Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3254d271-9909-32df-b04d-ff75c3c1fcfc.roa
File: 3254d271-9909-32df-b04d-ff75c3c1fcfc.roa (raw, json)
Hash identifier: ufFJBhTYK2ZAAfA9B0GZelPaeC7SA9LQ/ej4Nd7Lhag=
Subject key identifier: E8:FB:09:C9:56:8D:C6:88:00:FF:61:38:5C:39:EC:B1:53:39:C4:D4
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB0B34B8CF04F0A3C3C2400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3254d271-9909-32df-b04d-ff75c3c1fcfc.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33287
IP address blocks: 2603:2041:c000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b0:b3:4b:8c:f0:4f:0a:3c:3c:24:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=6ba9e4ef-5cd0-434f-b3e4-f92c5ea9dd79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f0:2c:f2:1d:bb:4b:72:3d:33:66:da:4d:83:
3c:9e:31:9c:8b:a4:c7:c4:30:bf:b4:30:66:97:43:
ea:bb:72:bc:24:e1:01:f8:71:d8:3c:69:f4:8b:bd:
25:e3:50:24:2c:60:10:d4:38:cc:4a:5d:34:73:ba:
85:04:19:5e:d9:e1:da:6d:4c:15:d9:8b:ae:6b:11:
f3:14:43:6d:9d:e7:82:6d:6d:45:3e:0a:38:af:b5:
43:9f:77:f9:c9:3d:21:b7:82:dd:ac:be:73:41:2e:
3a:44:09:85:d6:b6:36:c6:af:a1:c5:af:24:48:9a:
e2:18:2c:c5:63:de:47:3a:1e:7f:b0:18:e7:80:64:
d5:b0:af:f6:c2:ce:07:ee:2e:d5:3b:34:f8:0a:05:
20:50:06:ed:95:5e:0b:30:29:ae:4b:2a:d6:19:a4:
65:af:6b:5e:78:bc:b9:4b:f4:b5:dd:51:ac:9c:4b:
6c:91:95:68:37:14:2c:04:66:7a:75:d3:b8:6c:1d:
d6:7a:48:e4:0f:ab:a8:2c:0e:e9:8a:00:e3:1e:18:
ba:49:7b:2a:7c:3f:ca:86:88:8c:9f:af:9f:98:1a:
86:49:36:72:91:37:7b:ad:59:79:95:35:8f:4d:6b:
fa:07:a5:0d:92:f8:a1:74:9f:62:73:5c:01:18:70:
b9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:FB:09:C9:56:8D:C6:88:00:FF:61:38:5C:39:EC:B1:53:39:C4:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3254d271-9909-32df-b04d-ff75c3c1fcfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:2041:c000::/34
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:1e:a7:e5:59:7a:4d:59:84:c7:ff:a0:d1:7f:fc:56:ee:85:
b0:68:f7:1c:8d:40:d2:26:d6:74:93:83:20:52:08:0c:3b:26:
a9:92:76:b7:b6:7a:68:7b:d1:4a:f1:2c:00:eb:2a:2f:7e:53:
2a:80:d8:11:4d:e5:bc:fe:ba:42:a2:6b:89:c6:37:7b:2f:7d:
ac:ef:a2:ef:a5:7f:e0:24:eb:fb:0a:40:ca:09:d5:6e:58:57:
ed:a2:4f:c8:dd:ee:db:07:dc:55:89:ba:40:b7:33:2a:43:eb:
f4:3b:33:dd:d8:2a:d7:41:2c:2b:5b:93:b8:5e:8d:80:4a:e7:
c2:6f:2e:5d:b9:d9:18:90:2b:4e:d7:d5:c0:f3:1f:ab:de:66:
55:d0:f2:c7:b8:55:00:29:83:cf:0a:b2:06:40:d1:fd:1e:62:
82:9a:49:90:d3:2a:47:5d:d5:60:2e:07:7f:40:a3:df:d7:79:
d3:da:9a:be:41:2f:16:4a:15:82:5e:e0:33:39:95:db:a7:3e:
e1:6a:bc:23:48:34:cc:f2:a6:02:72:48:b5:89:16:78:8f:6e:
63:cb:65:d6:ef:97:df:da:25:59:8d:07:8c:d6:1e:ec:fb:59:
5f:ba:22:5a:c6:d0:59:16:3d:75:6d:1c:a4:61:20:15:cc:2a:
c7:94:be:c7
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEkssLNLjPBPCjw8JAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
NmJhOWU0ZWYtNWNkMC00MzRmLWIzZTQtZjkyYzVlYTlkZDc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvAs8h27S3I9M2baTYM8njGci6THxDC/tDBm
l0Pqu3K8JOEB+HHYPGn0i70l41AkLGAQ1DjMSl00c7qFBBle2eHabUwV2YuuaxHz
FENtneeCbW1FPgo4r7VDn3f5yT0ht4LdrL5zQS46RAmF1rY2xq+hxa8kSJriGCzF
Y95HOh5/sBjngGTVsK/2ws4H7i7VOzT4CgUgUAbtlV4LMCmuSyrWGaRlr2teeLy5
S/S13VGsnEtskZVoNxQsBGZ6ddO4bB3WekjkD6uoLA7pigDjHhi6SXsqfD/KhoiM
n6+fmBqGSTZykTd7rVl5lTWPTWv6B6UNkvihdJ9ic1wBGHC5/wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFOj7CclWjcaIAP9hOFw57LFTOcTUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzI1NGQyNzEtOTkwOS0z
MmRmLWIwNGQtZmY3NWMzYzFmY2ZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgMgQcAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAPh6n5Vl6TVmEx/+g0X/8Vu6FsGj3HI1A0ibWdJODIFIIDDsmqZJ2
t7Z6aHvRSvEsAOsqL35TKoDYEU3lvP66QqJricY3ey99rO+i76V/4CTr+wpAygnV
blhX7aJPyN3u2wfcVYm6QLczKkPr9Dsz3dgq10EsK1uTuF6NgErnwm8uXbnZGJAr
TtfVwPMfq95mVdDyx7hVACmDzwqyBkDR/R5igppJkNMqR13VYC4Hf0Cj39d509qa
vkEvFkoVgl7gMzmV26c+4Wq8I0g0zPKmAnJItYkWeI9uY8tl1u+X39olWY0HjNYe
7PtZX7oiWsbQWRY9dW0cpGEgFcwqx5S+xw==
-----END CERTIFICATE-----
Generated at Wed Apr 9 14:49:50 2025 by rpki-client