Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/f835abe2-7204-3c66-98a6-8c7d2069c4a3.roa
File: f835abe2-7204-3c66-98a6-8c7d2069c4a3.roa (raw, json)
Hash identifier: 25kgyLqTNUUw8lJ/ryPNIYpPN7iN6PV6LRQg0BwnlVk=
Subject key identifier: 9D:5E:77:3F:0A:D9:04:F7:86:23:3E:D5:F8:45:A1:D4:86:2D:68:F7
Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Certificate serial: 010D0C9F43285848C150CFFA5140566D09274580
Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/f835abe2-7204-3c66-98a6-8c7d2069c4a3.roa
Signing time: Mon 03 Feb 2025 02:00:39 +0000
ROA not before: Mon 03 Feb 2025 02:00:39 +0000
ROA not after: Sun 04 May 2025 01:00:39 +0000
asID: 931
IP address blocks: 167.94.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c1:50:cf:fa:51:40:56:6d:09:27:45:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Validity
Not Before: Feb 3 02:00:39 2025 GMT
Not After : May 4 01:00:39 2025 GMT
Subject: CN=5a61ccf0-5802-454d-96b0-19d81753fcd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b8:61:0a:f9:e7:ce:b3:af:6a:dc:d2:9f:9b:
d2:2a:8f:79:38:4f:86:ff:a2:f7:c5:b5:30:cd:10:
46:a0:70:4e:47:a2:18:8b:26:7b:84:6c:f9:07:26:
03:1a:d1:86:0e:ef:33:e2:f1:f8:87:76:0f:75:19:
4f:2b:16:23:17:2c:bc:16:13:fc:cc:e4:00:c4:8b:
15:b6:07:42:ca:64:01:4e:48:12:d1:f8:17:2d:4d:
8f:4a:3c:56:ab:68:73:23:61:7d:e4:1b:fb:7f:b5:
bd:c1:12:e3:c1:6f:4e:15:3b:2c:15:ba:6b:1b:28:
b9:1d:92:f7:bd:ab:30:c9:42:47:b6:c1:c3:4e:8b:
8f:f1:5e:58:4f:63:55:62:4e:a0:46:08:8f:eb:21:
bb:28:4c:d8:b9:ae:69:33:6d:0a:b6:42:d5:c1:b2:
b4:48:52:83:bf:a4:a8:77:5a:8e:3f:42:d4:10:b6:
d0:02:6c:1f:e3:e1:82:8b:79:31:da:1d:19:54:82:
41:f8:81:5e:79:21:76:38:f1:88:c3:ad:d2:63:c0:
ef:8d:ab:1d:48:34:89:ec:c4:ef:8a:95:b3:24:34:
85:dd:f4:98:25:41:da:d6:63:1e:c2:87:1e:83:fc:
80:b2:bb:64:64:2a:7f:30:a0:8a:f5:e0:ee:94:ef:
8a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:5E:77:3F:0A:D9:04:F7:86:23:3E:D5:F8:45:A1:D4:86:2D:68:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/f835abe2-7204-3c66-98a6-8c7d2069c4a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
X509v3 Authority Key Identifier:
keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
sbgp-ipAddrBlock: critical
IPv4:
167.94.158.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:22:92:86:b4:4c:d5:1b:e8:3e:3f:60:13:e8:22:87:06:be:
7f:d0:64:f7:04:fb:88:d3:3e:22:97:c3:7b:30:de:a6:fb:12:
69:48:ce:4e:99:ec:1c:2f:a7:43:c3:5e:10:70:3a:27:ba:85:
11:7f:5a:6e:d2:b9:4c:d5:dc:8d:17:ba:73:be:65:79:9d:02:
a6:f3:30:11:d7:b1:b9:c4:98:be:78:3c:e0:1f:5a:4b:bf:21:
c9:ac:ed:9c:f5:43:4d:55:18:02:e1:6b:a8:ae:7c:ea:a9:71:
2a:0f:b3:89:3d:0e:52:06:6f:00:42:a3:51:6b:a0:c0:09:d7:
21:c7:92:8b:4f:59:bf:04:ef:4a:f3:a4:05:dc:8f:63:9e:02:
0b:61:0c:74:6e:e0:a0:e7:7d:d3:45:2a:27:19:67:b4:93:6f:
ef:f3:d4:e3:8b:71:c2:64:1f:ed:0f:24:11:f6:3b:e6:06:a5:
7d:89:19:cc:b8:98:f5:77:03:57:ea:98:dd:30:1a:8b:41:c2:
95:37:c9:50:ee:a5:4f:76:9b:f2:f0:8b:d7:e3:54:f8:36:95:
48:5f:67:8b:81:b9:9e:e0:eb:8b:0f:6e:27:02:96:39:82:d4:
4f:41:8c:04:65:0b:0b:a6:7e:fc:47:94:66:91:e0:6f:d7:42:
35:86:d1:4b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjBUM/6UUBWbQknRYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0
YjY1MB4XDTI1MDIwMzAyMDAzOVoXDTI1MDUwNDAxMDAzOVowLzEtMCsGA1UEAxMk
NWE2MWNjZjAtNTgwMi00NTRkLTk2YjAtMTlkODE3NTNmY2QxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobhhCvnnzrOvatzSn5vSKo95OE+G/6L3xbUw
zRBGoHBOR6IYiyZ7hGz5ByYDGtGGDu8z4vH4h3YPdRlPKxYjFyy8FhP8zOQAxIsV
tgdCymQBTkgS0fgXLU2PSjxWq2hzI2F95Bv7f7W9wRLjwW9OFTssFbprGyi5HZL3
vaswyUJHtsHDTouP8V5YT2NVYk6gRgiP6yG7KEzYua5pM20KtkLVwbK0SFKDv6So
d1qOP0LUELbQAmwf4+GCi3kx2h0ZVIJB+IFeeSF2OPGIw63SY8DvjasdSDSJ7MTv
ipWzJDSF3fSYJUHa1mMewoceg/yAsrtkZCp/MKCK9eDulO+KEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ1edz8K2QT3hiM+1fhFodSGLWj3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0
NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvZjgzNWFiZTItNzIwNC0z
YzY2LTk4YTYtOGM3ZDIwNjljNGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0
NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4
NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3
YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp16eMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHkikoa0TNUb6D4/YBPoIocGvn/QZPcE+4jTPiKXw3sw3qb7EmlIzk6Z
7Bwvp0PDXhBwOie6hRF/Wm7SuUzV3I0XunO+ZXmdAqbzMBHXsbnEmL54POAfWku/
Icms7Zz1Q01VGALha6iufOqpcSoPs4k9DlIGbwBCo1FroMAJ1yHHkotPWb8E70rz
pAXcj2OeAgthDHRu4KDnfdNFKicZZ7STb+/z1OOLccJkH+0PJBH2O+YGpX2JGcy4
mPV3A1fqmN0wGotBwpU3yVDupU92m/Lwi9fjVPg2lUhfZ4uBuZ7g64sPbicCljmC
1E9BjARlCwumfvxHlGaR4G/XQjWG0Us=
-----END CERTIFICATE-----
Generated at Sat Apr 12 22:37:23 2025 by rpki-client