Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9b9103a7-6afa-384b-bc0d-a3712ada4a1c.roa
File: 9b9103a7-6afa-384b-bc0d-a3712ada4a1c.roa (raw, json)
Hash identifier: sjNR4hYN6WK29fI9bVuLJH2PxPrp38lWKOr96OicSl4=
Subject key identifier: 45:C7:43:80:D9:44:D0:1B:6C:E3:DF:FD:35:BE:E6:E5:A9:1D:6A:37
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858495C2470404685B4032B393000
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9b9103a7-6afa-384b-bc0d-a3712ada4a1c.roa
Signing time: Sun 30 Mar 2025 13:01:02 +0000
ROA not before: Sun 30 Mar 2025 13:01:02 +0000
ROA not after: Sat 28 Jun 2025 13:01:02 +0000
asID: 397237
IP address blocks: 192.100.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5c:24:70:40:46:85:b4:03:2b:39:30:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 30 13:01:02 2025 GMT
Not After : Jun 28 13:01:02 2025 GMT
Subject: CN=787dac5d-8afc-4ec3-a312-f8867f3d81a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:00:3e:fe:19:c7:08:dd:f8:e9:bd:cd:1d:5f:
c5:0a:30:7f:af:d9:e8:46:bc:82:29:8f:95:55:16:
33:1b:2e:a8:8f:8c:23:6e:be:77:f1:44:d9:de:58:
01:46:a5:f7:62:ef:4e:b4:7a:e0:33:83:d9:e6:39:
24:07:23:d0:07:67:2c:cc:ed:17:91:c7:bb:e8:28:
f1:f5:4c:53:65:6f:b1:7d:88:75:0f:a0:dd:df:7f:
8f:c4:79:97:95:42:39:c1:14:b3:8e:15:d2:2a:7d:
23:bb:a9:48:a9:e1:77:73:25:ed:f7:0f:9c:c5:15:
ca:6b:df:c3:c7:d9:9a:a2:7f:40:a7:83:5f:c9:10:
b7:3e:3f:91:33:cd:7a:ce:94:82:80:9d:d1:52:56:
f9:d9:ad:a6:1a:33:64:ba:7d:79:7b:37:51:ad:02:
29:f2:23:3e:bb:8f:64:42:de:1c:ff:ad:5b:50:00:
6d:7c:93:98:51:fd:88:88:04:41:51:a2:99:48:8b:
10:8b:17:6d:30:52:31:9e:b1:6c:81:50:fe:68:30:
a1:ed:95:cc:66:d4:5e:82:8f:a9:57:b1:77:28:b3:
41:1d:9e:e8:3d:bd:16:f7:a7:d4:9c:f2:82:03:8e:
aa:b4:45:f9:92:87:35:53:61:4b:d4:e5:c5:f5:8b:
09:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C7:43:80:D9:44:D0:1B:6C:E3:DF:FD:35:BE:E6:E5:A9:1D:6A:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9b9103a7-6afa-384b-bc0d-a3712ada4a1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
192.100.59.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:53:f5:7e:c8:6c:e9:c1:86:b7:b1:a0:18:ff:69:50:ae:2b:
30:ba:2a:fb:cd:fe:b6:ac:44:be:bd:d2:96:df:c5:c6:b3:27:
55:9e:81:25:9a:58:58:4f:23:68:a2:c0:18:54:72:94:18:b6:
36:b0:62:62:f5:b4:f5:2d:8e:a3:f4:74:dd:23:94:05:b5:a9:
ad:18:05:9b:6b:d3:7b:d0:8d:bb:a0:81:ac:39:80:05:36:d3:
c4:94:48:14:27:a5:29:8f:cb:db:b9:d9:d9:58:20:54:64:3b:
cf:35:50:19:ce:a7:36:0d:0e:84:20:8a:4d:6a:5a:8d:0a:4a:
fe:94:c8:00:46:8c:45:de:8a:d8:f2:af:89:f4:9d:8e:14:2e:
01:72:34:d8:73:86:df:06:8c:a6:d9:d8:30:2d:0d:7b:c0:8f:
89:ba:d9:81:e5:5e:00:fe:23:c5:02:e7:60:72:b7:7a:f2:a8:
dc:5f:44:40:d8:1b:34:68:ee:7c:4a:40:a9:30:24:b8:5c:36:
f8:8b:1d:fa:4e:fd:88:76:1c:04:8b:14:6d:5f:e4:3a:c4:6e:
d0:b6:21:51:3e:73:72:47:9b:31:e9:c7:da:a3:93:a6:82:a3:
24:5d:c9:58:94:6d:d9:61:cb:51:ca:bf:f5:53:11:a5:8c:4e:
a2:e6:64:73
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJHBARoW0Ays5MAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk
Nzg3ZGFjNWQtOGFmYy00ZWMzLWEzMTItZjg4NjdmM2Q4MWE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngA+/hnHCN346b3NHV/FCjB/r9noRryCKY+V
VRYzGy6oj4wjbr538UTZ3lgBRqX3Yu9OtHrgM4PZ5jkkByPQB2cszO0Xkce76Cjx
9UxTZW+xfYh1D6Dd33+PxHmXlUI5wRSzjhXSKn0ju6lIqeF3cyXt9w+cxRXKa9/D
x9maon9Ap4NfyRC3Pj+RM816zpSCgJ3RUlb52a2mGjNkun15ezdRrQIp8iM+u49k
Qt4c/61bUABtfJOYUf2IiARBUaKZSIsQixdtMFIxnrFsgVD+aDCh7ZXMZtRego+p
V7F3KLNBHZ7oPb0W96fUnPKCA46qtEX5koc1U2FL1OXF9YsJYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEXHQ4DZRNAbbOPf/TW+5uWpHWo3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOWI5MTAzYTctNmFmYS0z
ODRiLWJjMGQtYTM3MTJhZGE0YTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwGQ7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABFT9X7IbOnBhrexoBj/aVCuKzC6KvvN/rasRL690pbfxcazJ1WegSWa
WFhPI2iiwBhUcpQYtjawYmL1tPUtjqP0dN0jlAW1qa0YBZtr03vQjbuggaw5gAU2
08SUSBQnpSmPy9u52dlYIFRkO881UBnOpzYNDoQgik1qWo0KSv6UyABGjEXeitjy
r4n0nY4ULgFyNNhzht8GjKbZ2DAtDXvAj4m62YHlXgD+I8UC52Byt3ryqNxfREDY
GzRo7nxKQKkwJLhcNviLHfpO/Yh2HASLFG1f5DrEbtC2IVE+c3JHmzHpx9qjk6aC
oyRdyViUbdlhy1HKv/VTEaWMTqLmZHM=
-----END CERTIFICATE-----
Generated at Wed Apr 9 02:05:59 2025 by rpki-client