Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/9dda49de-e3f5-3289-bbea-3ff50dfb5cf3.roa
File: 9dda49de-e3f5-3289-bbea-3ff50dfb5cf3.roa (raw, json)
Hash identifier: +qAUnWTeIjNDbG4WQM2pgtsRDsKz5S9CX725+CJ9nqs=
Subject key identifier: 5A:77:B0:BE:A2:92:3B:2E:1B:92:74:89:82:4C:20:68:67:98:92:43
Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial: 010D0C9F43285848BFEBBF213A55C2E9FE70B480
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/9dda49de-e3f5-3289-bbea-3ff50dfb5cf3.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 36040
IP address blocks: 136.22.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 13 Apr 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:bf:21:3a:55:c2:e9:fe:70:b4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=7a9d3b6f-3943-4ad4-9f97-0d0cf85d811c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:71:1c:d1:1c:f4:c1:74:d4:f5:23:f2:22:8f:
7d:a5:9f:6b:5d:6a:54:01:57:f1:40:e6:a1:14:10:
2f:c4:ac:19:9e:17:9c:9d:6a:52:cc:da:bd:7a:23:
68:56:a7:26:1d:eb:8c:71:a1:c1:18:28:00:6d:0f:
b6:08:56:3e:75:c1:8f:f5:b1:ef:f8:94:2f:44:48:
8d:c0:cb:86:79:47:a4:49:35:01:4b:27:b9:64:c4:
94:c1:2b:f6:03:fc:7a:30:cc:a0:38:3c:a4:44:f7:
96:54:bc:bd:d9:3e:af:be:51:20:53:b4:11:7e:07:
ec:a4:da:de:93:79:9a:94:85:9e:43:32:50:c5:df:
a4:c5:a1:da:9c:72:af:bc:b1:ad:85:51:96:9f:74:
00:d9:60:39:b1:3c:57:fe:e6:1b:89:f3:36:c1:0f:
03:1d:75:3c:ae:3f:4f:43:e9:5a:11:bb:3e:89:84:
f3:21:01:3a:67:37:3d:2a:a4:77:4b:63:df:5d:3f:
1b:22:f4:2e:00:b2:d6:7c:d9:33:d4:23:c3:b0:5d:
fc:d1:f7:eb:96:4d:28:76:02:bd:37:91:01:9b:73:
e7:11:bf:98:6f:61:00:e9:2d:5a:3b:2d:a7:0e:b6:
f1:c4:da:e9:82:cc:3d:93:28:3b:8a:16:b1:a3:cf:
7f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:77:B0:BE:A2:92:3B:2E:1B:92:74:89:82:4C:20:68:67:98:92:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/9dda49de-e3f5-3289-bbea-3ff50dfb5cf3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
X509v3 Authority Key Identifier:
keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.136.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:04:f0:93:0b:01:a8:0e:df:38:7e:48:58:f0:68:d2:c0:2e:
ef:eb:62:6c:b9:2f:5c:39:64:2a:9e:9a:4f:d3:39:5e:af:c5:
46:b7:cf:11:59:f5:0a:29:60:59:10:42:b6:df:4e:1a:1a:25:
c5:ec:94:05:be:56:55:db:b7:55:79:b0:4e:9e:f5:a8:87:31:
7a:79:c6:c6:30:7f:f9:10:91:47:08:2d:d8:88:d6:23:3f:5c:
84:b5:ff:36:c5:d8:c3:8b:ed:a9:d5:ba:7e:6b:46:32:da:7f:
90:d1:89:9e:98:3d:75:30:cc:a9:1b:5d:32:9c:f7:5b:07:cc:
30:26:dd:c2:32:0f:ee:cc:81:81:cc:44:23:94:f9:ef:b7:0e:
8e:69:5c:56:35:32:d8:67:24:2c:6c:be:d5:a3:ce:b1:56:15:
d8:b8:82:78:da:85:ff:f1:10:a7:4d:ae:21:af:63:0b:c4:b2:
b0:99:fe:f1:27:f1:5a:2a:2e:0d:d9:9b:9f:2f:49:6f:39:ea:
e2:1b:6f:9d:4c:ac:89:fd:52:1b:17:ce:54:14:83:07:36:8f:
ee:85:15:38:89:6f:f1:f2:36:51:b6:d8:04:fc:35:cb:2e:73:
10:38:8a:63:65:31:4c:e6:ce:89:cf:5b:db:c1:7f:6b:6b:8a:
c3:21:91:57
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/678hOlXC6f5wtIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh
ZWEyMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk
N2E5ZDNiNmYtMzk0My00YWQ0LTlmOTctMGQwY2Y4NWQ4MTFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnEc0Rz0wXTU9SPyIo99pZ9rXWpUAVfxQOah
FBAvxKwZnhecnWpSzNq9eiNoVqcmHeuMcaHBGCgAbQ+2CFY+dcGP9bHv+JQvREiN
wMuGeUekSTUBSye5ZMSUwSv2A/x6MMygODykRPeWVLy92T6vvlEgU7QRfgfspNre
k3malIWeQzJQxd+kxaHanHKvvLGthVGWn3QA2WA5sTxX/uYbifM2wQ8DHXU8rj9P
Q+laEbs+iYTzIQE6Zzc9KqR3S2PfXT8bIvQuALLWfNkz1CPDsF380ffrlk0odgK9
N5EBm3PnEb+Yb2EA6S1aOy2nDrbxxNrpgsw9kyg7ihaxo89/bwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFp3sL6ikjsuG5J0iYJMIGhnmJJDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2
Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvOWRkYTQ5ZGUtZTNmNS0z
Mjg5LWJiZWEtM2ZmNTBkZmI1Y2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4
ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh
YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2
MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBaIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEoE8JMLAagO3zh+SFjwaNLALu/rYmy5L1w5ZCqemk/TOV6vxUa3zxFZ
9QopYFkQQrbfThoaJcXslAW+VlXbt1V5sE6e9aiHMXp5xsYwf/kQkUcILdiI1iM/
XIS1/zbF2MOL7anVun5rRjLaf5DRiZ6YPXUwzKkbXTKc91sHzDAm3cIyD+7MgYHM
RCOU+e+3Do5pXFY1MthnJCxsvtWjzrFWFdi4gnjahf/xEKdNriGvYwvEsrCZ/vEn
8VoqLg3Zm58vSW856uIbb51MrIn9UhsXzlQUgwc2j+6FFTiJb/HyNlG22AT8Ncsu
cxA4imNlMUzmzonPW9vBf2trisMhkVc=
-----END CERTIFICATE-----
Generated at Sat Apr 12 10:41:37 2025 by rpki-client