Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/04136425-c447-3156-8b66-22baea1cca5e.roa
File: 04136425-c447-3156-8b66-22baea1cca5e.roa (raw, json)
Hash identifier: HKpZ40jT5yvlRw1W/zko0fNBCU4/rur6cst8yReF9IU=
Subject key identifier: 31:2D:6C:3C:D7:7D:20:7B:93:01:A3:87:6A:AF:42:13:E1:36:AB:98
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584902972C42C45B92AC5A1DDF80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/04136425-c447-3156-8b66-22baea1cca5e.roa
Signing time: Wed 26 Feb 2025 11:10:02 +0000
ROA not before: Wed 26 Feb 2025 11:10:02 +0000
ROA not after: Tue 27 May 2025 10:10:02 +0000
asID: 30036
IP address blocks: 173.19.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Apr 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:97:2c:42:c4:5b:92:ac:5a:1d:df:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 26 11:10:02 2025 GMT
Not After : May 27 10:10:02 2025 GMT
Subject: CN=58a82dfa-fe27-4de3-a904-b3fb16ae4f43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:42:70:b7:fb:45:9b:71:a8:e0:ca:07:3e:36:
68:4e:cc:d3:4e:b0:2e:45:ad:15:81:3c:28:92:f6:
34:20:30:d2:f9:92:16:08:72:91:1b:c1:76:4d:70:
46:be:2f:cf:be:64:6f:dd:87:7a:da:bb:94:c1:75:
d7:93:8a:96:63:7d:96:98:da:d6:08:d3:0f:27:cf:
fa:be:c3:ba:21:57:2a:e9:93:68:df:e7:05:89:90:
9f:56:85:15:97:86:16:a4:13:a6:0c:b6:4c:94:c9:
77:82:6a:c3:c0:8a:52:22:90:77:4a:b4:b4:ac:79:
8f:99:61:5f:0f:12:3c:6c:be:00:97:cb:ed:c3:97:
5d:7f:ee:e7:12:b3:e5:8b:cc:f1:aa:6e:b6:89:43:
ed:a1:55:70:3a:be:1c:a9:50:4e:c5:d6:a6:71:d7:
73:97:ce:50:5f:b0:9c:90:e4:4c:f0:e6:e7:1c:fe:
1e:b8:b1:d2:f5:db:27:48:0a:8f:2e:72:96:e5:7b:
c4:03:b4:64:f5:bc:0a:36:44:8b:bf:c8:f6:9f:4c:
4e:bf:55:99:a7:46:ca:1c:07:80:d2:88:54:6f:f9:
14:99:07:c2:95:f0:ba:d4:74:ff:dc:f9:a7:14:5d:
b8:fd:da:ed:b1:bf:79:4c:cb:4b:c0:98:f5:54:f7:
51:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:2D:6C:3C:D7:7D:20:7B:93:01:A3:87:6A:AF:42:13:E1:36:AB:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/04136425-c447-3156-8b66-22baea1cca5e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.19.56.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:4f:07:6a:6f:28:0b:57:62:09:53:da:5a:d4:bd:7e:99:36:
bb:c4:8c:66:23:80:96:ac:ac:19:ae:82:b9:6d:1e:9e:8d:bd:
c4:6a:96:f5:c4:91:92:2f:3f:0d:e6:54:f8:4a:bf:8a:eb:3b:
a3:8b:b1:4b:6b:98:2a:53:89:43:18:e5:06:4e:cd:2b:f6:75:
3f:79:7f:3e:b3:c2:00:80:aa:c2:69:7e:d4:53:30:5a:fa:19:
bf:c1:3b:90:e5:28:02:a1:9d:94:1c:b5:53:0c:19:e7:c2:7f:
df:d0:d4:a8:2f:16:8e:09:9f:04:9b:fa:ae:78:2b:eb:58:71:
b1:ee:c9:d3:04:65:63:73:ab:3e:b6:fe:7d:ba:4f:2a:02:25:
b8:7e:cd:7a:92:38:f9:d4:cc:60:43:5b:3f:84:93:46:de:69:
fc:42:0e:4a:30:4e:4c:7a:39:fc:e0:99:a3:5c:02:fb:38:1d:
74:85:4f:81:c0:5a:1a:81:bb:5b:b5:6e:fe:75:39:45:ee:4c:
86:5a:6e:c1:ec:e8:81:26:88:2a:71:a4:36:65:21:ec:25:1c:
1a:bd:da:b2:db:86:3c:b4:f6:50:5c:3e:26:84:e3:b7:f6:ce:
9d:6d:2f:30:30:1f:f2:79:72:65:d7:85:3d:9d:a8:66:a8:98:
6f:cb:99:49
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkClyxCxFuSrFod34AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDIyNjExMTAwMloXDTI1MDUyNzEwMTAwMlowLzEtMCsGA1UEAxMk
NThhODJkZmEtZmUyNy00ZGUzLWE5MDQtYjNmYjE2YWU0ZjQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEJwt/tFm3Go4MoHPjZoTszTTrAuRa0VgTwo
kvY0IDDS+ZIWCHKRG8F2TXBGvi/PvmRv3Yd62ruUwXXXk4qWY32WmNrWCNMPJ8/6
vsO6IVcq6ZNo3+cFiZCfVoUVl4YWpBOmDLZMlMl3gmrDwIpSIpB3SrS0rHmPmWFf
DxI8bL4Al8vtw5ddf+7nErPli8zxqm62iUPtoVVwOr4cqVBOxdamcddzl85QX7Cc
kORM8ObnHP4euLHS9dsnSAqPLnKW5XvEA7Rk9bwKNkSLv8j2n0xOv1WZp0bKHAeA
0ohUb/kUmQfClfC61HT/3PmnFF24/drtsb95TMtLwJj1VPdROwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDEtbDzXfSB7kwGjh2qvQhPhNquYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDQxMzY0MjUtYzQ0Ny0z
MTU2LThiNjYtMjJiYWVhMWNjYTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRM4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC5PB2pvKAtXYglT2lrUvX6ZNrvEjGYjgJasrBmugrltHp6NvcRqlvXE
kZIvPw3mVPhKv4rrO6OLsUtrmCpTiUMY5QZOzSv2dT95fz6zwgCAqsJpftRTMFr6
Gb/BO5DlKAKhnZQctVMMGefCf9/Q1KgvFo4JnwSb+q54K+tYcbHuydMEZWNzqz62
/n26TyoCJbh+zXqSOPnUzGBDWz+Ek0beafxCDkowTkx6OfzgmaNcAvs4HXSFT4HA
WhqBu1u1bv51OUXuTIZabsHs6IEmiCpxpDZlIewlHBq92rLbhjy09lBcPiaE47f2
zp1tLzAwH/J5cmXXhT2dqGaomG/LmUk=
-----END CERTIFICATE-----
Generated at Wed Apr 9 19:36:22 2025 by rpki-client