Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/14867db6-f387-381c-bf27-c8bd7ebe12b1.roa
File: 14867db6-f387-381c-bf27-c8bd7ebe12b1.roa (raw, json)
Hash identifier: wDI626BHeTQc4nSaydFFpAflVoCZZtbtWQx/dmGPZ0c=
Subject key identifier: DE:45:19:53:38:2E:50:97:7C:15:80:B7:42:DC:BD:8B:FB:8D:AC:32
Certificate issuer: /CN=59adcb6d-cc06-4e2c-b5df-20bfcd83176e
Certificate serial: 010D0C9F43285848F22C6DC306CFA7C725447480
Authority key identifier: AF:87:4C:56:51:24:6C:74:D8:15:A7:F0:86:EA:58:E0:54:53:AF:2E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/14867db6-f387-381c-bf27-c8bd7ebe12b1.roa
Signing time: Thu 20 Feb 2025 14:00:52 +0000
ROA not before: Thu 20 Feb 2025 14:00:52 +0000
ROA not after: Wed 21 May 2025 13:00:52 +0000
asID: 7794
IP address blocks: 209.204.192.0/19 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:2c:6d:c3:06:cf:a7:c7:25:44:74:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59adcb6d-cc06-4e2c-b5df-20bfcd83176e
Validity
Not Before: Feb 20 14:00:52 2025 GMT
Not After : May 21 13:00:52 2025 GMT
Subject: CN=7b019fd6-ace1-4d42-b919-7dce7c35faad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:74:9a:e2:e0:ed:31:c7:23:70:95:9b:f8:bd:
fe:12:c5:b0:73:46:69:2e:ff:b4:3c:6f:1d:96:fa:
ca:14:d6:36:2f:ad:de:5d:6d:42:75:e4:73:cd:d3:
6c:f4:39:d2:bc:11:d3:08:70:62:81:4a:84:c7:17:
d3:03:74:c9:22:2c:3c:45:c9:ea:00:f3:67:b1:f1:
2c:09:42:58:79:c7:4f:ed:4b:c5:60:d0:06:5d:6d:
fb:9b:fe:ba:a8:e4:27:02:e6:91:e4:a6:85:a1:5e:
6b:56:cd:9e:61:2a:42:d2:8a:b7:ee:75:57:c8:21:
cc:f3:9b:70:e3:62:93:85:45:1f:c7:27:a0:ae:46:
03:83:02:1f:ba:ad:8f:ec:89:e2:e5:5e:3c:03:bf:
35:05:a8:1e:ae:13:c3:0c:58:a0:45:7d:f7:52:a2:
ea:bc:88:96:33:dd:ac:9b:0e:eb:4c:04:20:ee:71:
3b:6f:d9:dd:d6:ca:61:04:e6:33:da:0a:76:d6:19:
09:e8:0b:9d:12:d1:f2:4b:c4:76:fd:e8:64:9d:32:
36:9d:78:70:f1:20:14:4b:96:04:6a:0e:7d:5e:49:
b2:43:00:d9:a6:ef:db:c4:a8:df:59:f4:29:d8:f9:
e8:48:27:e5:9e:d1:d7:9c:ec:5d:db:18:e9:a7:e4:
fa:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:45:19:53:38:2E:50:97:7C:15:80:B7:42:DC:BD:8B:FB:8D:AC:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/14867db6-f387-381c-bf27-c8bd7ebe12b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.crl
X509v3 Authority Key Identifier:
keyid:AF:87:4C:56:51:24:6C:74:D8:15:A7:F0:86:EA:58:E0:54:53:AF:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer
sbgp-ipAddrBlock: critical
IPv4:
209.204.192.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:ad:76:26:a3:9f:e9:40:29:d9:86:71:41:be:bc:9c:64:17:
d5:ee:bd:c1:c4:78:f0:11:b9:a3:79:72:b8:cf:f0:21:de:ba:
8c:cc:12:e7:a1:88:1e:94:9a:96:a5:2b:45:42:0e:d1:71:13:
cc:b5:76:b1:5f:b1:1d:e8:86:53:aa:48:02:3f:1b:a3:05:f5:
91:ab:42:6b:cb:b3:5b:e8:d6:81:57:32:a9:b7:26:c0:b0:51:
6d:e9:75:3d:d3:40:f0:5c:98:40:4f:a9:7e:99:5a:7e:57:5f:
e8:3b:19:d5:c9:04:ed:5e:67:02:04:46:c2:4a:a4:17:f0:d6:
33:53:2a:0f:b3:de:a1:6c:1e:2d:43:02:75:05:38:25:62:56:
8b:b5:63:fd:44:ce:67:c9:50:16:f9:3e:c2:9d:74:1c:61:52:
ef:94:00:e0:00:73:a9:c5:29:51:c5:6b:75:7d:7f:b7:7e:8b:
ee:36:c9:cf:a3:4c:f3:aa:2a:14:10:12:ad:cd:ba:79:a9:40:
1e:bb:34:2e:3d:2d:a3:ea:43:b0:b3:9c:46:36:9c:34:8b:1f:
8e:10:7a:93:41:2d:1a:a9:2a:6b:b5:63:f1:2b:01:d8:7f:50:
69:c2:b9:ba:bc:64:cb:a4:00:cb:4f:c3:9c:b1:1e:1b:4e:5d:
78:fd:15:93
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLG3DBs+nxyVEdIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTlhZGNiNmQtY2MwNi00ZTJjLWI1ZGYtMjBiZmNkODMx
NzZlMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk
N2IwMTlmZDYtYWNlMS00ZDQyLWI5MTktN2RjZTdjMzVmYWFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3Sa4uDtMccjcJWb+L3+EsWwc0ZpLv+0PG8d
lvrKFNY2L63eXW1CdeRzzdNs9DnSvBHTCHBigUqExxfTA3TJIiw8RcnqAPNnsfEs
CUJYecdP7UvFYNAGXW37m/66qOQnAuaR5KaFoV5rVs2eYSpC0oq37nVXyCHM85tw
42KThUUfxyegrkYDgwIfuq2P7Ini5V48A781BagerhPDDFigRX33UqLqvIiWM92s
mw7rTAQg7nE7b9nd1sphBOYz2gp21hkJ6AudEtHyS8R2/ehknTI2nXhw8SAUS5YE
ag59XkmyQwDZpu/bxKjfWfQp2PnoSCflntHXnOxd2xjpp+T6XQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN5FGVM4LlCXfBWAt0LcvYv7jawyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81OWFk
Y2I2ZC1jYzA2LTRlMmMtYjVkZi0yMGJmY2Q4MzE3NmUvMTQ4NjdkYjYtZjM4Ny0z
ODFjLWJmMjctYzhiZDdlYmUxMmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTlhZGNiNmQtY2MwNi00ZTJjLWI1
ZGYtMjBiZmNkODMxNzZlLzU5YWRjYjZkLWNjMDYtNGUyYy1iNWRmLTIwYmZjZDgz
MTc2ZS5jcmwwHwYDVR0jBBgwFoAUr4dMVlEkbHTYFafwhupY4FRTry4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy81OWFkY2I2ZC1jYzA2LTRlMmMtYjVkZi0yMGJm
Y2Q4MzE3NmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0czAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHqtdiajn+lAKdmGcUG+vJxkF9XuvcHEePARuaN5crjP8CHeuozMEueh
iB6UmpalK0VCDtFxE8y1drFfsR3ohlOqSAI/G6MF9ZGrQmvLs1vo1oFXMqm3JsCw
UW3pdT3TQPBcmEBPqX6ZWn5XX+g7GdXJBO1eZwIERsJKpBfw1jNTKg+z3qFsHi1D
AnUFOCViVou1Y/1EzmfJUBb5PsKddBxhUu+UAOAAc6nFKVHFa3V9f7d+i+42yc+j
TPOqKhQQEq3NunmpQB67NC49LaPqQ7CznEY2nDSLH44QepNBLRqpKmu1Y/ErAdh/
UGnCubq8ZMukAMtPw5yxHhtOXXj9FZM=
-----END CERTIFICATE-----
Generated at Sat Apr 12 14:01:41 2025 by rpki-client