Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33e03443-3cc5-35f4-ac69-507963640029.roa
File: 33e03443-3cc5-35f4-ac69-507963640029.roa (raw, json)
Hash identifier: 5o2Bxpy92bO9s0/6iiBIci00oVcAQqhAVW94prn1aZ0=
Subject key identifier: 29:D1:A0:84:4D:F7:A3:1D:83:40:78:5A:C8:7F:61:D7:34:7E:C3:3C
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F81ACEF059D81ECBD62300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33e03443-3cc5-35f4-ac69-507963640029.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33662
IP address blocks: 98.57.122.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f8:1a:ce:f0:59:d8:1e:cb:d6:23:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=d7549e5a-6e9a-45dc-befb-5d593287dee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:c9:64:6d:94:a4:79:fb:5f:4c:1c:a2:34:e5:
a5:7c:3e:a9:6f:fa:8b:b6:fa:2b:e7:0e:72:c8:61:
53:69:dc:9e:ae:f9:41:e6:7c:25:95:2f:31:1e:cf:
3c:7c:ed:4d:09:eb:cf:49:65:c7:25:27:5e:d6:cc:
18:cd:5d:d8:86:99:ba:39:1c:da:f6:f1:bd:37:6f:
f7:24:f9:1e:7b:c2:9e:0e:1a:33:a6:06:df:85:7a:
88:c9:70:72:95:07:ec:10:a5:f1:2a:19:d4:2e:93:
10:ce:67:85:42:01:ef:ff:5f:89:7b:d7:91:5e:97:
87:95:5c:1e:32:76:4a:b2:7d:02:33:ec:1e:16:10:
31:ed:ce:a3:35:74:ff:fa:b2:22:e6:4b:05:b6:e2:
e5:cb:2d:96:e1:22:ba:da:22:a6:69:cd:2a:20:f9:
01:25:8f:20:70:f1:5b:02:c7:b4:00:c3:45:93:87:
0c:5c:e4:03:1c:a6:46:50:60:bd:5c:f9:44:d5:40:
3e:ad:81:85:3a:30:68:5b:83:d7:39:f2:d6:d2:2b:
34:48:b1:cd:50:91:29:c9:3d:f7:70:1a:fe:56:78:
12:45:dd:ab:9f:ea:ae:6d:2f:1b:b8:f9:47:a4:95:
20:cd:53:0a:12:09:10:8a:d1:4b:17:cf:68:aa:a6:
4c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D1:A0:84:4D:F7:A3:1D:83:40:78:5A:C8:7F:61:D7:34:7E:C3:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33e03443-3cc5-35f4-ac69-507963640029.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.57.122.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:29:2c:6e:c6:11:75:e0:cc:f8:62:f2:9e:75:03:a0:1e:e3:
f5:41:10:0a:02:be:6b:53:af:c5:da:4e:13:b2:73:66:5b:54:
6c:56:e5:37:a5:74:16:71:f0:e0:2c:e6:64:a2:81:0f:32:67:
dc:43:f7:ca:a8:d6:c1:4d:35:c8:53:6b:f1:98:d2:67:a3:b4:
fa:88:84:76:64:c0:b1:5b:08:60:c3:bf:ac:8f:59:bd:f1:cd:
92:19:60:13:84:dd:38:39:80:88:98:b4:40:af:ae:30:6e:be:
28:fc:c2:c5:96:c8:4f:5c:eb:e9:a0:a6:d0:e8:a3:d6:7f:f3:
8d:9a:57:71:70:31:00:eb:17:42:ef:2d:25:95:80:97:9f:97:
bc:84:15:37:ce:16:06:06:a0:1d:b2:eb:cf:d3:55:f4:6d:3c:
b7:a5:95:a9:e8:ea:12:0e:ce:a2:c2:ae:9d:7d:17:21:97:b0:
f7:55:74:d8:12:63:3b:57:2b:de:39:6e:f1:3b:72:7e:40:7a:
5b:8c:d7:e2:d0:02:e5:56:c2:20:0a:02:d2:ae:a0:92:53:86:
bc:bb:7e:b0:19:47:c0:06:65:55:93:d0:7e:43:a7:b8:f1:47:
9a:95:ec:17:4b:7a:07:56:c0:8c:5b:d8:17:91:53:61:94:54:
42:82:30:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+BrO8FnYHsvWIwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
ZDc1NDllNWEtNmU5YS00NWRjLWJlZmItNWQ1OTMyODdkZWU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8MlkbZSkeftfTByiNOWlfD6pb/qLtvor5w5y
yGFTadyervlB5nwllS8xHs88fO1NCevPSWXHJSde1swYzV3Yhpm6ORza9vG9N2/3
JPkee8KeDhozpgbfhXqIyXBylQfsEKXxKhnULpMQzmeFQgHv/1+Je9eRXpeHlVwe
MnZKsn0CM+weFhAx7c6jNXT/+rIi5ksFtuLlyy2W4SK62iKmac0qIPkBJY8gcPFb
Ase0AMNFk4cMXOQDHKZGUGC9XPlE1UA+rYGFOjBoW4PXOfLW0is0SLHNUJEpyT33
cBr+VngSRd2rn+qubS8buPlHpJUgzVMKEgkQitFLF89oqqZMAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCnRoIRN96Mdg0B4Wsh/Ydc0fsM8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzNlMDM0NDMtM2NjNS0z
NWY0LWFjNjktNTA3OTYzNjQwMDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYjl6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHUpLG7GEXXgzPhi8p51A6Ae4/VBEAoCvmtTr8XaThOyc2ZbVGxW5Tel
dBZx8OAs5mSigQ8yZ9xD98qo1sFNNchTa/GY0mejtPqIhHZkwLFbCGDDv6yPWb3x
zZIZYBOE3Tg5gIiYtECvrjBuvij8wsWWyE9c6+mgptDoo9Z/842aV3FwMQDrF0Lv
LSWVgJefl7yEFTfOFgYGoB2y68/TVfRtPLellano6hIOzqLCrp19FyGXsPdVdNgS
YztXK945bvE7cn5AeluM1+LQAuVWwiAKAtKuoJJThry7frAZR8AGZVWT0H5Dp7jx
R5qV7BdLegdWwIxb2BeRU2GUVEKCMK8=
-----END CERTIFICATE-----
Generated at Sun Apr 13 00:06:58 2025 by rpki-client