Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3557fb67-a40d-3895-981f-4f596d9020a6.roa
File: 3557fb67-a40d-3895-981f-4f596d9020a6.roa (raw, json)
Hash identifier: JhOG4EHpO+YX0pYAMq9HB+vQsLOu5oZdTaxc15KRC1Q=
Subject key identifier: DD:95:90:F8:8D:88:FD:B3:8B:50:4E:CC:CC:88:77:69:BF:0E:5D:3B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CAFD075B1A5A562A674CD80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3557fb67-a40d-3895-981f-4f596d9020a6.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33491
IP address blocks: 98.34.52.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:af:d0:75:b1:a5:a5:62:a6:74:cd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=b0180910-1cb5-43d0-b301-cbc122a60a1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e0:ec:16:80:cc:0d:4a:69:45:bf:45:94:f7:
db:a6:15:3d:9f:e9:c4:81:21:39:a8:0d:f6:ef:23:
18:10:d3:3d:b6:c4:b6:c6:6e:5e:14:62:db:4f:30:
50:c0:96:a0:55:5c:4f:f3:f3:62:e5:23:83:b1:dc:
74:aa:f7:07:d3:5d:eb:4a:60:4c:f2:ad:7a:f1:cf:
51:40:8d:47:89:89:88:f7:e9:ec:e0:df:d3:03:2c:
4e:bc:f5:b8:08:69:5f:3e:2c:86:bf:e3:ed:bd:54:
72:6b:9c:94:5e:e4:00:71:e7:4d:48:af:f8:97:cf:
5a:8a:a4:9b:a7:bb:81:32:64:46:10:fa:8a:40:48:
c7:74:0d:f4:4d:09:d0:8c:76:ec:07:38:b5:22:91:
b7:51:b1:b3:4c:e6:16:e6:07:22:2c:33:2c:da:01:
94:a0:4c:2a:b8:d4:1d:cc:2b:38:d5:0e:54:fe:a2:
ae:6c:9d:43:f3:bf:62:13:12:12:40:6a:a1:5f:17:
5d:88:e8:89:cb:5c:16:14:ec:86:78:44:d9:65:36:
ed:99:f9:62:51:98:92:c4:fd:cd:cb:d1:58:96:8b:
59:86:36:dc:9f:0d:39:c7:b0:8d:f7:ac:c8:1c:9b:
2b:9b:b5:04:7e:a4:a0:7b:ce:83:2e:a5:66:47:e6:
f2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:95:90:F8:8D:88:FD:B3:8B:50:4E:CC:CC:88:77:69:BF:0E:5D:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3557fb67-a40d-3895-981f-4f596d9020a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.34.52.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:e0:94:5c:cc:f1:63:6f:ca:70:62:07:ce:e3:57:68:ba:37:
1f:54:55:a5:d0:c1:1d:98:f6:53:6c:5b:63:3c:8d:49:86:29:
60:e9:c8:96:ec:58:c6:7c:7a:05:09:dc:ab:b6:af:82:52:e1:
2e:a2:dd:51:bc:68:f6:ac:6b:b5:f4:bd:8f:ca:18:ee:bc:f7:
0a:c5:aa:40:46:be:6d:8d:02:52:a5:05:10:38:42:e4:9b:d3:
53:02:d1:af:46:f5:80:05:4e:1b:76:e2:44:87:fc:15:dc:5e:
87:bd:60:db:ac:a5:24:c4:c6:f7:4a:ee:37:f7:ab:6a:44:f1:
31:41:04:e5:61:e0:de:4b:9e:10:38:ad:36:d7:aa:cd:20:6d:
16:6f:fd:bc:2b:d3:22:17:85:84:d7:6e:65:fa:55:fb:6a:82:
89:bb:15:ad:5b:4c:23:94:5a:e3:1d:d4:62:d7:e5:7a:1b:f1:
aa:f9:15:61:8a:e7:31:e0:65:1a:4e:a1:bc:c5:10:65:15:0d:
20:b9:fd:ba:34:ff:39:ae:59:c4:c8:c7:a9:55:ca:c1:fb:69:
f5:79:79:a0:02:7d:f9:b9:5f:3b:4a:fe:52:51:97:f9:9d:ec:
e7:48:dd:de:f2:e8:2e:0a:62:ca:00:cd:4b:fb:12:01:2c:3c:
34:03:41:7c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksr9B1saWlYqZ0zYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
YjAxODA5MTAtMWNiNS00M2QwLWIzMDEtY2JjMTIyYTYwYTFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuDsFoDMDUppRb9FlPfbphU9n+nEgSE5qA32
7yMYENM9tsS2xm5eFGLbTzBQwJagVVxP8/Ni5SODsdx0qvcH013rSmBM8q168c9R
QI1HiYmI9+ns4N/TAyxOvPW4CGlfPiyGv+PtvVRya5yUXuQAcedNSK/4l89aiqSb
p7uBMmRGEPqKQEjHdA30TQnQjHbsBzi1IpG3UbGzTOYW5gciLDMs2gGUoEwquNQd
zCs41Q5U/qKubJ1D879iExISQGqhXxddiOiJy1wWFOyGeETZZTbtmfliUZiSxP3N
y9FYlotZhjbcnw05x7CN96zIHJsrm7UEfqSge86DLqVmR+byEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN2VkPiNiP2zi1BOzMyId2m/Dl07MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzU1N2ZiNjctYTQwZC0z
ODk1LTk4MWYtNGY1OTZkOTAyMGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYiI0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEzglFzM8WNvynBiB87jV2i6Nx9UVaXQwR2Y9lNsW2M8jUmGKWDpyJbs
WMZ8egUJ3Ku2r4JS4S6i3VG8aPasa7X0vY/KGO689wrFqkBGvm2NAlKlBRA4QuSb
01MC0a9G9YAFTht24kSH/BXcXoe9YNuspSTExvdK7jf3q2pE8TFBBOVh4N5LnhA4
rTbXqs0gbRZv/bwr0yIXhYTXbmX6Vftqgom7Fa1bTCOUWuMd1GLX5Xob8ar5FWGK
5zHgZRpOobzFEGUVDSC5/bo0/zmuWcTIx6lVysH7afV5eaACffm5XztK/lJRl/md
7OdI3d7y6C4KYsoAzUv7EgEsPDQDQXw=
-----END CERTIFICATE-----
Generated at Sat Apr 12 16:01:31 2025 by rpki-client