Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d264f6b-9fa8-377b-8e70-432d5a2f96f1.roa
File: 8d264f6b-9fa8-377b-8e70-432d5a2f96f1.roa (raw, json)
Hash identifier: XQcWbONf/6AtVhiaf22gl3sz+pBFPm++YzOFrw8MQmU=
Subject key identifier: B9:5D:DD:5D:87:A3:48:42:11:3A:7C:08:F1:3B:25:0B:E8:DB:FC:B7
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CAFF20AE3C0DC5A8157E080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d264f6b-9fa8-377b-8e70-432d5a2f96f1.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33651
IP address blocks: 73.158.126.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:af:f2:0a:e3:c0:dc:5a:81:57:e0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=d6dc1a2b-3118-4b27-b35a-82197a9e383f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:13:61:7d:22:f6:fb:c1:19:82:48:b2:12:a0:
42:56:1a:19:e9:89:62:3e:81:2d:fe:6f:7e:71:c7:
42:47:50:d6:2c:c8:1d:84:5a:67:66:c0:2c:2c:07:
b1:df:78:f1:3c:96:ec:75:2d:dd:5a:a3:23:eb:ee:
d6:40:5c:30:77:e1:db:87:f9:f4:22:c7:60:e5:0d:
bf:cb:f1:c7:ee:ca:56:db:ce:ad:e4:9e:24:d6:22:
c3:7f:09:ec:17:78:11:2e:a8:c5:f5:45:98:ec:5b:
ce:b1:8f:5b:9e:70:3e:4b:20:c2:60:0f:dd:e9:9c:
8c:97:0e:4f:a6:c3:43:e1:14:f3:95:1b:dc:e4:21:
fa:10:76:6b:26:96:2f:65:bb:b1:0c:bc:03:cd:12:
16:af:dd:58:25:97:34:0a:de:a9:05:b2:11:fd:6e:
12:f6:82:a5:13:7d:bb:b3:7d:b9:a1:77:82:73:0c:
d5:31:a9:bc:b6:c1:a4:27:67:80:de:fe:88:99:8d:
d7:5b:4b:9b:19:e8:28:8c:64:b8:91:2c:a6:4c:ac:
a4:d3:9b:4d:b5:b2:8f:17:8a:51:99:f0:5c:76:0a:
be:f1:22:98:22:f9:75:da:77:5c:95:08:73:09:c3:
7e:bb:e3:d7:32:d8:00:56:aa:e8:d3:58:a4:1a:ea:
54:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:5D:DD:5D:87:A3:48:42:11:3A:7C:08:F1:3B:25:0B:E8:DB:FC:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d264f6b-9fa8-377b-8e70-432d5a2f96f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.158.126.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:bd:df:a9:15:5c:a5:06:d6:b5:bc:4e:c2:78:f5:ba:d8:35:
b7:34:d3:36:f5:c2:ef:2c:bf:c9:c3:c7:fa:1a:60:d0:4a:94:
03:04:f4:c1:9a:d6:37:3f:5c:06:e7:85:d0:39:10:64:6e:f6:
8b:1a:2b:da:e4:e5:86:6b:fa:95:16:31:7d:be:f7:2a:57:2b:
13:59:88:8d:33:d5:29:b0:fa:ab:29:da:88:ae:23:8e:46:04:
e0:2c:f7:7c:85:10:2c:09:fc:a2:62:fb:44:e5:7a:3e:c0:77:
95:8b:dc:a2:64:17:99:b1:2c:e9:9c:90:84:94:de:26:a7:fb:
49:1e:d9:37:da:d3:fe:22:51:4b:ac:24:2a:8e:9d:92:cc:4e:
c3:c3:5f:b2:d0:4b:94:ed:b2:5e:f5:c5:3c:4e:5c:eb:ce:7a:
3d:7c:aa:01:33:c2:cc:8b:79:31:54:a0:3b:d5:d6:87:0b:fe:
01:66:95:dc:24:8a:06:59:fe:25:1e:eb:14:6d:13:f0:19:39:
33:01:25:de:77:e5:74:c5:d9:c0:dd:89:05:37:51:ce:51:3c:
71:22:52:d3:06:12:9e:d4:9e:0d:25:66:00:7e:67:8a:88:d2:
08:ca:b2:7d:a8:45:c1:c3:76:0a:95:7e:dc:26:ef:6c:0f:45:
96:19:db:c1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksr/IK48DcWoFX4IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
ZDZkYzFhMmItMzExOC00YjI3LWIzNWEtODIxOTdhOWUzODNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBNhfSL2+8EZgkiyEqBCVhoZ6YliPoEt/m9+
ccdCR1DWLMgdhFpnZsAsLAex33jxPJbsdS3dWqMj6+7WQFwwd+Hbh/n0Isdg5Q2/
y/HH7spW286t5J4k1iLDfwnsF3gRLqjF9UWY7FvOsY9bnnA+SyDCYA/d6ZyMlw5P
psND4RTzlRvc5CH6EHZrJpYvZbuxDLwDzRIWr91YJZc0Ct6pBbIR/W4S9oKlE327
s325oXeCcwzVMam8tsGkJ2eA3v6ImY3XW0ubGegojGS4kSymTKyk05tNtbKPF4pR
mfBcdgq+8SKYIvl12ndclQhzCcN+u+PXMtgAVqro01ikGupU1wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLld3V2Ho0hCETp8CPE7JQvo2/y3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGQyNjRmNmItOWZhOC0z
NzdiLThlNzAtNDMyZDVhMmY5NmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSZ5+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALS936kVXKUG1rW8TsJ49brYNbc00zb1wu8sv8nDx/oaYNBKlAME9MGa
1jc/XAbnhdA5EGRu9osaK9rk5YZr+pUWMX2+9ypXKxNZiI0z1Smw+qsp2oiuI45G
BOAs93yFECwJ/KJi+0Tlej7Ad5WL3KJkF5mxLOmckISU3ian+0ke2Tfa0/4iUUus
JCqOnZLMTsPDX7LQS5Ttsl71xTxOXOvOej18qgEzwsyLeTFUoDvV1ocL/gFmldwk
igZZ/iUe6xRtE/AZOTMBJd535XTF2cDdiQU3Uc5RPHEiUtMGEp7Ung0lZgB+Z4qI
0gjKsn2oRcHDdgqVftwm72wPRZYZ28E=
-----END CERTIFICATE-----
Generated at Sat Apr 12 14:12:28 2025 by rpki-client