Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0da281b4-7823-3057-b0f4-e9fa264fd79c.roa
File: 0da281b4-7823-3057-b0f4-e9fa264fd79c.roa (raw, json)
Hash identifier: tUevBQZS6ewyPb3hmoYus+gKZ96ZJsjMm0KjP/zh5iM=
Subject key identifier: AF:B3:82:55:DA:B9:12:0D:4D:30:76:7D:BC:69:AA:43:85:0A:62:7A
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858497DA64A39B74378B1EC5EA340
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0da281b4-7823-3057-b0f4-e9fa264fd79c.roa
Signing time: Fri 11 Apr 2025 13:01:00 +0000
ROA not before: Fri 11 Apr 2025 13:01:00 +0000
ROA not after: Thu 10 Jul 2025 13:01:00 +0000
asID: 33662
IP address blocks: 2001:559:80c8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:7d:a6:4a:39:b7:43:78:b1:ec:5e:a3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Apr 11 13:01:00 2025 GMT
Not After : Jul 10 13:01:00 2025 GMT
Subject: CN=8f891370-7bc1-4ccb-9066-3ebce06fe5b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:33:18:a3:47:05:5f:a2:34:10:26:ed:32:e6:
81:0f:73:11:34:67:c0:20:54:bd:8f:b7:3c:33:70:
63:70:76:0b:36:cc:f9:d6:1c:c2:6c:73:9b:80:64:
5a:79:69:64:c4:cd:5b:68:bb:ce:70:1a:d2:36:cf:
82:51:43:f5:5b:da:eb:a2:49:67:96:1d:65:91:56:
5e:a2:85:c7:65:24:1f:9f:18:e3:f4:93:48:1d:a5:
05:7d:48:5c:d1:f7:2b:be:64:8c:94:71:d6:36:57:
34:9f:8f:79:46:a3:0b:63:c9:c3:7b:21:fb:1b:4f:
83:69:5b:86:91:4a:22:f5:d8:9a:b0:33:60:d0:4e:
18:97:c1:1a:fe:4c:ba:04:3f:bd:91:75:85:d3:31:
84:18:76:4d:db:40:4e:6e:10:06:96:a1:96:49:70:
97:a4:72:3f:fe:7c:d2:87:12:cd:fe:af:bc:72:3b:
2e:9b:2f:9f:55:58:f0:c6:52:64:1d:16:18:0d:0a:
e3:61:1e:18:35:6a:fb:f9:6c:b0:57:49:2a:d8:63:
90:6a:f5:4e:2f:31:64:31:2e:2b:66:fd:1e:08:a6:
8e:5b:8a:73:94:1c:de:74:8f:79:c2:fc:56:42:fa:
05:ae:08:bd:5f:38:89:bb:ff:8c:c5:69:d7:05:1b:
26:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:B3:82:55:DA:B9:12:0D:4D:30:76:7D:BC:69:AA:43:85:0A:62:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0da281b4-7823-3057-b0f4-e9fa264fd79c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:80c8::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:f4:34:48:35:00:d0:5a:73:67:16:63:6b:64:ca:82:2f:6a:
e8:51:48:98:b6:13:fa:4f:7c:65:29:1f:b8:10:91:4d:ce:af:
4d:0a:2f:ca:a7:4f:00:44:28:40:ab:27:93:39:65:2a:43:40:
b5:1c:95:18:59:8f:df:10:2d:11:64:1a:68:fa:e4:61:60:24:
15:24:ec:7b:aa:f5:c9:77:c4:0b:04:eb:42:fb:7a:8e:64:8a:
98:a1:40:f8:78:d3:a0:80:1e:94:a8:7b:72:42:07:15:e8:af:
ce:5d:09:ec:6d:e6:cb:49:82:49:50:ad:26:91:10:92:3e:1c:
97:99:78:55:c8:b5:02:4b:61:29:55:c8:5b:c5:1c:9c:0d:d0:
16:67:47:b3:6a:a2:2e:78:ca:a5:2f:43:a5:26:dd:50:6c:4a:
0a:e7:3c:f5:75:df:06:29:c0:3e:cf:c7:9a:7d:3d:34:03:01:
90:66:c9:53:ab:ca:bd:5c:e4:9b:1a:6b:43:08:3a:28:74:22:
75:d0:b3:79:16:4d:06:be:cc:c9:80:e2:33:46:52:91:a6:2d:
51:90:57:a0:a4:83:dd:43:8a:80:85:92:e4:3c:eb:89:f0:61:
39:1d:99:2b:25:35:16:bd:b4:7a:dc:ba:a3:42:a0:ea:3b:62:
ce:50:16:23
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl9pko5t0N4sexeo0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk
OGY4OTEzNzAtN2JjMS00Y2NiLTkwNjYtM2ViY2UwNmZlNWI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTMYo0cFX6I0ECbtMuaBD3MRNGfAIFS9j7c8
M3BjcHYLNsz51hzCbHObgGRaeWlkxM1baLvOcBrSNs+CUUP1W9rroklnlh1lkVZe
ooXHZSQfnxjj9JNIHaUFfUhc0fcrvmSMlHHWNlc0n495RqMLY8nDeyH7G0+DaVuG
kUoi9diasDNg0E4Yl8Ea/ky6BD+9kXWF0zGEGHZN20BObhAGlqGWSXCXpHI//nzS
hxLN/q+8cjsumy+fVVjwxlJkHRYYDQrjYR4YNWr7+WywV0kq2GOQavVOLzFkMS4r
Zv0eCKaOW4pzlBzedI95wvxWQvoFrgi9XziJu/+MxWnXBRsmxwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFK+zglXauRINTTB2fbxpqkOFCmJ6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGRhMjgxYjQtNzgyMy0z
MDU3LWIwZjQtZTlmYTI2NGZkNzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYDI
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADD0NEg1ANBac2cWY2tkyoIvauhRSJi2E/pPfGUpH7gQkU3Or00K
L8qnTwBEKECrJ5M5ZSpDQLUclRhZj98QLRFkGmj65GFgJBUk7Huq9cl3xAsE60L7
eo5kipihQPh406CAHpSoe3JCBxXor85dCext5stJgklQrSaREJI+HJeZeFXItQJL
YSlVyFvFHJwN0BZnR7Nqoi54yqUvQ6Um3VBsSgrnPPV13wYpwD7Px5p9PTQDAZBm
yVOryr1c5Jsaa0MIOih0InXQs3kWTQa+zMmA4jNGUpGmLVGQV6Ckg91DioCFkuQ8
64nwYTkdmSslNRa9tHrcuqNCoOo7Ys5QFiM=
-----END CERTIFICATE-----
Generated at Sat Apr 12 16:01:26 2025 by rpki-client