Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/48bbf8f8-21e3-3852-bf46-7e8822870003.roa
File: 48bbf8f8-21e3-3852-bf46-7e8822870003.roa (raw, json)
Hash identifier: BBzHb1FiypLvvNCAh5uA0F8e/k2X3HJ7TfqEjNFs0NM=
Subject key identifier: B0:22:67:A7:1F:E7:22:43:09:BE:45:F7:D4:32:27:13:3A:60:3F:86
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285848FD08FD8D64C3C2FB330E4B80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/48bbf8f8-21e3-3852-bf46-7e8822870003.roa
Signing time: Mon 24 Feb 2025 11:24:31 +0000
ROA not before: Mon 24 Feb 2025 11:24:31 +0000
ROA not after: Sun 25 May 2025 10:24:31 +0000
asID: 30036
IP address blocks: 72.255.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:08:fd:8d:64:c3:c2:fb:33:0e:4b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 24 11:24:31 2025 GMT
Not After : May 25 10:24:31 2025 GMT
Subject: CN=9adead1a-4914-47f7-afaf-8de823f4c328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6d:4f:cc:f5:42:b7:30:e1:e0:a0:0c:5e:24:
cf:0e:4e:3d:13:c0:15:91:a2:b2:ce:4a:47:a0:21:
17:26:73:2e:b8:43:7c:e7:04:de:4b:52:89:b2:91:
93:4e:dd:c7:1f:6b:5b:7e:79:21:d0:37:2a:93:31:
5d:a8:4f:f9:1e:a3:72:c8:ca:50:d7:07:17:41:ca:
9c:9c:db:24:4a:54:6b:c8:bc:ea:f3:bc:82:95:b5:
e8:68:37:2a:74:dc:55:e7:61:1f:67:75:c8:b4:54:
60:fc:88:f5:21:f1:41:c9:90:11:5f:3e:0d:36:48:
a3:6c:03:de:97:85:fa:6c:86:d3:f3:0b:4c:41:91:
75:67:16:0a:2b:a2:57:7c:42:a7:db:29:a2:90:52:
59:ed:d0:04:d4:c5:0d:37:74:67:37:51:d8:2b:39:
72:05:27:4a:e1:84:3d:4c:0d:d1:ed:16:86:90:38:
cb:73:5d:8a:b6:34:dd:d7:68:bb:f2:d9:a8:cd:8b:
49:a8:eb:6c:f3:e3:df:ec:26:ed:47:a3:5c:42:c5:
29:30:24:13:48:40:9f:da:03:9b:bd:6b:53:8e:8d:
8c:09:77:ec:0e:ad:b9:74:dd:64:23:e9:44:55:2f:
89:67:44:d6:31:2a:0a:81:be:c4:6c:59:6a:d9:60:
16:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:22:67:A7:1F:E7:22:43:09:BE:45:F7:D4:32:27:13:3A:60:3F:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/48bbf8f8-21e3-3852-bf46-7e8822870003.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
72.255.73.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:9c:0d:22:3b:11:94:1b:94:fc:22:63:71:b0:4d:46:47:0b:
dc:9e:2c:4e:3c:1c:d4:e6:0e:5e:4b:c0:4a:8a:08:35:d3:94:
a4:d5:5f:ae:a7:ef:53:3f:e0:b9:56:39:46:77:a8:ec:fb:54:
ec:35:f3:2b:dd:a8:ae:af:71:d1:af:3c:30:87:c1:44:a7:aa:
9c:fd:69:70:19:39:ba:a5:de:3a:63:27:07:b7:e7:2c:ba:88:
f6:14:ac:8f:5d:a0:87:17:b8:64:53:7c:92:34:8e:bc:b8:83:
a8:a2:60:a8:3a:2f:fe:ec:2c:40:36:41:10:f5:a2:e3:da:65:
34:f6:f3:60:17:de:14:17:3c:b7:87:56:10:28:cd:6c:28:af:
94:63:75:cf:48:00:37:06:30:7f:92:90:9f:e7:2f:2c:36:04:
44:47:84:c5:f6:68:26:71:b7:84:b0:2d:21:4d:7e:57:b9:73:
97:6f:2d:ed:1a:ee:21:60:eb:d2:58:8e:1c:ab:d0:91:c8:7b:
96:3b:a1:54:cb:55:5b:06:44:1b:89:e1:ba:25:c8:ff:78:68:
06:60:e6:b8:f7:9f:a1:1a:2b:fd:75:71:6a:7b:23:3d:28:dc:
fb:69:03:03:e9:ac:64:cb:b8:a5:07:be:a9:a5:e5:61:12:19:
21:e7:b0:fb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9CP2NZMPC+zMOS4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDIyNDExMjQzMVoXDTI1MDUyNTEwMjQzMVowLzEtMCsGA1UEAxMk
OWFkZWFkMWEtNDkxNC00N2Y3LWFmYWYtOGRlODIzZjRjMzI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArG1PzPVCtzDh4KAMXiTPDk49E8AVkaKyzkpH
oCEXJnMuuEN85wTeS1KJspGTTt3HH2tbfnkh0DcqkzFdqE/5HqNyyMpQ1wcXQcqc
nNskSlRryLzq87yClbXoaDcqdNxV52EfZ3XItFRg/Ij1IfFByZARXz4NNkijbAPe
l4X6bIbT8wtMQZF1ZxYKK6JXfEKn2ymikFJZ7dAE1MUNN3RnN1HYKzlyBSdK4YQ9
TA3R7RaGkDjLc12KtjTd12i78tmozYtJqOts8+Pf7CbtR6NcQsUpMCQTSECf2gOb
vWtTjo2MCXfsDq25dN1kI+lEVS+JZ0TWMSoKgb7EbFlq2WAWcQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLAiZ6cf5yJDCb5F99QyJxM6YD+GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNDhiYmY4ZjgtMjFlMy0z
ODUyLWJmNDYtN2U4ODIyODcwMDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASP9JMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC6cDSI7EZQblPwiY3GwTUZHC9yeLE48HNTmDl5LwEqKCDXTlKTVX66n
71M/4LlWOUZ3qOz7VOw18yvdqK6vcdGvPDCHwUSnqpz9aXAZObql3jpjJwe35yy6
iPYUrI9doIcXuGRTfJI0jry4g6iiYKg6L/7sLEA2QRD1ouPaZTT282AX3hQXPLeH
VhAozWwor5Rjdc9IADcGMH+SkJ/nLyw2BERHhMX2aCZxt4SwLSFNfle5c5dvLe0a
7iFg69JYjhyr0JHIe5Y7oVTLVVsGRBuJ4bolyP94aAZg5rj3n6EaK/11cWp7Iz0o
3PtpAwPprGTLuKUHvqml5WESGSHnsPs=
-----END CERTIFICATE-----
Generated at Sun Apr 13 00:19:29 2025 by rpki-client