dd:ce:0a:77:2f:f0:ba:
d0:05:2c:44:89:ae:b4:29:1b:2e:e9:c4:35:a3:5e:b6:a7:54:
06:76:2d:16:c5:c1:05:18:f1:51:02:57:de:3b:5e:ec:71:38:
42:10:e2:f9:bc:39:a8:76:d0:49:8c:53:c6:e2:7d:79:be:00:
79:2e:c2:60:0f:e3:06:cd:1c:d3:56:07:5e:7c:1b:8b:d0:52:
9f:0c:44:19:5b:94:16:8e:82:fc:13:1a:e7:50:9b:96:47:08:
c8:d3:25:1c:7d:b2:9a:e9:3c:62:85:75:30:c5:68:81:cd:b7:
ee:b1:99:23
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl8Puu69/JJtn5B4oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzJmNTZkMWQtNmY0MC00ZTU0LWI0NjctNjVjM2JiOGYx
MmJiMB4XDTI1MDQxMTAxMDA0OFoXDTI1MDcxMDAxMDA0OFowLzEtMCsGA1UEAxMk
MTc0NTY3NWQtZmViMS00Zjc2LWEwYWMtMGM0ODVjZTE3ZTI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzETNFxoOnjdo07C9tKWuzRaAzkAeZvPc5Jxz
4bvqVv8ZTf/+dqQx266wr0ZuSCG/GRZZD5Wqu5q4lOM1VlzS2LVCqyi1ajqHSvhi
spuzPCwpQvDkYWqCGdRpBMtAlxdP9mvBK+B7AiIqUZLz28cqFm4JZwtAcvaJY9lX
KK/2+tL1grhqKrcR0lFDLN2FooDjir6Pq+V7XMo/4tlzh4qp26Ijz0CK8UNvws1f
thgnHdSHoDWqafet3shjZcmPAYtRGGZ6mok4lc6k2Bwi2c/s29muUsmr/EY40xMg
Giw+i8gCcrccCnQ6Uc1SG0Q+FzBkwiyg5AZH+qQ1SkCM4q6s8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFOoDCCVMKs3IiTgcxuHu5UBFOy+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83MmY1
NmQxZC02ZjQwLTRlNTQtYjQ2Ny02NWMzYmI4ZjEyYmIvMGE4MzYzZGItYTc4MS0z
OWM2LTgxMGItZTJkMGU4MGY1YTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzJmNTZkMWQtNmY0MC00ZTU0LWI0
NjctNjVjM2JiOGYxMmJiLzcyZjU2ZDFkLTZmNDAtNGU1NC1iNDY3LTY1YzNiYjhm
MTJiYi5jcmwwHwYDVR0jBBgwFoAUvcrelPJW/n3dZuTAy7EZF11mRAMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy83MmY1NmQxZC02ZjQwLTRlNTQtYjQ2Ny02NWMz
YmI4ZjEyYmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaMDwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEo8e1ZO9A5m723DzUX8xNBLeVbOdqCHHlKb//1E+HdLnS/4YSRqi2Tw
aSKvLWAnYmdvAdLMAk9hJ5BBcq90Cb/7D5K0cQrkISldE/JW+ZtOIkGIdqweDTkY
b2Ze1qIPAu95iK4YBPx7uDmMkomJafOcL3Rr4v5hmdgu/r2z7AXc23ymSunejdxw
3c4Kdy/wutAFLESJrrQpGy7pxDWjXranVAZ2LRbFwQUY8VECV947XuxxOEIQ4vm8
Oah20EmMU8bifXm+AHkuwmAP4wbNHNNWB158G4vQUp8MRBlblBaOgvwTGudQm5ZH
CMjTJRx9sprpPGKFdTDFaIHNt+6xmSM=
-----END CERTIFICATE-----
Generated at Sat Apr 12 11:28:20 2025 by rpki-client