Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b5cba6b0-4073-3daa-b297-eaca8d095ff2.roa
File: b5cba6b0-4073-3daa-b297-eaca8d095ff2.roa (raw, json)
Hash identifier: MGtScoE2XgDGdBPhyPfTyBLkMUgMHa5tgY2wMcsGZ5A=
Subject key identifier: F5:48:BC:A7:C7:71:C9:BD:E9:2C:37:C3:68:F9:27:02:D5:09:92:80
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C558032B924015B7231BA340
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b5cba6b0-4073-3daa-b297-eaca8d095ff2.roa
Signing time: Tue 04 Feb 2025 12:38:28 +0000
ROA not before: Tue 04 Feb 2025 12:38:28 +0000
ROA not after: Mon 05 May 2025 11:38:28 +0000
asID: 30036
IP address blocks: 173.25.238.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 07:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:58:03:2b:92:40:15:b7:23:1b:a3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 12:38:28 2025 GMT
Not After : May 5 11:38:28 2025 GMT
Subject: CN=7c1e70cf-f750-4415-84fe-fc2aa4f7020c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6f:cb:df:a4:89:ad:38:c7:21:33:70:b7:de:
8d:25:f3:be:b3:5e:f0:97:75:e0:d5:7a:fd:d7:3b:
f8:9b:65:0c:34:6f:dc:cb:a2:e2:48:b2:d1:be:2f:
c4:00:59:e7:5f:47:3c:94:29:42:51:dd:9e:73:e9:
f9:e6:7c:80:39:cf:20:a3:75:22:b9:e7:53:55:68:
81:79:a9:ae:1f:8f:11:95:95:fd:59:82:a5:e9:2c:
c3:9b:89:43:57:e1:58:27:dc:67:fa:d8:86:d6:5b:
9b:1b:80:a6:f7:07:b5:a8:10:64:52:be:b0:bb:4d:
32:7e:a2:08:3d:e1:d0:a4:ee:40:51:dd:0a:cd:16:
11:63:b5:d2:4b:c2:36:83:a6:7d:06:30:9d:8b:55:
32:09:a9:06:2e:10:71:02:df:49:89:4b:a0:a2:d9:
e1:24:20:c2:e7:72:57:3b:da:ca:7f:df:bb:ee:11:
96:8d:5b:77:07:03:81:2f:ee:fe:9d:91:30:84:12:
cd:9f:d1:c5:11:1e:ab:81:21:ee:26:f3:b2:96:78:
6d:b1:82:ac:f8:a2:f1:23:c2:fd:d2:64:23:a8:57:
65:a0:a8:0a:73:ed:b8:89:6b:ae:52:1a:8b:58:5b:
cb:cf:b5:94:6f:fb:c4:17:34:a4:32:0a:35:7e:0b:
48:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:48:BC:A7:C7:71:C9:BD:E9:2C:37:C3:68:F9:27:02:D5:09:92:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b5cba6b0-4073-3daa-b297-eaca8d095ff2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.25.238.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:d2:08:c6:1f:dd:93:40:52:79:a6:3e:9c:52:9e:a7:9f:18:
2e:37:fe:db:cb:d2:32:d8:ae:74:0e:ee:ea:ec:d7:20:69:98:
1c:2f:15:8e:3f:5b:6a:7e:d7:54:ad:c7:0f:32:1b:c5:c7:31:
8f:c2:8a:e1:65:97:a9:af:48:6f:89:0c:4d:ed:97:96:43:76:
b8:87:89:6a:1b:20:fe:da:70:23:b6:24:86:e3:9a:0c:b0:3e:
6d:3b:67:19:42:05:28:8d:19:6d:f2:36:f9:f7:fa:66:40:e7:
c9:75:10:36:cb:85:cd:40:06:d8:83:f6:c3:b9:c7:3e:c5:02:
64:fc:c4:88:30:c0:c2:c3:9c:23:74:5a:88:7d:61:bc:c1:4d:
74:91:6d:3f:05:ce:ba:99:48:6c:15:94:e3:13:f1:b8:7e:f3:
04:90:8b:01:d7:76:fe:fc:5f:eb:f7:23:e7:1f:72:2d:59:ae:
36:b5:3a:77:4b:16:da:33:22:10:c9:96:b3:c7:e6:1c:5d:52:
87:c1:f7:d7:29:48:5e:1d:9c:d8:9c:56:4a:b1:dd:d3:52:24:
ad:bd:37:0b:3b:0c:39:73:ab:12:9e:9a:92:44:a3:86:84:5e:
c3:69:fd:0e:0c:e6:91:27:66:3e:1f:4f:88:66:f1:38:dd:c9:
b6:65:84:27
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFWAMrkkAVtyMbo0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDIwNDEyMzgyOFoXDTI1MDUwNTExMzgyOFowLzEtMCsGA1UEAxMk
N2MxZTcwY2YtZjc1MC00NDE1LTg0ZmUtZmMyYWE0ZjcwMjBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2/L36SJrTjHITNwt96NJfO+s17wl3Xg1Xr9
1zv4m2UMNG/cy6LiSLLRvi/EAFnnX0c8lClCUd2ec+n55nyAOc8go3UiuedTVWiB
eamuH48RlZX9WYKl6SzDm4lDV+FYJ9xn+tiG1lubG4Cm9we1qBBkUr6wu00yfqII
PeHQpO5AUd0KzRYRY7XSS8I2g6Z9BjCdi1UyCakGLhBxAt9JiUugotnhJCDC53JX
O9rKf9+77hGWjVt3BwOBL+7+nZEwhBLNn9HFER6rgSHuJvOylnhtsYKs+KLxI8L9
0mQjqFdloKgKc+24iWuuUhqLWFvLz7WUb/vEFzSkMgo1fgtIJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPVIvKfHccm96Sw3w2j5JwLVCZKAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjVjYmE2YjAtNDA3My0z
ZGFhLWIyOTctZWFjYThkMDk1ZmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRnuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADDSCMYf3ZNAUnmmPpxSnqefGC43/tvL0jLYrnQO7urs1yBpmBwvFY4/
W2p+11Stxw8yG8XHMY/CiuFll6mvSG+JDE3tl5ZDdriHiWobIP7acCO2JIbjmgyw
Pm07ZxlCBSiNGW3yNvn3+mZA58l1EDbLhc1ABtiD9sO5xz7FAmT8xIgwwMLDnCN0
Woh9YbzBTXSRbT8FzrqZSGwVlOMT8bh+8wSQiwHXdv78X+v3I+cfci1Zrja1OndL
FtozIhDJlrPH5hxdUofB99cpSF4dnNicVkqx3dNSJK29Nws7DDlzqxKempJEo4aE
XsNp/Q4M5pEnZj4fT4hm8TjdybZlhCc=
-----END CERTIFICATE-----
Generated at Wed Apr 9 07:50:39 2025 by rpki-client