Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7230a3bb-4c82-3d40-8ec0-35476b16e16c.roa
File: 7230a3bb-4c82-3d40-8ec0-35476b16e16c.roa (raw, json)
Hash identifier: XOvKDILke42YzrqF2tgQOxmbPg4G8e4sE91kua8mE9A=
Subject key identifier: 0A:15:DA:DF:07:D4:C7:20:C2:92:96:CB:82:E2:A3:BE:48:F9:03:CB
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848E2D1EBFAC3A49AA95860B360
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7230a3bb-4c82-3d40-8ec0-35476b16e16c.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 20115
IP address blocks: 71.84.128.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:eb:fa:c3:a4:9a:a9:58:60:b3:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=3163a1b2-e2ba-4cbe-b6a1-8a36ce656e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:78:5a:be:5e:b0:40:f1:41:d5:0a:1c:05:d0:
6d:6b:5a:31:fc:84:b0:ab:58:e4:bc:da:c6:52:2e:
63:7d:23:60:43:6d:4b:f8:24:82:99:79:4a:f3:bf:
01:f8:37:7e:b7:90:7e:fb:57:83:08:e4:4a:53:79:
40:e0:61:a7:88:4d:63:9f:4b:9a:47:4b:bc:03:40:
b5:24:38:94:7b:f0:d5:24:b1:8f:26:4b:56:84:9f:
73:82:0d:67:18:02:1f:dc:80:b4:89:ce:ea:c1:e5:
c5:67:1d:83:f7:2d:7c:53:f2:1a:20:f6:0a:7c:e5:
21:e4:a6:1b:d7:9f:7c:2e:ec:25:e1:2a:66:b8:98:
69:cd:03:b4:6c:c3:67:2e:89:a3:b2:0c:3b:0c:2e:
d0:95:ed:6a:9d:70:79:c2:85:a1:88:23:04:2a:96:
a8:64:ce:4e:2a:be:33:9d:b4:7e:a8:8d:6b:c3:5f:
b1:b5:ed:47:e5:6f:05:f1:2b:f2:2f:87:28:d2:7d:
a1:c8:b5:74:d4:c5:33:28:a2:40:65:f0:5e:d4:ec:
a1:6c:2e:32:5f:a9:43:f9:74:85:92:d2:04:6b:a1:
84:26:ad:fc:7d:c1:49:a5:95:7c:e0:78:71:30:64:
6f:ed:39:f7:e5:af:1c:a3:ae:5a:c6:6c:c8:bf:80:
71:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:15:DA:DF:07:D4:C7:20:C2:92:96:CB:82:E2:A3:BE:48:F9:03:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7230a3bb-4c82-3d40-8ec0-35476b16e16c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.84.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:9e:fd:bb:18:e2:03:25:2e:8e:33:da:98:b6:70:2f:28:4e:
66:8b:86:6c:4d:7f:80:09:ac:c5:89:d9:ca:a8:32:53:f0:ac:
7b:b1:f4:1b:c0:71:bb:05:94:24:e7:c0:70:5d:de:27:69:b2:
bd:d6:3a:a4:7e:fe:25:e6:e2:e4:89:f7:7d:76:d7:3a:f7:0f:
a7:e0:45:7c:a6:cc:1f:98:c1:31:c4:f8:9f:50:50:bb:29:f9:
d4:36:0f:b0:11:77:32:06:1b:69:05:78:f1:23:cc:94:65:26:
08:cf:98:be:6d:6a:a0:29:46:3d:69:8f:db:9f:82:26:16:71:
a1:44:ae:21:36:ec:27:a3:b5:6c:74:19:01:7d:83:36:ff:3d:
33:b5:69:fc:83:f6:e6:89:fa:59:1a:97:fe:47:51:58:45:96:
4d:03:5c:6b:b0:3f:71:b5:bb:51:2f:b1:58:31:b9:79:1e:6d:
bf:cc:a7:74:b7:43:71:be:3d:d1:9f:b4:b6:60:9f:6e:dd:e5:
60:f3:8a:2c:65:84:d6:e1:f7:6e:33:b9:fe:6d:05:e7:28:76:
a8:bb:11:bb:55:7d:f3:fe:69:2c:16:0b:61:08:6c:9c:81:de:
28:73:da:43:da:ac:95:fe:6d:86:18:7b:c0:ab:73:01:63:ac:
d2:09:1e:27
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0ev6w6SaqVhgs2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk
MzE2M2ExYjItZTJiYS00Y2JlLWI2YTEtOGEzNmNlNjU2ZTBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXhavl6wQPFB1QocBdBta1ox/ISwq1jkvNrG
Ui5jfSNgQ21L+CSCmXlK878B+Dd+t5B++1eDCORKU3lA4GGniE1jn0uaR0u8A0C1
JDiUe/DVJLGPJktWhJ9zgg1nGAIf3IC0ic7qweXFZx2D9y18U/IaIPYKfOUh5KYb
1598Luwl4SpmuJhpzQO0bMNnLomjsgw7DC7Qle1qnXB5woWhiCMEKpaoZM5OKr4z
nbR+qI1rw1+xte1H5W8F8SvyL4co0n2hyLV01MUzKKJAZfBe1OyhbC4yX6lD+XSF
ktIEa6GEJq38fcFJpZV84HhxMGRv7Tn35a8co65axmzIv4BxFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAoV2t8H1McgwpKWy4Lio75I+QPLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNzIzMGEzYmItNGM4Mi0z
ZDQwLThlYzAtMzU0NzZiMTZlMTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER1SAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFye/bsY4gMlLo4z2pi2cC8oTmaLhmxNf4AJrMWJ2cqoMlPwrHux9BvA
cbsFlCTnwHBd3idpsr3WOqR+/iXm4uSJ93121zr3D6fgRXymzB+YwTHE+J9QULsp
+dQ2D7ARdzIGG2kFePEjzJRlJgjPmL5taqApRj1pj9ufgiYWcaFEriE27CejtWx0
GQF9gzb/PTO1afyD9uaJ+lkal/5HUVhFlk0DXGuwP3G1u1EvsVgxuXkebb/Mp3S3
Q3G+PdGftLZgn27d5WDziixlhNbh924zuf5tBecodqi7EbtVffP+aSwWC2EIbJyB
3ihz2kParJX+bYYYe8CrcwFjrNIJHic=
-----END CERTIFICATE-----
Generated at Wed Apr 9 15:18:42 2025 by rpki-client