Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/890d2649-cbd7-33d0-ba5f-19ad8353a25c.roa
File: 890d2649-cbd7-33d0-ba5f-19ad8353a25c.roa (raw, json)
Hash identifier: RZUqhZ+zwQjPsh+e9Tm/37EGWhGlkbGB4l+JAzFuL+c=
Subject key identifier: 35:11:63:8B:40:CD:86:50:C1:89:33:EE:58:A7:E1:65:F0:2C:8D:91
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CAFE1B6B81D50DD42890980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/890d2649-cbd7-33d0-ba5f-19ad8353a25c.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33651
IP address blocks: 2601:644:8000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:af:e1:b6:b8:1d:50:dd:42:89:09:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=ea4c5227-b154-4292-95de-80d5aecbec6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:61:39:4d:58:94:5f:fe:8a:20:67:c3:fc:fc:
f4:b5:4b:48:20:c5:54:b0:eb:67:ac:6a:09:43:1c:
57:70:ab:0c:c6:88:f6:3b:48:b9:02:d3:f0:34:57:
e9:4a:fb:b6:0f:dd:ad:62:78:ff:05:46:71:64:36:
86:fe:1a:cd:59:c2:4b:a0:50:b9:b4:c8:a5:12:d9:
2d:74:d6:1e:85:2d:b8:d3:6b:bf:b5:e4:da:6a:24:
67:a5:5a:62:ce:0a:36:0c:be:9a:14:58:11:ad:2c:
19:ca:18:49:db:70:2f:3a:2b:e2:92:65:71:23:ed:
20:8e:2c:bc:e2:bb:91:cc:97:08:98:49:fb:45:c6:
87:ca:8c:d1:ab:b2:49:ad:46:51:08:6e:ca:1c:cc:
c0:b7:50:d4:77:3a:0d:0e:c5:a1:29:3b:1b:93:8e:
50:06:f2:0f:9a:a5:49:ad:12:81:af:7c:84:98:34:
53:01:2f:70:d1:f1:92:0c:51:ac:75:a0:77:d4:9a:
9f:3f:6e:8a:70:7f:1f:d8:a7:4e:12:43:8d:b2:29:
3e:7b:61:7c:c8:c8:43:28:15:81:8a:81:eb:0a:d7:
06:32:c8:03:47:77:ec:c7:35:90:a0:c7:5f:9a:9c:
78:ca:c9:cd:86:dc:4e:cd:0e:f3:64:30:16:0c:44:
72:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:11:63:8B:40:CD:86:50:C1:89:33:EE:58:A7:E1:65:F0:2C:8D:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/890d2649-cbd7-33d0-ba5f-19ad8353a25c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2601:644:8000::/34
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:4c:03:ce:d4:85:ad:7f:b3:e0:72:17:37:34:ad:d8:5e:13:
84:29:a1:22:4b:38:9e:8a:0f:cb:78:cf:7b:87:2b:ff:b4:f1:
f9:20:1f:82:28:24:44:a4:38:6c:bc:c6:ba:44:b5:8d:d9:49:
41:65:c9:ef:0f:08:68:14:26:83:89:7e:c0:1e:9d:6d:9b:3c:
cd:72:5e:61:4a:4b:65:2f:c1:44:f7:de:b2:61:a5:aa:37:42:
7d:2e:ea:20:9d:67:28:87:f7:4d:65:62:4b:95:19:3f:61:d9:
90:b6:5d:83:b1:9f:67:9a:76:78:92:16:c1:c6:d8:30:df:b8:
35:ea:3e:e0:d4:fc:54:f4:bd:e9:9a:53:c7:93:ca:d4:e0:ff:
9e:eb:c6:43:b8:d2:02:40:2a:d0:df:29:6b:f3:e0:8d:8b:9e:
46:3c:52:c7:8b:ce:be:a7:09:d0:c4:ed:55:9b:95:72:e4:e1:
11:52:06:f8:1d:17:0e:07:64:be:65:7e:8c:58:c9:7d:27:d6:
0a:c2:33:a6:99:a6:da:70:51:ec:9f:70:b6:f2:e8:36:8d:5e:
59:d4:b3:72:de:92:fa:f7:c3:dd:c9:17:87:d0:91:52:b0:91:
25:ea:fe:03:34:98:ea:c8:79:95:a9:85:b9:dc:19:64:ef:4c:
83:87:26:a4
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEksr+G2uB1Q3UKJCYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
ZWE0YzUyMjctYjE1NC00MjkyLTk1ZGUtODBkNWFlY2JlYzZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2E5TViUX/6KIGfD/Pz0tUtIIMVUsOtnrGoJ
QxxXcKsMxoj2O0i5AtPwNFfpSvu2D92tYnj/BUZxZDaG/hrNWcJLoFC5tMilEtkt
dNYehS2402u/teTaaiRnpVpizgo2DL6aFFgRrSwZyhhJ23AvOivikmVxI+0gjiy8
4ruRzJcImEn7RcaHyozRq7JJrUZRCG7KHMzAt1DUdzoNDsWhKTsbk45QBvIPmqVJ
rRKBr3yEmDRTAS9w0fGSDFGsdaB31JqfP26KcH8f2KdOEkONsik+e2F8yMhDKBWB
ioHrCtcGMsgDR3fsxzWQoMdfmpx4ysnNhtxOzQ7zZDAWDERyxQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFDURY4tAzYZQwYkz7lin4WXwLI2RMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODkwZDI2NDktY2JkNy0z
M2QwLWJhNWYtMTlhZDgzNTNhMjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgEGRIAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAl0wDztSFrX+z4HIXNzSt2F4ThCmhIks4nooPy3jPe4cr/7Tx+SAf
gigkRKQ4bLzGukS1jdlJQWXJ7w8IaBQmg4l+wB6dbZs8zXJeYUpLZS/BRPfesmGl
qjdCfS7qIJ1nKIf3TWViS5UZP2HZkLZdg7GfZ5p2eJIWwcbYMN+4Neo+4NT8VPS9
6ZpTx5PK1OD/nuvGQ7jSAkAq0N8pa/PgjYueRjxSx4vOvqcJ0MTtVZuVcuThEVIG
+B0XDgdkvmV+jFjJfSfWCsIzppmm2nBR7J9wtvLoNo1eWdSzct6S+vfD3ckXh9CR
UrCRJer+AzSY6sh5lamFudwZZO9Mg4cmpA==
-----END CERTIFICATE-----
Generated at Sat Apr 12 08:17:19 2025 by rpki-client