Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c704fd0-7898-317b-8d95-af759a065763.roa
File: 2c704fd0-7898-317b-8d95-af759a065763.roa (raw, json)
Hash identifier: D9ZL24YQO7S5Y5xeezrtmDnt5O7Xe7q9/29kVLL4Dug=
Subject key identifier: 9A:33:0C:F5:C3:94:5E:5E:08:A9:51:F4:15:8B:1F:0A:ED:CC:9D:B0
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F82D90D27CFDC9464C9B60
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c704fd0-7898-317b-8d95-af759a065763.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33490
IP address blocks: 71.63.160.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f8:2d:90:d2:7c:fd:c9:46:4c:9b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=8a71fc69-7c2c-484c-afbb-c18d59146439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3d:39:66:d7:6e:68:1f:87:1e:37:7d:61:c7:
b0:2e:84:ed:ba:67:ce:53:40:98:54:6a:d3:22:3d:
d0:bc:22:e9:64:20:b7:cb:c2:3c:07:cb:d4:91:77:
f3:a6:26:46:ff:60:c9:45:fa:58:a2:8a:82:51:d2:
5e:a5:ab:0d:86:cb:e7:b5:90:03:0c:ea:ea:15:aa:
72:dd:0a:7e:8a:62:c3:27:6c:fe:59:d6:40:c4:59:
1d:9a:a9:f4:40:21:52:0e:4d:81:ad:b1:a3:dc:19:
86:ca:c8:db:3e:07:e4:32:37:5b:36:58:cd:01:0d:
dc:69:59:5b:0f:e4:c4:47:f8:df:c2:f8:d1:a2:52:
ce:78:42:4c:28:aa:3e:91:bb:4a:83:d1:43:29:03:
cc:b8:23:6d:fe:ea:03:fc:67:c9:88:d9:f3:e5:fa:
7a:33:af:45:55:f6:0d:46:57:37:9b:ce:e4:27:50:
f0:75:3f:34:a9:dc:d6:48:a0:a3:c0:db:5a:b3:f0:
47:ac:7e:1b:35:14:fd:5a:84:c0:d9:09:80:f8:e4:
2e:51:cd:58:09:9d:c9:00:71:e4:92:97:58:5d:02:
10:ac:04:b3:0c:a4:69:71:a3:09:32:7a:c5:1e:48:
18:b6:c0:51:42:4e:d2:88:40:9f:15:a7:85:ec:79:
8c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:33:0C:F5:C3:94:5E:5E:08:A9:51:F4:15:8B:1F:0A:ED:CC:9D:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c704fd0-7898-317b-8d95-af759a065763.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.63.160.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bc:f5:64:7a:e7:f8:ad:e7:94:e2:eb:cd:3a:d1:f2:35:fc:ef:
38:16:45:e1:95:fd:23:f9:35:ce:45:20:13:d1:84:b9:4d:2e:
35:cc:1b:02:ec:8e:bf:b2:ea:2a:f7:13:38:23:00:b3:94:bc:
bd:94:ff:60:11:a0:0b:b9:8f:ab:96:d6:15:9a:b3:38:11:44:
23:36:62:53:b6:5f:0d:76:50:8f:64:91:54:54:01:a3:d2:ff:
af:b0:9c:c2:cd:16:92:b2:a0:6c:e0:34:38:12:bd:e8:26:cc:
ae:c2:e9:e8:79:d4:78:02:08:db:17:d8:76:5d:16:57:25:13:
f2:61:05:13:33:f4:b5:97:e3:3a:5b:a4:5f:85:59:55:5f:58:
71:91:50:71:0b:6f:7e:3f:af:f2:1e:31:e5:92:b3:96:b5:a9:
0f:50:08:00:c2:e6:5d:a1:33:02:dd:12:92:82:5c:cf:dc:71:
4c:a9:19:89:ac:2b:97:92:f2:9f:59:ac:df:46:6b:dd:c4:92:
71:aa:66:82:c2:82:c0:a4:3d:a6:6f:18:d9:35:c7:02:fc:d3:
b5:a0:82:4a:ed:89:42:ce:b6:2f:83:55:be:5e:7c:85:ae:90:
c9:ac:7c:28:72:5d:82:33:ae:20:6b:64:f2:96:da:42:cc:e0:
62:74:c1:4e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+C2Q0nz9yUZMm2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
OGE3MWZjNjktN2MyYy00ODRjLWFmYmItYzE4ZDU5MTQ2NDM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtz05ZtduaB+HHjd9YcewLoTtumfOU0CYVGrT
Ij3QvCLpZCC3y8I8B8vUkXfzpiZG/2DJRfpYooqCUdJepasNhsvntZADDOrqFapy
3Qp+imLDJ2z+WdZAxFkdmqn0QCFSDk2BrbGj3BmGysjbPgfkMjdbNljNAQ3caVlb
D+TER/jfwvjRolLOeEJMKKo+kbtKg9FDKQPMuCNt/uoD/GfJiNnz5fp6M69FVfYN
Rlc3m87kJ1DwdT80qdzWSKCjwNtas/BHrH4bNRT9WoTA2QmA+OQuUc1YCZ3JAHHk
kpdYXQIQrASzDKRpcaMJMnrFHkgYtsBRQk7SiECfFaeF7HmMxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJozDPXDlF5eCKlR9BWLHwrtzJ2wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmM3MDRmZDAtNzg5OC0z
MTdiLThkOTUtYWY3NTlhMDY1NzYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRz+gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALz1ZHrn+K3nlOLrzTrR8jX87zgWReGV/SP5Nc5FIBPRhLlNLjXMGwLs
jr+y6ir3EzgjALOUvL2U/2ARoAu5j6uW1hWaszgRRCM2YlO2Xw12UI9kkVRUAaPS
/6+wnMLNFpKyoGzgNDgSvegmzK7C6eh51HgCCNsX2HZdFlclE/JhBRMz9LWX4zpb
pF+FWVVfWHGRUHELb34/r/IeMeWSs5a1qQ9QCADC5l2hMwLdEpKCXM/ccUypGYms
K5eS8p9ZrN9Ga93EknGqZoLCgsCkPaZvGNk1xwL807WggkrtiULOti+DVb5efIWu
kMmsfChyXYIzriBrZPKW2kLM4GJ0wU4=
-----END CERTIFICATE-----
Generated at Sun Apr 13 11:58:30 2025 by rpki-client