Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/58eb0f01-345e-3b82-9a63-f5246c3ad292.roa
File: 58eb0f01-345e-3b82-9a63-f5246c3ad292.roa (raw, json)
Hash identifier: yRu1hCNR1zM8Xi8nXy87R/c6fVrvPJFNKyjNsEj6gT4=
Subject key identifier: 7A:DC:C5:A6:A9:7D:89:2B:B1:84:30:74:AE:10:BC:89:78:4A:05:99
Certificate issuer: /CN=b82e5c10-aee7-4c19-a828-84974fcb8ac2
Certificate serial: 010D0C9F432858494E2EB13CCCEBDEFEBC621800
Authority key identifier: 7C:7B:72:D5:62:73:5A:F1:21:F7:6B:56:C0:00:96:50:0D:33:CC:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/58eb0f01-345e-3b82-9a63-f5246c3ad292.roa
Signing time: Tue 25 Mar 2025 13:00:51 +0000
ROA not before: Tue 25 Mar 2025 13:00:51 +0000
ROA not after: Mon 23 Jun 2025 13:00:51 +0000
asID: 64289
IP address blocks: 23.151.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/b82e5c10-aee7-4c19-a828-84974fcb8ac2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/b82e5c10-aee7-4c19-a828-84974fcb8ac2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4e:2e:b1:3c:cc:eb:de:fe:bc:62:18:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b82e5c10-aee7-4c19-a828-84974fcb8ac2
Validity
Not Before: Mar 25 13:00:51 2025 GMT
Not After : Jun 23 13:00:51 2025 GMT
Subject: CN=8c58714f-9dea-4a48-8537-44bc595ad05c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:63:41:b7:25:16:0c:8b:0a:f1:ea:ec:17:03:
7f:1e:b5:62:a1:a0:be:fe:2a:df:f3:56:85:34:ec:
d5:2f:09:91:8b:f9:2e:2e:e3:82:71:1e:99:8f:c2:
eb:da:0a:5d:1b:44:cf:e8:22:8e:d2:e5:dc:59:80:
5f:8e:6f:b8:39:7b:7a:93:91:6a:0d:75:2d:9c:db:
5a:7f:bc:5d:8f:22:ca:dd:2c:ca:17:3c:ae:36:c3:
aa:da:3d:04:99:e7:6c:d0:b6:9d:25:b1:fa:33:1e:
3b:f6:9c:bf:39:e2:93:ce:a6:d1:d7:fd:95:ed:85:
93:f3:3f:04:79:cf:f6:c0:43:ad:d2:ee:53:2c:62:
d9:1e:6c:4c:bd:92:73:08:87:a1:b9:99:a0:b5:1e:
4c:56:1d:f8:65:a8:08:5d:fc:ae:f6:fc:52:56:a1:
ad:ad:30:52:51:8e:06:b6:a5:e2:ae:90:e3:4e:b8:
12:f1:61:8a:21:af:70:7f:df:bc:6e:c0:9e:44:97:
2e:03:eb:f9:85:e9:5e:98:97:cb:9b:7c:52:bc:13:
05:75:a7:7c:fa:dc:5b:c0:e0:07:80:00:6e:66:ea:
41:08:54:5d:41:ca:1a:2a:d8:e1:e8:05:f1:6a:5b:
18:3c:43:4a:8c:a6:13:f2:13:b3:d3:f0:85:60:e1:
e1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:DC:C5:A6:A9:7D:89:2B:B1:84:30:74:AE:10:BC:89:78:4A:05:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/58eb0f01-345e-3b82-9a63-f5246c3ad292.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/b82e5c10-aee7-4c19-a828-84974fcb8ac2.crl
X509v3 Authority Key Identifier:
keyid:7C:7B:72:D5:62:73:5A:F1:21:F7:6B:56:C0:00:96:50:0D:33:CC:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2.cer
sbgp-ipAddrBlock: critical
IPv4:
23.151.136.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b8:0f:5f:99:3c:dc:4a:ed:1a:5a:f8:f9:11:ef:31:b8:d5:18:
7a:21:b8:91:b9:85:1a:f5:e5:bc:f3:27:39:0e:a9:eb:91:0b:
07:8f:ad:7b:d1:0b:01:6a:37:44:4d:03:a7:1f:40:b5:e5:fe:
2c:f1:ad:15:c6:88:ed:37:1b:e9:da:86:33:49:b2:25:66:28:
80:76:25:0b:20:c4:76:a5:8a:3d:c6:14:d3:33:7f:7b:e0:91:
b1:41:1e:dd:d1:53:8f:58:e9:da:c8:26:39:86:ae:37:85:03:
bc:f0:40:cc:fa:ae:85:7b:60:dc:ef:84:35:07:98:12:23:3b:
1a:90:38:86:b2:ed:da:53:b7:ea:5b:e7:d1:70:21:a4:bb:05:
b3:ef:e1:07:7a:63:45:98:58:4c:d9:d7:f3:e3:8d:7e:60:6d:
a5:a0:d0:cb:59:b3:4d:2f:5d:41:7e:52:5f:c6:62:95:fb:74:
11:70:8e:94:57:df:b0:79:f3:21:c4:ca:ce:41:cd:28:db:5e:
ba:b3:aa:12:60:a4:19:c9:a2:ad:10:f4:59:f1:d2:ea:9f:f6:
1c:87:c8:b3:7a:b8:ab:f4:53:f0:31:3b:a2:9f:d3:32:8a:1c:
19:e6:02:08:98:54:a7:c8:9f:a8:48:87:2b:c2:6d:c6:04:ee:
c3:2d:0e:49
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElOLrE8zOve/rxiGAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjgyZTVjMTAtYWVlNy00YzE5LWE4MjgtODQ5NzRmY2I4
YWMyMB4XDTI1MDMyNTEzMDA1MVoXDTI1MDYyMzEzMDA1MVowLzEtMCsGA1UEAxMk
OGM1ODcxNGYtOWRlYS00YTQ4LTg1MzctNDRiYzU5NWFkMDVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWNBtyUWDIsK8ersFwN/HrVioaC+/irf81aF
NOzVLwmRi/kuLuOCcR6Zj8Lr2gpdG0TP6CKO0uXcWYBfjm+4OXt6k5FqDXUtnNta
f7xdjyLK3SzKFzyuNsOq2j0Emeds0LadJbH6Mx479py/OeKTzqbR1/2V7YWT8z8E
ec/2wEOt0u5TLGLZHmxMvZJzCIehuZmgtR5MVh34ZagIXfyu9vxSVqGtrTBSUY4G
tqXirpDjTrgS8WGKIa9wf9+8bsCeRJcuA+v5helemJfLm3xSvBMFdad8+txbwOAH
gABuZupBCFRdQcoaKtjh6AXxalsYPENKjKYT8hOz0/CFYOHhuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHrcxaapfYkrsYQwdK4QvIl4SgWZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iODJl
NWMxMC1hZWU3LTRjMTktYTgyOC04NDk3NGZjYjhhYzIvNThlYjBmMDEtMzQ1ZS0z
YjgyLTlhNjMtZjUyNDZjM2FkMjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjgyZTVjMTAtYWVlNy00YzE5LWE4
MjgtODQ5NzRmY2I4YWMyL2I4MmU1YzEwLWFlZTctNGMxOS1hODI4LTg0OTc0ZmNi
OGFjMi5jcmwwHwYDVR0jBBgwFoAUfHty1WJzWvEh92tWwACWUA0zzHAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9iODJlNWMxMC1hZWU3LTRjMTktYTgyOC04NDk3
NGZjYjhhYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5eIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALgPX5k83ErtGlr4+RHvMbjVGHohuJG5hRr15bzzJzkOqeuRCwePrXvR
CwFqN0RNA6cfQLXl/izxrRXGiO03G+nahjNJsiVmKIB2JQsgxHalij3GFNMzf3vg
kbFBHt3RU49Y6drIJjmGrjeFA7zwQMz6roV7YNzvhDUHmBIjOxqQOIay7dpTt+pb
59FwIaS7BbPv4Qd6Y0WYWEzZ1/PjjX5gbaWg0MtZs00vXUF+Ul/GYpX7dBFwjpRX
37B58yHEys5BzSjbXrqzqhJgpBnJoq0Q9Fnx0uqf9hyHyLN6uKv0U/AxO6Kf0zKK
HBnmAgiYVKfIn6hIhyvCbcYE7sMtDkk=
-----END CERTIFICATE-----
Generated at Wed Apr 9 04:49:28 2025 by rpki-client