Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/03aaaeb8-95ca-3c39-af0a-9897bee4a061.roa
File: 03aaaeb8-95ca-3c39-af0a-9897bee4a061.roa (raw, json)
Hash identifier: aNChj+/dX4psh9uAzUE+Nj+EVcfIGBXBdliE4tifsHk=
Subject key identifier: CF:FA:29:08:3A:30:7C:13:CF:C5:5B:74:1C:CB:9E:19:CD:9F:3B:BE
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848E2D21E052EFB253B237ED700
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/03aaaeb8-95ca-3c39-af0a-9897bee4a061.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 395143
IP address blocks: 71.86.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d2:1e:05:2e:fb:25:3b:23:7e:d7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=271b9840-f5bb-4e40-9fe7-2e87000a5eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:27:a1:3a:f4:6b:81:36:61:1e:d6:4d:27:4e:
78:f0:e9:e2:01:1e:4d:3b:ca:ab:27:1f:7b:fd:f4:
3f:ba:81:7a:21:e6:3a:05:71:89:b7:90:e5:5b:45:
4b:99:4c:4e:eb:05:62:e7:c7:39:4e:44:9b:b0:2f:
e6:e5:67:8f:5e:02:f2:8d:f8:31:51:73:a3:b5:9f:
c0:2d:43:64:cd:bd:91:20:da:de:12:35:a7:a5:a4:
9d:28:d5:04:e2:e7:e3:b3:c1:7c:07:6f:f4:5a:21:
80:ab:94:7a:4d:ec:36:3e:12:8b:61:2a:42:5a:c1:
44:29:11:44:f0:20:39:97:03:b3:e2:78:6e:56:57:
3b:bb:57:80:6a:b9:c9:5c:20:12:8b:21:61:10:86:
da:dd:05:34:c6:ed:3f:e7:77:b0:07:a5:e9:03:79:
53:27:38:a2:80:fb:97:ed:d5:54:8b:2b:26:de:86:
c5:6c:bc:e7:11:b3:49:42:d3:62:9b:5d:e4:64:28:
40:53:40:96:a3:0f:55:f9:d0:41:ca:b4:08:8e:c3:
1a:62:25:37:a9:cc:6b:6b:14:0d:ff:45:82:c3:3a:
28:d6:cf:7f:2f:49:8d:c6:7a:f5:5b:41:22:6c:99:
8c:55:53:3d:4a:32:e0:cf:72:13:d6:70:3a:07:ef:
70:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:FA:29:08:3A:30:7C:13:CF:C5:5B:74:1C:CB:9E:19:CD:9F:3B:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/03aaaeb8-95ca-3c39-af0a-9897bee4a061.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.86.255.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ce:7c:3c:8a:b7:f5:82:9b:b3:a5:72:a8:b5:bd:19:d8:63:56:
d1:12:bf:49:bf:f4:6d:25:ad:be:73:27:b4:31:7e:20:63:20:
8b:a0:f3:a2:7d:42:da:05:07:e7:a9:c5:3c:20:73:e6:6d:e0:
3a:3a:1a:ff:79:81:ac:17:b1:c4:c9:81:22:a4:98:49:c2:81:
36:c7:ad:fe:76:20:59:b9:06:4b:ac:a9:fd:e9:f9:76:b8:6c:
e9:91:f8:b6:74:ec:4c:96:b4:74:eb:8c:e1:c5:ae:cb:33:dd:
77:4f:6b:3d:c2:5e:7d:7b:61:cb:74:58:aa:da:bd:33:5a:0b:
5a:f0:9b:7f:68:ef:8e:a1:ab:b5:e2:78:aa:ce:eb:37:4b:dc:
59:96:45:04:27:7d:8b:99:71:cb:da:0e:73:74:74:2c:f1:ec:
47:63:e5:7b:c4:9d:7a:84:90:0e:84:de:a6:af:07:8d:03:54:
f7:52:0b:8f:40:91:c8:95:fb:09:0b:3f:88:e2:c7:f3:77:ee:
97:96:7a:c1:12:0d:00:70:0f:fe:c0:1f:83:18:c2:31:0a:58:
ff:1e:5d:8c:f5:a1:48:a3:b5:3a:a5:b9:85:e8:05:5d:7f:ee:
d8:3d:5b:e0:d5:ac:ed:fa:f9:a0:fc:7f:dd:a9:a2:8a:b6:4d:
47:63:1c:37
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0h4FLvslOyN+1wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk
MjcxYjk4NDAtZjViYi00ZTQwLTlmZTctMmU4NzAwMGE1ZWI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyehOvRrgTZhHtZNJ0548OniAR5NO8qrJx97
/fQ/uoF6IeY6BXGJt5DlW0VLmUxO6wVi58c5TkSbsC/m5WePXgLyjfgxUXOjtZ/A
LUNkzb2RINreEjWnpaSdKNUE4ufjs8F8B2/0WiGAq5R6Tew2PhKLYSpCWsFEKRFE
8CA5lwOz4nhuVlc7u1eAarnJXCASiyFhEIba3QU0xu0/53ewB6XpA3lTJziigPuX
7dVUiysm3obFbLznEbNJQtNim13kZChAU0CWow9V+dBByrQIjsMaYiU3qcxraxQN
/0WCwzoo1s9/L0mNxnr1W0EibJmMVVM9SjLgz3IT1nA6B+9wuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM/6KQg6MHwTz8VbdBzLnhnNnzu+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMDNhYWFlYjgtOTVjYS0z
YzM5LWFmMGEtOTg5N2JlZTRhMDYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAR1b/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAM58PIq39YKbs6VyqLW9GdhjVtESv0m/9G0lrb5zJ7QxfiBjIIug86J9
QtoFB+epxTwgc+Zt4Do6Gv95gawXscTJgSKkmEnCgTbHrf52IFm5Bkusqf3p+Xa4
bOmR+LZ07EyWtHTrjOHFrssz3XdPaz3CXn17Yct0WKravTNaC1rwm39o746hq7Xi
eKrO6zdL3FmWRQQnfYuZccvaDnN0dCzx7Edj5XvEnXqEkA6E3qavB40DVPdSC49A
kciV+wkLP4jix/N37peWesESDQBwD/7AH4MYwjEKWP8eXYz1oUijtTqluYXoBV1/
7tg9W+DVrO36+aD8f92pooq2TUdjHDc=
-----END CERTIFICATE-----
Generated at Wed Apr 9 12:26:38 2025 by rpki-client