Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/821a0569-8066-38ee-93e4-5886d8c8db35.roa
File: 821a0569-8066-38ee-93e4-5886d8c8db35.roa (raw, json)
Hash identifier: yEYG7+ajZIMXLcDcXH1FnTbMzk0VJ6DxBxDAGfWN7cA=
Subject key identifier: 96:2F:E2:FD:E3:69:D6:FD:90:C1:9C:A6:AE:A7:38:62:E8:58:6D:B1
Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Certificate serial: 010D0C9F432858489BA0AD992844A50982EFD000
Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/821a0569-8066-38ee-93e4-5886d8c8db35.roa
Signing time: Mon 20 Jan 2025 14:00:51 +0000
ROA not before: Mon 20 Jan 2025 14:00:51 +0000
ROA not after: Sun 20 Apr 2025 13:00:51 +0000
asID: 16509
IP address blocks: 94.140.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 09:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9b:a0:ad:99:28:44:a5:09:82:ef:d0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Validity
Not Before: Jan 20 14:00:51 2025 GMT
Not After : Apr 20 13:00:51 2025 GMT
Subject: CN=d73ac782-141b-4df4-a18e-4c76bd343bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5f:6d:85:dc:f0:3d:2f:13:18:67:6a:66:db:
1d:7c:a0:c0:12:ea:e6:60:32:61:4a:00:e8:be:6d:
4e:bf:6f:91:fa:b2:f1:b0:de:f4:46:52:dd:de:0f:
c1:62:5d:b3:7b:9a:88:7b:06:b6:c8:30:16:87:1c:
31:69:fa:67:0d:28:2b:fa:c3:9c:ac:4d:e8:51:4c:
e3:8e:19:14:6f:84:eb:8d:3a:58:ed:dc:e7:dd:39:
ef:39:37:95:76:64:0a:86:ec:c3:95:38:76:bc:65:
50:c3:ee:29:6f:ab:29:25:26:0f:81:66:38:b9:dd:
41:cd:17:a9:ae:86:de:e0:19:79:67:65:be:f2:ed:
05:36:9a:99:a6:3e:c0:81:08:a9:12:72:bb:d0:22:
33:a6:5d:a5:8d:09:bf:7d:ed:ec:28:d3:63:f8:28:
58:9f:5a:bf:4c:a1:c0:3c:7f:5b:ce:48:ae:93:a3:
ef:04:ad:6f:31:d3:77:b6:54:f2:6f:c3:2e:b7:70:
d4:db:bd:ca:46:69:99:03:a9:1f:40:71:d4:8b:a9:
1f:78:fe:fa:90:ed:9e:2b:a0:56:b7:08:21:c7:cb:
38:fc:21:72:4b:93:ab:69:33:bc:d6:38:c9:20:32:
0c:69:5f:d8:56:c2:d7:3d:f6:37:d1:91:da:4a:39:
5f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:2F:E2:FD:E3:69:D6:FD:90:C1:9C:A6:AE:A7:38:62:E8:58:6D:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/821a0569-8066-38ee-93e4-5886d8c8db35.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl
X509v3 Authority Key Identifier:
keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
sbgp-ipAddrBlock: critical
IPv4:
94.140.18.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:e6:93:00:85:09:46:07:80:6e:81:dd:50:a9:76:3e:29:b8:
4b:3c:15:b3:a4:6f:da:b2:a3:66:d8:c0:1c:50:4d:5c:f7:c4:
a2:1b:1f:43:d7:d6:e4:2b:71:39:72:76:91:ab:f5:94:f8:e3:
50:19:5d:83:78:6d:c2:75:c4:3a:7d:1b:7e:57:d6:20:ce:a7:
9a:36:cb:7d:3f:22:54:ed:df:02:76:0f:c6:46:b5:bb:18:36:
77:e1:f9:26:40:3d:e6:8b:ff:06:38:0b:fb:f2:c7:d7:ba:51:
84:fa:1b:5d:16:7c:f3:aa:04:e4:4a:0e:99:33:fe:bb:ff:2e:
e0:c9:b3:a5:c6:e6:b4:81:91:ea:03:e1:e3:9d:4b:6f:4c:54:
08:af:57:4a:0a:41:01:d7:15:86:76:dd:9e:02:6d:e3:23:ca:
46:fc:6d:75:e7:23:09:d1:13:bf:4d:51:93:dc:3a:17:2e:d5:
93:7b:ea:0d:62:8e:f6:46:d1:4d:22:ac:e5:02:83:80:30:dd:
df:96:bb:5a:b8:20:4e:92:64:fe:00:37:03:82:e2:78:89:50:
30:00:60:52:14:26:10:02:ae:19:7c:87:29:fa:13:ca:4f:79:
2f:2d:ac:33:b6:3d:d7:18:1c:a9:29:d3:97:33:d9:27:6c:03:
6f:09:24:58
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiboK2ZKESlCYLv0AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjBmYWNjYjQtNDBhOS00MTY4LWFhM2QtNTlkMTkwZWI1
YTA0MB4XDTI1MDEyMDE0MDA1MVoXDTI1MDQyMDEzMDA1MVowLzEtMCsGA1UEAxMk
ZDczYWM3ODItMTQxYi00ZGY0LWExOGUtNGM3NmJkMzQzYmI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkF9thdzwPS8TGGdqZtsdfKDAEurmYDJhSgDo
vm1Ov2+R+rLxsN70RlLd3g/BYl2ze5qIewa2yDAWhxwxafpnDSgr+sOcrE3oUUzj
jhkUb4TrjTpY7dzn3TnvOTeVdmQKhuzDlTh2vGVQw+4pb6spJSYPgWY4ud1BzRep
robe4Bl5Z2W+8u0FNpqZpj7AgQipEnK70CIzpl2ljQm/fe3sKNNj+ChYn1q/TKHA
PH9bzkiuk6PvBK1vMdN3tlTyb8Mut3DU273KRmmZA6kfQHHUi6kfeP76kO2eK6BW
twghx8s4/CFyS5OraTO81jjJIDIMaV/YVsLXPfY30ZHaSjlf7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJYv4v3jadb9kMGcpq6nOGLoWG2xMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZh
Y2NiNC00MGE5LTQxNjgtYWEzZC01OWQxOTBlYjVhMDQvODIxYTA1NjktODA2Ni0z
OGVlLTkzZTQtNTg4NmQ4YzhkYjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjBmYWNjYjQtNDBhOS00MTY4LWFh
M2QtNTlkMTkwZWI1YTA0L2YwZmFjY2I0LTQwYTktNDE2OC1hYTNkLTU5ZDE5MGVi
NWEwNC5jcmwwHwYDVR0jBBgwFoAUrZAUzWRWZcDhdzVyttqYfTlVJJYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZhY2NiNC00MGE5LTQxNjgtYWEzZC01OWQx
OTBlYjVhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXowSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHvmkwCFCUYHgG6B3VCpdj4puEs8FbOkb9qyo2bYwBxQTVz3xKIbH0PX
1uQrcTlydpGr9ZT441AZXYN4bcJ1xDp9G35X1iDOp5o2y30/IlTt3wJ2D8ZGtbsY
Nnfh+SZAPeaL/wY4C/vyx9e6UYT6G10WfPOqBORKDpkz/rv/LuDJs6XG5rSBkeoD
4eOdS29MVAivV0oKQQHXFYZ23Z4CbeMjykb8bXXnIwnRE79NUZPcOhcu1ZN76g1i
jvZG0U0irOUCg4Aw3d+Wu1q4IE6SZP4ANwOC4niJUDAAYFIUJhACrhl8hyn6E8pP
eS8trDO2PdcYHKkp05cz2SdsA28JJFg=
-----END CERTIFICATE-----
Generated at Tue Apr 8 23:39:59 2025 by rpki-client