Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6ce2d994-caf5-3b36-9cd1-e11e50d95707.roa
File: 6ce2d994-caf5-3b36-9cd1-e11e50d95707.roa (raw, json)
Hash identifier: OAKhDxmOh6mNVSwGEo0ujOmbkF6zzYQcKDBwSh6ibaY=
Subject key identifier: 57:06:3F:50:A8:31:CE:29:B4:E0:39:88:43:8C:5A:C4:94:FC:42:F3
Certificate issuer: /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial: 010D0C9F43285848C5818945D5276D59A4B95CC0
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6ce2d994-caf5-3b36-9cd1-e11e50d95707.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 36492
IP address blocks: 136.23.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 09 Apr 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:89:45:d5:27:6d:59:a4:b9:5c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=4a41a673-b4db-4096-939a-9fe570bcdc82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ed:a5:cb:a3:85:e0:bb:b6:21:61:20:22:42:
15:63:9f:c1:05:b0:a0:13:2c:0b:e7:64:ae:e1:43:
50:ff:bc:10:a0:13:82:18:76:c0:ea:20:55:1e:b0:
47:3f:d6:5e:11:9c:7a:b3:11:ef:d4:83:f3:19:8e:
eb:42:b8:90:5e:7f:47:db:b7:6d:17:dc:10:a6:cd:
30:6b:1e:12:ba:65:3b:ee:94:15:27:6e:f9:bc:26:
8c:c1:97:d2:1d:91:79:01:8b:d1:c3:be:6a:9e:02:
90:03:3b:02:8a:86:4c:fb:e1:07:ed:b4:53:d2:91:
48:94:ca:c7:f4:02:37:1d:5f:4d:52:1e:4c:79:86:
e6:9a:39:53:b8:a8:35:f3:ee:a0:9f:b3:59:a2:14:
a2:ff:c9:f1:22:a7:ee:eb:b3:ae:ef:14:aa:f8:aa:
88:4b:c5:f6:fa:b2:17:aa:74:24:09:02:73:66:60:
5b:bc:59:be:13:00:35:90:09:d9:f5:6a:00:55:15:
66:a9:d5:a5:5a:7f:ba:7b:76:52:f3:7b:c8:9f:bc:
e6:01:5f:06:4a:39:23:88:f8:e2:f5:85:78:f6:07:
81:0b:f0:49:0a:ee:16:1b:5a:c9:54:ff:cd:a1:db:
34:b9:83:f1:1d:61:1a:5b:2e:77:7d:80:69:e1:9c:
38:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:06:3F:50:A8:31:CE:29:B4:E0:39:88:43:8C:5A:C4:94:FC:42:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6ce2d994-caf5-3b36-9cd1-e11e50d95707.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
X509v3 Authority Key Identifier:
keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
sbgp-ipAddrBlock: critical
IPv4:
136.23.24.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:de:c3:60:8f:a7:bd:8f:83:ed:bc:90:7e:92:15:dd:07:99:
39:49:6c:57:e9:4a:f8:df:22:75:96:3d:7f:0d:20:e4:8e:16:
d9:78:e7:e3:f2:03:8c:a3:bb:5a:b7:40:70:18:a6:b7:27:26:
3f:59:a5:cf:60:57:f9:e9:32:4d:0f:37:30:63:10:6e:7e:d5:
d4:15:f5:14:0c:58:0d:e7:a1:ee:80:d2:e4:f3:c7:4b:34:d7:
eb:d9:16:e7:1b:f5:9a:94:2e:60:32:d7:a2:41:4f:4a:f5:cc:
62:eb:ac:ad:91:e5:0d:0a:47:43:28:36:9a:92:8f:c3:50:db:
26:17:e5:47:10:7c:9c:6a:00:48:09:09:b8:fd:7e:d8:06:c0:
2a:89:9e:4c:3c:52:51:79:d3:a8:61:07:3a:60:68:29:57:4f:
61:39:d0:85:2c:8f:54:06:39:5c:d3:c5:49:bd:6b:9b:03:d5:
fa:c1:23:ea:de:10:d2:c2:20:ed:d1:3d:2c:fe:fa:6a:c0:93:
1c:bd:1f:21:3a:43:2c:b6:65:62:1e:6d:90:c5:ef:8e:3b:df:
0d:d3:c1:15:69:dd:d7:06:69:77:3c:5f:b0:7c:f8:b4:3f:b4:
f5:13:39:06:ec:40:12:d0:c2:f7:5c:79:93:2f:6a:a5:42:70:
5d:03:12:eb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgYlF1SdtWaS5XMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmY5MjdkZWMtMzQ5Yy00NzhiLWExYWMtMmI2MjhmMmJj
NTg1MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
NGE0MWE2NzMtYjRkYi00MDk2LTkzOWEtOWZlNTcwYmNkYzgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxO2ly6OF4Lu2IWEgIkIVY5/BBbCgEywL52Su
4UNQ/7wQoBOCGHbA6iBVHrBHP9ZeEZx6sxHv1IPzGY7rQriQXn9H27dtF9wQps0w
ax4SumU77pQVJ275vCaMwZfSHZF5AYvRw75qngKQAzsCioZM++EH7bRT0pFIlMrH
9AI3HV9NUh5MeYbmmjlTuKg18+6gn7NZohSi/8nxIqfu67Ou7xSq+KqIS8X2+rIX
qnQkCQJzZmBbvFm+EwA1kAnZ9WoAVRVmqdWlWn+6e3ZS83vIn7zmAV8GSjkjiPji
9YV49geBC/BJCu4WG1rJVP/Nods0uYPxHWEaWy53fYBp4Zw4OQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFcGP1CoMc4ptOA5iEOMWsSU/ELzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82Zjky
N2RlYy0zNDljLTQ3OGItYTFhYy0yYjYyOGYyYmM1ODUvNmNlMmQ5OTQtY2FmNS0z
YjM2LTljZDEtZTExZTUwZDk1NzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmY5MjdkZWMtMzQ5Yy00NzhiLWEx
YWMtMmI2MjhmMmJjNTg1LzZmOTI3ZGVjLTM0OWMtNDc4Yi1hMWFjLTJiNjI4ZjJi
YzU4NS5jcmwwHwYDVR0jBBgwFoAU/YFiUke8rPG5CVBRGd1vPxZH2XcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZjkyN2RlYy0zNDljLTQ3OGItYTFhYy0yYjYy
OGYyYmM1ODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBcYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAITew2CPp72Pg+28kH6SFd0HmTlJbFfpSvjfInWWPX8NIOSOFtl45+Py
A4yju1q3QHAYprcnJj9Zpc9gV/npMk0PNzBjEG5+1dQV9RQMWA3noe6A0uTzx0s0
1+vZFucb9ZqULmAy16JBT0r1zGLrrK2R5Q0KR0MoNpqSj8NQ2yYX5UcQfJxqAEgJ
Cbj9ftgGwCqJnkw8UlF506hhBzpgaClXT2E50IUsj1QGOVzTxUm9a5sD1frBI+re
ENLCIO3RPSz++mrAkxy9HyE6Qyy2ZWIebZDF74473w3TwRVp3dcGaXc8X7B8+LQ/
tPUTOQbsQBLQwvdceZMvaqVCcF0DEus=
-----END CERTIFICATE-----
Generated at Tue Apr 8 21:08:17 2025 by rpki-client