Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3316ab74-6765-369b-a923-c3e5008e84ef.roa
File: 3316ab74-6765-369b-a923-c3e5008e84ef.roa (raw, json)
Hash identifier: +Sxd5+4NLJu/J/wMlq/vzsbabIhCAgwOQLXND0BMpqY=
Subject key identifier: 17:EA:EB:61:05:67:18:6B:7C:85:C0:0F:0F:DA:43:A5:58:19:37:A4
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285848C2647A35367CF3B0EDBD4C78
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3316ab74-6765-369b-a923-c3e5008e84ef.roa
Signing time: Mon 03 Feb 2025 11:16:09 +0000
ROA not before: Mon 03 Feb 2025 11:16:09 +0000
ROA not after: Sun 04 May 2025 10:16:09 +0000
asID: 30036
IP address blocks: 2604:2e88:9800::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c2:64:7a:35:36:7c:f3:b0:ed:bd:4c:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 3 11:16:09 2025 GMT
Not After : May 4 10:16:09 2025 GMT
Subject: CN=5f0c6dd9-b06e-41f2-91e2-39745dcd7e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6a:25:4c:58:81:40:99:27:93:1c:cd:06:03:
b0:58:38:5b:4d:04:e6:e2:e7:91:da:08:de:16:e5:
1c:1b:7c:fa:8f:ad:c6:3a:a9:76:00:3d:8a:50:2f:
20:48:7b:86:c1:7f:30:d4:b3:f0:20:47:cc:10:78:
a0:0a:0a:a9:12:26:2e:80:fe:45:50:c1:19:41:7d:
77:21:a8:73:97:b3:84:9a:16:83:10:6f:26:d9:8c:
e8:fd:b8:4a:ff:75:53:9c:9a:69:f8:70:6c:fb:6c:
79:df:f5:7c:f5:a3:ae:96:13:17:c1:84:59:10:08:
18:7e:2f:a9:73:5a:48:e5:a3:06:1d:57:63:40:73:
94:61:7e:fd:7a:d5:ec:b4:31:02:d0:b3:05:b0:67:
47:55:97:79:84:b7:c2:ac:e1:bd:f0:86:c1:6c:d8:
fe:ee:b3:71:90:5e:37:ab:36:a1:3f:cd:72:be:97:
2f:a7:74:4c:7f:5c:ab:2c:11:19:4b:54:d3:de:6b:
25:54:33:f8:fe:4b:fb:5b:fb:29:b4:2c:52:20:5e:
b6:85:93:f1:58:4f:09:24:9d:e0:97:ac:2b:79:8f:
49:0a:45:f5:04:82:c0:75:3b:36:7d:e8:60:9d:f8:
39:2f:76:18:53:52:f2:77:89:60:f7:0e:34:cb:e3:
00:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:EA:EB:61:05:67:18:6B:7C:85:C0:0F:0F:DA:43:A5:58:19:37:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3316ab74-6765-369b-a923-c3e5008e84ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e88:9800::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:f9:c8:cb:e1:4b:02:66:6e:38:66:42:13:e6:4f:67:57:b9:
ab:4c:3c:e7:8f:e6:f0:d9:b3:43:c4:b4:5e:37:83:af:b2:b0:
fa:71:e7:c7:1c:aa:52:6f:ef:24:0e:7d:ae:f2:06:34:af:49:
3a:86:a2:12:02:0d:c7:8d:cd:84:1c:96:06:95:84:ec:46:99:
de:d2:7d:e0:32:75:75:c4:f9:b2:ac:7c:f4:c2:38:78:bf:40:
99:ea:18:ac:4c:94:cb:26:6d:43:08:84:6e:97:04:2b:b7:ab:
de:09:22:53:fe:19:f6:78:48:2e:f6:9a:39:1e:b8:1c:76:f5:
7f:cb:34:0b:04:58:2c:df:cc:ad:cd:a2:fa:db:10:17:04:96:
58:d2:6e:f1:64:cd:eb:8b:23:e0:e4:4b:f4:72:b0:2e:b8:84:
4a:45:d4:df:01:b7:e2:d5:57:bd:44:5b:c1:c0:d2:60:26:bd:
a0:c6:5a:75:bf:20:1f:84:4f:88:a2:46:ac:69:3a:b2:76:5d:
ad:71:6a:ad:e3:93:d3:f0:54:7e:f2:0c:38:b1:2a:6b:d4:6f:
5c:40:a3:75:bf:d3:1b:fe:0e:a7:95:09:12:d4:20:d8:4c:b8:
29:ab:17:57:3d:86:54:3a:49:10:02:a3:45:53:db:43:00:3c:
b1:c0:61:d8
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjCZHo1NnzzsO29THgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDIwMzExMTYwOVoXDTI1MDUwNDEwMTYwOVowLzEtMCsGA1UEAxMk
NWYwYzZkZDktYjA2ZS00MWYyLTkxZTItMzk3NDVkY2Q3ZTI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGolTFiBQJknkxzNBgOwWDhbTQTm4ueR2gje
FuUcG3z6j63GOql2AD2KUC8gSHuGwX8w1LPwIEfMEHigCgqpEiYugP5FUMEZQX13
Iahzl7OEmhaDEG8m2Yzo/bhK/3VTnJpp+HBs+2x53/V89aOulhMXwYRZEAgYfi+p
c1pI5aMGHVdjQHOUYX79etXstDEC0LMFsGdHVZd5hLfCrOG98IbBbNj+7rNxkF43
qzahP81yvpcvp3RMf1yrLBEZS1TT3mslVDP4/kv7W/sptCxSIF62hZPxWE8JJJ3g
l6wreY9JCkX1BILAdTs2fehgnfg5L3YYU1Lyd4lg9w40y+MAKwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFBfq62EFZxhrfIXADw/aQ6VYGTekMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMzMxNmFiNzQtNjc2NS0z
NjliLWE5MjMtYzNlNTAwOGU4NGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiJgw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAXfnIy+FLAmZuOGZCE+ZPZ1e5q0w854/m8NmzQ8S0XjeDr7Kw+nHn
xxyqUm/vJA59rvIGNK9JOoaiEgINx43NhByWBpWE7EaZ3tJ94DJ1dcT5sqx89MI4
eL9AmeoYrEyUyyZtQwiEbpcEK7er3gkiU/4Z9nhILvaaOR64HHb1f8s0CwRYLN/M
rc2i+tsQFwSWWNJu8WTN64sj4ORL9HKwLriESkXU3wG34tVXvURbwcDSYCa9oMZa
db8gH4RPiKJGrGk6snZdrXFqreOT0/BUfvIMOLEqa9RvXECjdb/TG/4Op5UJEtQg
2Ey4KasXVz2GVDpJEAKjRVPbQwA8scBh2A==
-----END CERTIFICATE-----
Generated at Sun Apr 13 07:51:32 2025 by rpki-client