Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1ab1f95a-4d14-3864-a753-c42057c0a0fe.roa
File: 1ab1f95a-4d14-3864-a753-c42057c0a0fe.roa (raw, json)
Hash identifier: /QM034UJT28QpODDV4vPaLGflR6Xf5erGLRoofJK7fI=
Subject key identifier: DF:29:B2:F5:7B:3E:96:37:12:14:7E:1D:CF:0B:E8:1C:1C:A4:44:49
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858497DA5BF650D3FB1F30CAAA600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1ab1f95a-4d14-3864-a753-c42057c0a0fe.roa
Signing time: Fri 11 Apr 2025 13:01:00 +0000
ROA not before: Fri 11 Apr 2025 13:01:00 +0000
ROA not after: Thu 10 Jul 2025 13:01:00 +0000
asID: 22909
IP address blocks: 68.52.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:7d:a5:bf:65:0d:3f:b1:f3:0c:aa:a6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Apr 11 13:01:00 2025 GMT
Not After : Jul 10 13:01:00 2025 GMT
Subject: CN=4add47ef-3b6e-48e4-800a-3ff7e1ea1808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4f:32:91:4d:ed:e1:c9:01:7c:af:53:c1:23:
e6:9c:76:f9:0c:d4:61:15:55:ad:a9:67:e1:b7:1b:
e5:4c:0d:09:cf:8e:0b:e4:08:b4:59:66:9d:8d:9d:
35:5f:1f:8e:0b:69:13:29:95:ac:15:30:29:36:98:
da:6e:c0:09:d1:70:13:bc:14:40:fd:de:91:98:85:
cc:4a:36:75:8c:53:0e:3f:99:0a:91:1e:7e:1f:b0:
2e:20:05:e0:d9:c7:49:8a:d8:21:2e:3f:ab:3a:ec:
91:dd:46:5a:e1:bc:bb:9f:93:1d:ba:22:2f:eb:61:
60:24:4b:e0:67:b3:0d:53:3d:38:1a:66:bc:86:36:
b8:a3:bc:24:66:12:83:ee:57:f7:6d:38:2a:78:c6:
68:8b:fb:ea:b6:32:88:f1:f2:22:ba:13:e0:e5:19:
a2:9c:20:14:20:ef:2c:60:3c:c7:39:50:17:e6:a2:
62:11:93:f6:b7:18:58:9b:bd:fd:85:e8:08:68:61:
89:a9:08:16:76:cc:7c:8b:c9:7b:f1:09:0f:9e:09:
9c:7b:93:74:ec:81:77:14:c5:9c:00:66:9e:f3:61:
81:64:19:7c:4e:6e:dd:f9:df:4b:80:1f:7c:55:48:
81:b1:db:b2:0c:bf:75:bd:3c:3d:47:43:ab:56:13:
73:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:29:B2:F5:7B:3E:96:37:12:14:7E:1D:CF:0B:E8:1C:1C:A4:44:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1ab1f95a-4d14-3864-a753-c42057c0a0fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.52.48.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d3:8e:4c:7d:dd:66:2c:bb:81:15:f8:22:b8:d0:f8:33:73:8c:
a8:8d:8e:c5:08:fe:e8:2f:a0:7e:17:2c:91:62:a7:24:5b:2e:
4d:2c:1f:01:bd:96:df:06:24:ec:d1:e9:d5:94:5f:f6:e5:0d:
44:8c:3a:bf:77:df:bd:86:e6:6a:1b:5a:e3:a5:23:d8:05:34:
eb:a7:d7:38:a6:07:21:8e:91:37:e9:01:d0:61:59:cd:18:94:
bb:5a:b4:20:c1:39:eb:03:e3:e2:a5:16:4d:c3:62:f5:45:1f:
75:2f:9b:ee:dd:66:8d:6e:5e:7d:74:48:d7:81:37:4e:a6:b9:
41:7d:cf:36:2a:79:99:b6:ca:3f:22:35:a7:2d:6a:91:db:db:
5c:ad:60:7f:87:d1:dd:32:1e:04:35:f1:1b:96:e1:50:cb:70:
3a:a8:6f:a9:8b:d6:81:54:ba:ca:28:d7:c1:86:54:61:e6:23:
2f:88:9b:c6:6c:7f:45:32:20:6b:39:57:7c:3f:a8:41:00:2e:
18:16:3e:77:3a:a1:3d:36:0b:65:c1:26:0a:01:b0:fe:ee:a9:
1b:f4:ff:2b:21:ad:39:c3:49:52:3d:61:cb:68:53:e4:6b:f4:
4d:44:14:ad:9f:38:3b:41:b0:b3:2c:36:c8:55:f7:e9:89:48:
4f:29:f1:2b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pb9lDT+x8wyqpgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk
NGFkZDQ3ZWYtM2I2ZS00OGU0LTgwMGEtM2ZmN2UxZWExODA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkk8ykU3t4ckBfK9TwSPmnHb5DNRhFVWtqWfh
txvlTA0Jz44L5Ai0WWadjZ01Xx+OC2kTKZWsFTApNpjabsAJ0XATvBRA/d6RmIXM
SjZ1jFMOP5kKkR5+H7AuIAXg2cdJitghLj+rOuyR3UZa4by7n5MduiIv62FgJEvg
Z7MNUz04Gma8hja4o7wkZhKD7lf3bTgqeMZoi/vqtjKI8fIiuhPg5RminCAUIO8s
YDzHOVAX5qJiEZP2txhYm739hegIaGGJqQgWdsx8i8l78QkPngmce5N07IF3FMWc
AGae82GBZBl8Tm7d+d9LgB98VUiBsduyDL91vTw9R0OrVhNzCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN8psvV7PpY3EhR+Hc8L6BwcpERJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWFiMWY5NWEtNGQxNC0z
ODY0LWE3NTMtYzQyMDU3YzBhMGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARDQwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANOOTH3dZiy7gRX4IrjQ+DNzjKiNjsUI/ugvoH4XLJFipyRbLk0sHwG9
lt8GJOzR6dWUX/blDUSMOr93372G5mobWuOlI9gFNOun1zimByGOkTfpAdBhWc0Y
lLtatCDBOesD4+KlFk3DYvVFH3Uvm+7dZo1uXn10SNeBN06muUF9zzYqeZm2yj8i
NactapHb21ytYH+H0d0yHgQ18RuW4VDLcDqob6mL1oFUusoo18GGVGHmIy+Im8Zs
f0UyIGs5V3w/qEEALhgWPnc6oT02C2XBJgoBsP7uqRv0/yshrTnDSVI9YctoU+Rr
9E1EFK2fODtBsLMsNshV9+mJSE8p8Ss=
-----END CERTIFICATE-----
Generated at Sat Apr 12 14:12:28 2025 by rpki-client