Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/44658641-6124-3979-8395-5312bd052818.roa
File: 44658641-6124-3979-8395-5312bd052818.roa (raw, json)
Hash identifier: XJoYq1efYz2/3BVrYp+1GzFzi9WolYI+yX8BZ87cwGA=
Subject key identifier: 63:8A:C1:5C:01:CA:F8:AC:DD:E3:95:6A:16:69:AB:61:88:A7:10:42
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F7F183F69A6A5BB3432580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/44658641-6124-3979-8395-5312bd052818.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33662
IP address blocks: 73.32.28.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 16 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f7:f1:83:f6:9a:6a:5b:b3:43:25:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=7bd2d1ab-4287-420f-b4b3-f3982a3d0121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:87:c0:bc:7b:90:c4:4e:31:a8:b1:90:5e:41:
6f:00:b6:a3:fa:12:95:55:8d:67:32:ac:1d:cb:8d:
75:3d:40:43:56:ec:2a:91:f7:b5:89:05:65:b2:f1:
20:d1:b5:07:9f:79:55:4a:ec:a5:ab:09:eb:91:c1:
c6:79:d6:91:a4:d6:e0:03:17:d3:da:34:d0:3e:ff:
7c:b4:b8:f9:a9:56:6b:d2:92:a1:dc:45:b7:0e:ca:
6d:1c:c9:30:01:b5:51:66:79:01:c0:8a:44:3a:78:
06:4a:15:d9:6e:04:db:f2:68:b1:2b:a0:83:b8:6e:
0b:92:24:3d:51:c5:19:95:9c:f4:a7:44:73:39:d8:
a6:4e:74:c2:88:81:4c:07:94:93:55:e1:4f:3a:d5:
06:0d:11:d5:77:d4:99:37:30:94:14:68:bd:24:40:
7b:21:f8:4c:03:15:44:41:93:01:aa:99:a9:b2:6a:
30:ce:ac:30:b8:f2:cd:ce:f2:98:f7:5d:4a:7f:1f:
61:bf:20:2f:0d:f1:8d:01:07:33:32:b4:e2:d8:7a:
11:fc:5d:cd:37:ea:ac:99:30:23:08:f2:c5:33:d4:
ff:72:4c:c8:f8:77:ed:24:8f:f5:88:11:b2:bc:f7:
37:99:42:70:a8:01:38:ed:9b:d4:3c:a5:07:e1:62:
c1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:8A:C1:5C:01:CA:F8:AC:DD:E3:95:6A:16:69:AB:61:88:A7:10:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/44658641-6124-3979-8395-5312bd052818.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.32.28.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:52:db:d0:61:ff:e1:09:9e:bc:67:e8:77:bd:a0:51:80:00:
af:72:63:15:bd:1c:96:3b:98:34:10:f0:aa:63:10:82:43:ac:
3f:6a:b3:7a:21:ad:ea:ad:78:98:4f:ef:f4:b7:e5:66:18:01:
ca:af:e3:c2:b7:c2:2c:de:17:b7:c3:03:a8:d0:4b:b0:db:8b:
92:a9:3b:b9:6b:66:14:88:7c:89:ae:a9:f4:b6:b3:af:85:bc:
87:81:f0:27:b3:10:a3:85:63:61:19:86:0b:e5:ef:2b:15:e6:
5f:07:26:bf:49:43:c5:5e:ae:6e:58:f3:03:cd:3d:4d:3f:26:
b2:53:1b:7c:22:3a:c6:88:7e:ef:5d:c6:b1:cb:4e:3f:10:a2:
40:a1:55:61:ea:da:7f:79:65:40:5e:ff:4f:41:30:12:5e:d9:
7a:05:6b:8a:1e:d7:b2:c8:33:fb:76:66:2b:32:bf:9a:ac:7f:
7e:d4:ba:e1:de:a0:af:c7:7d:0f:65:fe:6d:19:68:d2:de:38:
72:a2:2a:5b:57:72:6c:74:f7:33:ad:1e:c2:08:ec:47:95:0b:
ad:42:cf:1c:45:4e:64:a6:9f:f3:aa:0d:06:3c:41:eb:14:f4:
b4:53:17:9e:bf:e9:01:ba:09:90:6a:78:a7:2f:57:fc:b5:1c:
52:f6:ce:3b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09/GD9ppqW7NDJYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
N2JkMmQxYWItNDI4Ny00MjBmLWI0YjMtZjM5ODJhM2QwMTIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYfAvHuQxE4xqLGQXkFvALaj+hKVVY1nMqwd
y411PUBDVuwqkfe1iQVlsvEg0bUHn3lVSuylqwnrkcHGedaRpNbgAxfT2jTQPv98
tLj5qVZr0pKh3EW3DsptHMkwAbVRZnkBwIpEOngGShXZbgTb8mixK6CDuG4LkiQ9
UcUZlZz0p0RzOdimTnTCiIFMB5STVeFPOtUGDRHVd9SZNzCUFGi9JEB7IfhMAxVE
QZMBqpmpsmowzqwwuPLNzvKY911Kfx9hvyAvDfGNAQczMrTi2HoR/F3NN+qsmTAj
CPLFM9T/ckzI+HftJI/1iBGyvPc3mUJwqAE47ZvUPKUH4WLB+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGOKwVwByvis3eOVahZpq2GIpxBCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDQ2NTg2NDEtNjEyNC0z
OTc5LTgzOTUtNTMxMmJkMDUyODE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSSAcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAExS29Bh/+EJnrxn6He9oFGAAK9yYxW9HJY7mDQQ8KpjEIJDrD9qs3oh
reqteJhP7/S35WYYAcqv48K3wizeF7fDA6jQS7Dbi5KpO7lrZhSIfImuqfS2s6+F
vIeB8CezEKOFY2EZhgvl7ysV5l8HJr9JQ8Verm5Y8wPNPU0/JrJTG3wiOsaIfu9d
xrHLTj8QokChVWHq2n95ZUBe/09BMBJe2XoFa4oe17LIM/t2Zisyv5qsf37UuuHe
oK/HfQ9l/m0ZaNLeOHKiKltXcmx09zOtHsII7EeVC61CzxxFTmSmn/OqDQY8QesU
9LRTF56/6QG6CZBqeKcvV/y1HFL2zjs=
-----END CERTIFICATE-----
Generated at Sun Apr 13 16:43:16 2025 by rpki-client