Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/33d277a4-c188-372c-a78e-184a9a9ee100.roa
File: 33d277a4-c188-372c-a78e-184a9a9ee100.roa (raw, json)
Hash identifier: P2W42MaOGY/lS5GdwDWO+YJle+wLhuk98YcyvDQEO+s=
Subject key identifier: 4D:E7:7C:52:F4:A7:11:98:DA:F1:E0:7A:0D:86:62:11:8E:D3:0C:A1
Certificate issuer: /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial: 010D0C9F4328584965E979DB898FDDDD820D9380
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/33d277a4-c188-372c-a78e-184a9a9ee100.roa
Signing time: Thu 03 Apr 2025 01:00:46 +0000
ROA not before: Thu 03 Apr 2025 01:00:46 +0000
ROA not after: Wed 02 Jul 2025 01:00:46 +0000
asID: 16509
IP address blocks: 2606:f4c0:4000::/36 maxlen: 44
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:65:e9:79:db:89:8f:dd:dd:82:0d:93:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Validity
Not Before: Apr 3 01:00:46 2025 GMT
Not After : Jul 2 01:00:46 2025 GMT
Subject: CN=f99b42fb-6a87-4768-9ed9-17598fb77b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:dc:4b:ea:4a:92:fe:0b:05:d2:d5:a0:31:25:
1d:6b:ff:b3:d0:39:f5:ee:9f:9e:dc:59:a8:27:10:
36:e4:96:74:7e:83:32:0f:93:4e:83:8f:0a:25:81:
12:a0:28:71:80:18:14:70:45:ab:ad:e3:15:d1:42:
a1:55:49:f4:d2:34:78:13:ff:9a:4d:15:2e:76:24:
8a:6f:6c:ca:20:7a:cf:88:ef:34:18:8d:db:f3:c3:
6d:3a:b9:07:03:25:93:e5:61:9a:ae:ba:a9:93:49:
2f:d0:df:66:d4:4e:b1:54:56:16:b6:7d:32:19:87:
06:98:8b:08:fc:2d:d7:56:59:c7:5c:fe:20:cb:2a:
d3:1d:18:91:00:e9:d2:2d:43:ba:f8:03:f1:97:d7:
67:da:41:c7:50:2e:ba:d8:4b:d6:3b:92:0e:59:dc:
d1:97:aa:c1:fb:dc:52:cf:1d:f3:20:b4:7f:95:b7:
62:6e:85:14:f2:42:8f:9d:2a:95:e0:48:ca:bd:15:
af:c0:57:8b:61:b8:70:23:4a:e9:ce:51:20:6e:fc:
d9:19:01:08:5f:7a:67:99:cf:c7:2c:7b:1a:13:61:
b9:fc:2e:db:b5:2e:5f:80:bd:eb:64:7a:64:14:ef:
76:69:73:d0:a2:5f:b7:a8:36:b6:02:5a:d1:31:0c:
c6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E7:7C:52:F4:A7:11:98:DA:F1:E0:7A:0D:86:62:11:8E:D3:0C:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/33d277a4-c188-372c-a78e-184a9a9ee100.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
X509v3 Authority Key Identifier:
keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:f4c0:4000::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:25:a1:4d:19:4b:a2:df:1c:94:0c:e0:a9:96:7d:75:6f:73:
d0:d2:c2:63:d2:4e:ad:22:69:58:0d:1a:1b:c1:51:94:c8:32:
10:b4:16:84:89:13:07:59:6f:8d:3d:af:93:3a:29:1d:43:e5:
b3:11:f9:6a:6b:0d:4b:28:26:83:fb:97:8a:2c:83:30:92:99:
68:47:b3:f8:02:b9:65:06:70:81:a9:f2:42:79:c7:2c:20:7b:
3d:02:2d:16:fc:63:13:c9:39:c6:32:85:f9:7a:c0:0f:34:bf:
a9:fb:69:4a:46:0f:1b:fa:cc:29:ce:51:cb:41:5a:3a:ad:5f:
0a:bb:a4:e2:14:8e:4a:8d:a7:20:e3:c2:71:06:eb:0a:1c:2a:
9c:39:ab:c2:33:f7:e0:88:58:e9:d5:25:ad:27:c1:84:77:d3:
2b:2d:e8:ea:2b:ea:14:8e:a7:81:4c:77:19:7b:2e:79:13:46:
8a:01:cb:32:57:f2:21:21:ad:79:28:63:84:9e:cd:67:96:16:
69:e6:7b:7e:df:dd:38:37:59:ef:b3:5d:8c:d4:b3:c8:fa:f1:
d4:3e:ca:c6:51:98:e6:87:9d:27:49:29:60:58:21:5a:09:ea:
ab:ad:53:9b:a2:80:e8:bf:90:3f:07:12:2c:d5:85:26:72:31:
5a:36:94:c0
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEll6XnbiY/d3YINk4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThk
OWU3MB4XDTI1MDQwMzAxMDA0NloXDTI1MDcwMjAxMDA0NlowLzEtMCsGA1UEAxMk
Zjk5YjQyZmItNmE4Ny00NzY4LTllZDktMTc1OThmYjc3YjE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNxL6kqS/gsF0tWgMSUda/+z0Dn17p+e3Fmo
JxA25JZ0foMyD5NOg48KJYESoChxgBgUcEWrreMV0UKhVUn00jR4E/+aTRUudiSK
b2zKIHrPiO80GI3b88NtOrkHAyWT5WGarrqpk0kv0N9m1E6xVFYWtn0yGYcGmIsI
/C3XVlnHXP4gyyrTHRiRAOnSLUO6+APxl9dn2kHHUC662EvWO5IOWdzRl6rB+9xS
zx3zILR/lbdiboUU8kKPnSqV4EjKvRWvwFeLYbhwI0rpzlEgbvzZGQEIX3pnmc/H
LHsaE2G5/C7btS5fgL3rZHpkFO92aXPQol+3qDa2AlrRMQzGwwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFE3nfFL0pxGY2vHgeg2GYhGO0wyhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkw
YjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvMzNkMjc3YTQtYzE4OC0z
NzJjLWE3OGUtMTg0YTlhOWVlMTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3
M2QtMzY0OTQ3OThkOWU3LzAwOTBiMGVlLTNkN2UtNDdkNi1iNzNkLTM2NDk0Nzk4
ZDllNy5jcmwwHwYDVR0jBBgwFoAU+MG6e+BdLoZQdbqH1ZAwXLc2CtEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5
NDc5OGQ5ZTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgb0wEAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAUCWhTRlLot8clAzgqZZ9dW9z0NLCY9JOrSJpWA0aG8FRlMgyELQW
hIkTB1lvjT2vkzopHUPlsxH5amsNSygmg/uXiiyDMJKZaEez+AK5ZQZwganyQnnH
LCB7PQItFvxjE8k5xjKF+XrADzS/qftpSkYPG/rMKc5Ry0FaOq1fCruk4hSOSo2n
IOPCcQbrChwqnDmrwjP34IhY6dUlrSfBhHfTKy3o6ivqFI6ngUx3GXsueRNGigHL
MlfyISGteShjhJ7NZ5YWaeZ7ft/dODdZ77NdjNSzyPrx1D7KxlGY5oedJ0kpYFgh
Wgnqq61Tm6KA6L+QPwcSLNWFJnIxWjaUwA==
-----END CERTIFICATE-----
Generated at Wed Apr 9 13:28:42 2025 by rpki-client