Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/eb140bb7-bc40-3687-9717-cd6fc8608947.roa
File: eb140bb7-bc40-3687-9717-cd6fc8608947.roa (raw, json)
Hash identifier: o4CFuKZm7zB2paB4mrmO+1rAiL6JMrZ1KstRvzsf+JU=
Subject key identifier: 8D:9F:F8:D3:56:EF:B2:79:53:B7:45:79:D7:E9:EF:1F:E9:76:67:E7
Certificate issuer: /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial: 010D0C9F43285848D7A649C6D56ED55F78F1BA00
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/eb140bb7-bc40-3687-9717-cd6fc8608947.roa
Signing time: Tue 11 Feb 2025 02:00:39 +0000
ROA not before: Tue 11 Feb 2025 02:00:39 +0000
ROA not after: Mon 12 May 2025 01:00:39 +0000
asID: 6621
IP address blocks: 67.44.32.0/20 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d7:a6:49:c6:d5:6e:d5:5f:78:f1:ba:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Validity
Not Before: Feb 11 02:00:39 2025 GMT
Not After : May 12 01:00:39 2025 GMT
Subject: CN=cc7bc159-c0c6-4f18-b0de-d4401081e5d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:05:7c:bf:33:0e:87:2d:b0:f8:97:92:90:5b:
e5:b7:6c:73:3f:2a:ae:94:65:fe:0f:6e:f9:0f:3f:
df:8f:2b:82:5f:20:1c:5f:64:42:41:7c:e0:c2:86:
1e:e1:06:dc:d7:91:28:23:83:9e:b9:ff:ef:89:69:
b9:a6:d9:ec:4d:d5:0a:b5:81:46:85:a1:58:84:7b:
3f:06:ec:da:98:70:ec:9a:20:ec:16:42:6d:8a:74:
42:6b:f0:6a:24:68:21:8d:0e:88:5c:fc:8d:10:64:
c0:83:9e:39:ea:53:17:ed:3e:a7:d6:1d:60:05:f5:
86:cf:ec:73:eb:0a:1c:e5:ec:31:91:6d:ff:ef:46:
14:83:ef:93:c9:cf:32:6f:de:6c:6d:5a:90:17:45:
c8:2a:eb:17:28:65:84:c5:73:75:ce:b7:9a:48:28:
0c:c8:11:6c:f5:3a:ac:c7:49:91:01:fb:d9:ad:35:
fc:20:3b:b8:43:c7:4b:35:9f:2b:48:7f:9a:a8:2a:
e0:b8:e1:04:1a:2b:d5:fd:ef:e8:a7:41:d9:f4:ed:
2f:c1:fa:d7:86:fa:11:36:50:2e:ca:3e:f9:0b:56:
1d:d1:50:9d:6e:f1:d7:7d:c2:ba:10:c6:9c:b0:ca:
91:41:f3:2e:73:3b:49:06:66:38:64:af:d0:98:79:
09:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:9F:F8:D3:56:EF:B2:79:53:B7:45:79:D7:E9:EF:1F:E9:76:67:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/eb140bb7-bc40-3687-9717-cd6fc8608947.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
X509v3 Authority Key Identifier:
keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
sbgp-ipAddrBlock: critical
IPv4:
67.44.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:4c:a9:4b:66:09:78:ee:dc:12:9a:7b:91:cd:66:06:10:83:
60:a8:c6:31:50:95:c8:4a:d3:77:83:f4:1e:e3:71:c2:7f:23:
5c:3a:76:48:18:2d:8b:6e:13:c8:10:8d:ac:3b:ee:ea:2b:8a:
24:e0:d7:82:bb:fb:76:60:92:f9:2e:4a:d0:a1:0a:85:f8:80:
b1:15:89:dc:13:42:2b:a0:aa:aa:30:cb:60:df:55:5c:71:27:
71:ff:ea:6d:2c:cc:a1:da:91:27:a9:c6:df:c2:24:0e:53:ea:
0b:dc:3b:a8:1a:63:f0:2c:d4:f7:c3:7e:f2:c9:75:0f:cd:4c:
2a:e6:c3:5e:7a:c1:94:fd:8f:97:7c:61:51:86:ee:18:a1:bb:
f3:f6:55:d4:c8:c6:86:3c:91:a2:21:33:ca:c8:1e:12:ab:29:
3d:5b:2e:42:a9:66:3a:15:2d:93:3a:a1:dd:5b:f3:2a:29:15:
ec:f6:5c:3e:98:a3:6d:0d:b8:f7:e3:19:39:b2:91:2c:9d:59:
82:0e:dc:ef:8f:f9:c0:a4:57:d9:49:f1:6c:ce:c5:9b:ab:37:
f9:a9:8a:6f:f2:e4:f0:14:05:2d:1c:72:55:09:af:bf:55:5a:
95:c2:76:fb:c6:22:20:8c:90:ce:25:43:5c:2a:41:ee:09:55:
8d:39:c3:c6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjXpknG1W7VX3jxugAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDFmODg2ZGYtNmM1OC00ZWE3LTlkMWYtMDY1OWUyMzI0
NDYwMB4XDTI1MDIxMTAyMDAzOVoXDTI1MDUxMjAxMDAzOVowLzEtMCsGA1UEAxMk
Y2M3YmMxNTktYzBjNi00ZjE4LWIwZGUtZDQ0MDEwODFlNWQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgV8vzMOhy2w+JeSkFvlt2xzPyqulGX+D275
Dz/fjyuCXyAcX2RCQXzgwoYe4Qbc15EoI4Oeuf/viWm5ptnsTdUKtYFGhaFYhHs/
BuzamHDsmiDsFkJtinRCa/BqJGghjQ6IXPyNEGTAg5456lMX7T6n1h1gBfWGz+xz
6woc5ewxkW3/70YUg++Tyc8yb95sbVqQF0XIKusXKGWExXN1zreaSCgMyBFs9Tqs
x0mRAfvZrTX8IDu4Q8dLNZ8rSH+aqCrguOEEGivV/e/op0HZ9O0vwfrXhvoRNlAu
yj75C1Yd0VCdbvHXfcK6EMacsMqRQfMucztJBmY4ZK/QmHkJAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI2f+NNW77J5U7dFedfp7x/pdmfnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4
ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5ZTIzMjQ0NjAvZWIxNDBiYjctYmM0MC0z
Njg3LTk3MTctY2Q2ZmM4NjA4OTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDFmODg2ZGYtNmM1OC00ZWE3LTlk
MWYtMDY1OWUyMzI0NDYwL2QxZjg4NmRmLTZjNTgtNGVhNy05ZDFmLTA2NTllMjMy
NDQ2MC5jcmwwHwYDVR0jBBgwFoAU3hZRIFaD1ggT5kJFjv0WcO6Hb7swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5
ZTIzMjQ0NjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQywgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ5MqUtmCXju3BKae5HNZgYQg2CoxjFQlchK03eD9B7jccJ/I1w6dkgY
LYtuE8gQjaw77uoriiTg14K7+3ZgkvkuStChCoX4gLEVidwTQiugqqowy2DfVVxx
J3H/6m0szKHakSepxt/CJA5T6gvcO6gaY/As1PfDfvLJdQ/NTCrmw156wZT9j5d8
YVGG7hihu/P2VdTIxoY8kaIhM8rIHhKrKT1bLkKpZjoVLZM6od1b8yopFez2XD6Y
o20NuPfjGTmykSydWYIO3O+P+cCkV9lJ8WzOxZurN/mpim/y5PAUBS0cclUJr79V
WpXCdvvGIiCMkM4lQ1wqQe4JVY05w8Y=
-----END CERTIFICATE-----
Generated at Sun Apr 13 04:14:37 2025 by rpki-client