Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b/303ae16a-2367-33ca-92f7-16ee2a181db7.roa
File: 303ae16a-2367-33ca-92f7-16ee2a181db7.roa (raw, json)
Hash identifier: 6f21VYY43R66FsaPfIA877kCRSvx58jcv3Xm3ncIlEI=
Subject key identifier: B2:1B:AA:7E:C5:08:4F:10:8C:2A:E4:81:BB:0A:DE:01:E5:F2:65:1F
Certificate issuer: /CN=67c32d4d-1a33-4637-a07d-fcaee3a3c83b
Certificate serial: 010D0C9F43285849350E9B2408B0283BE68C0E60
Authority key identifier: 0C:27:40:58:56:BC:42:98:19:65:4F:F1:F8:9F:79:32:47:C1:91:A1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b/303ae16a-2367-33ca-92f7-16ee2a181db7.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 147314
IP address blocks: 104.193.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:9b:24:08:b0:28:3b:e6:8c:0e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c32d4d-1a33-4637-a07d-fcaee3a3c83b
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=4bfcdb56-19c9-476f-9f5c-9b1ac293c40b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d3:b2:be:83:19:91:da:1e:6b:c4:ce:72:09:
fc:c2:4b:98:a7:df:b4:9a:65:5d:95:10:ab:d4:33:
68:36:74:54:43:f7:7a:6d:9c:7e:ab:51:e9:4f:72:
a9:11:b0:8e:fc:bc:31:36:21:aa:78:e8:8d:31:de:
db:03:ab:fb:40:8f:72:aa:7e:51:af:16:c1:05:90:
77:3a:8e:c6:a4:5c:37:a9:f0:92:d3:fc:78:84:fb:
50:04:50:20:6d:e5:95:36:0d:ad:ba:b8:e7:9d:00:
d6:e8:d7:b8:f3:b0:b9:6d:39:91:72:66:a7:5e:10:
c2:9e:8e:ef:04:a3:1d:30:d4:5b:81:5a:2b:9f:13:
23:e3:53:8c:99:7a:cc:29:42:4c:03:93:98:bf:98:
93:04:47:02:dc:d1:62:cb:12:8d:e1:61:eb:47:18:
3a:d9:47:5f:a5:12:62:05:c6:0b:82:c9:49:4e:77:
cb:a4:9e:f1:1d:e6:22:ec:d9:0a:36:c8:ee:f3:b8:
1c:ab:20:d6:89:49:f7:17:71:a6:49:6e:f5:e3:07:
3d:fe:10:fc:79:e2:d6:1f:ac:66:db:76:33:28:09:
e3:d0:b3:8d:7f:e5:57:63:2e:03:d8:dc:c7:8c:bd:
fe:84:73:b1:a4:75:32:f3:d6:09:35:98:c6:37:fb:
dd:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:1B:AA:7E:C5:08:4F:10:8C:2A:E4:81:BB:0A:DE:01:E5:F2:65:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b/303ae16a-2367-33ca-92f7-16ee2a181db7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b.crl
X509v3 Authority Key Identifier:
keyid:0C:27:40:58:56:BC:42:98:19:65:4F:F1:F8:9F:79:32:47:C1:91:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b.cer
sbgp-ipAddrBlock: critical
IPv4:
104.193.37.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:00:c8:c5:c1:67:ec:bc:48:2c:a7:84:09:e2:0b:95:83:d1:
97:9f:67:f7:88:59:50:1c:9e:6d:57:da:88:33:6f:8e:70:d8:
af:e1:5a:ff:4a:7e:a9:e0:a4:4d:86:d9:34:97:e1:b0:73:05:
ac:f3:36:73:7d:13:2c:07:9f:f1:6d:18:82:25:de:e5:1f:25:
27:ee:49:11:1b:0a:fa:10:f3:2a:a1:49:85:e1:a5:a1:76:52:
70:4e:ff:f1:6f:33:aa:7a:1a:c8:75:b3:13:28:69:7a:bb:58:
08:e8:ef:c1:8f:4f:b8:90:6b:9b:c8:93:e7:11:16:23:b5:83:
0d:9c:ca:ba:09:c8:ce:c9:e0:34:a2:6b:01:5d:bf:5c:99:31:
b2:65:dc:d4:cd:35:73:b8:bb:25:c0:94:40:98:1c:00:f0:31:
d3:19:b8:75:86:6a:08:f6:b0:1f:60:2b:6a:08:ca:6a:79:15:
a4:23:c9:80:3d:4a:d5:16:70:2b:4c:c5:02:7b:e2:54:9a:e4:
a3:cb:c6:e7:70:54:d6:d4:fa:a9:a9:a0:c6:a7:42:4c:6c:ca:
e1:e5:d6:6f:d4:a8:fc:9d:44:99:44:e8:1a:b4:8e:45:2a:93:
85:b7:c6:34:f9:e0:18:35:1e:e0:52:02:b0:ff:ff:60:6e:40:
5c:41:85:fe
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1DpskCLAoO+aMDmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjdjMzJkNGQtMWEzMy00NjM3LWEwN2QtZmNhZWUzYTNj
ODNiMB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk
NGJmY2RiNTYtMTljOS00NzZmLTlmNWMtOWIxYWMyOTNjNDBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdOyvoMZkdoea8TOcgn8wkuYp9+0mmVdlRCr
1DNoNnRUQ/d6bZx+q1HpT3KpEbCO/LwxNiGqeOiNMd7bA6v7QI9yqn5RrxbBBZB3
Oo7GpFw3qfCS0/x4hPtQBFAgbeWVNg2turjnnQDW6Ne487C5bTmRcmanXhDCno7v
BKMdMNRbgVornxMj41OMmXrMKUJMA5OYv5iTBEcC3NFiyxKN4WHrRxg62UdfpRJi
BcYLgslJTnfLpJ7xHeYi7NkKNsju87gcqyDWiUn3F3GmSW714wc9/hD8eeLWH6xm
23YzKAnj0LONf+VXYy4D2NzHjL3+hHOxpHUy89YJNZjGN/vdZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLIbqn7FCE8QjCrkgbsK3gHl8mUfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82N2Mz
MmQ0ZC0xYTMzLTQ2MzctYTA3ZC1mY2FlZTNhM2M4M2IvMzAzYWUxNmEtMjM2Ny0z
M2NhLTkyZjctMTZlZTJhMTgxZGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjdjMzJkNGQtMWEzMy00NjM3LWEw
N2QtZmNhZWUzYTNjODNiLzY3YzMyZDRkLTFhMzMtNDYzNy1hMDdkLWZjYWVlM2Ez
YzgzYi5jcmwwHwYDVR0jBBgwFoAUDCdAWFa8QpgZZU/x+J95MkfBkaEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi82N2MzMmQ0ZC0xYTMzLTQ2MzctYTA3ZC1mY2Fl
ZTNhM2M4M2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMElMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEcAyMXBZ+y8SCynhAniC5WD0ZefZ/eIWVAcnm1X2ogzb45w2K/hWv9K
fqngpE2G2TSX4bBzBazzNnN9EywHn/FtGIIl3uUfJSfuSREbCvoQ8yqhSYXhpaF2
UnBO//FvM6p6Gsh1sxMoaXq7WAjo78GPT7iQa5vIk+cRFiO1gw2cyroJyM7J4DSi
awFdv1yZMbJl3NTNNXO4uyXAlECYHADwMdMZuHWGagj2sB9gK2oIymp5FaQjyYA9
StUWcCtMxQJ74lSa5KPLxudwVNbU+qmpoManQkxsyuHl1m/UqPydRJlE6Bq0jkUq
k4W3xjT54Bg1HuBSArD//2BuQFxBhf4=
-----END CERTIFICATE-----
Generated at Wed Apr 9 03:01:24 2025 by rpki-client