Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a82d3485-039b-3e9b-b690-74403fd4ca2d.roa
File: a82d3485-039b-3e9b-b690-74403fd4ca2d.roa (raw, json)
Hash identifier: 2qobano6Oe98Wnx8KERVObI1rJ+FGL0c3U8DrNwU9AY=
Subject key identifier: 11:5A:7B:D4:9F:1F:95:9D:67:A8:42:8C:92:B2:4A:88:B3:32:CE:7E
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CAEF2F5E99ACC76008B6140
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a82d3485-039b-3e9b-b690-74403fd4ca2d.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33659
IP address blocks: 98.221.64.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:ae:f2:f5:e9:9a:cc:76:00:8b:61:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=dcba6df7-cb8e-478f-be4e-618d1af539fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5c:8c:a0:6b:7e:00:0b:92:3a:a9:e4:b0:c2:
3a:ab:51:b8:23:e2:95:d8:34:51:09:46:5e:02:fa:
11:17:b3:70:3a:22:8b:26:7c:7f:2e:f7:5a:e2:70:
25:d4:b8:2f:a0:09:f7:f5:b6:9c:d9:f3:6a:c3:50:
84:5c:84:8f:bc:a6:d0:6a:1f:21:0f:5b:55:b1:fe:
e2:6c:c7:1a:88:10:a8:28:42:f9:c0:73:d1:a3:b6:
8e:f5:43:77:b1:78:9b:a8:6f:f2:2e:51:ba:15:24:
c9:ae:ce:1d:d5:9b:0c:fe:7c:2f:70:7b:43:1c:ab:
9f:1e:fe:4f:38:63:e1:17:46:df:98:02:7c:5a:82:
c8:9c:26:0f:da:75:a7:33:50:10:e1:d5:7d:a7:83:
d7:b9:ec:86:ff:be:db:a3:6d:c0:98:67:08:41:98:
45:95:5d:bf:93:23:4b:7a:f2:44:6a:e4:0d:2e:a7:
09:29:55:db:b4:2f:c5:0d:7c:6f:93:79:9f:d4:12:
70:0e:06:7c:18:22:ae:e9:99:bb:8b:c5:3d:06:cd:
4e:34:59:3e:ee:63:12:f4:29:e4:81:9c:0e:58:e9:
93:7d:4d:a3:3f:7e:60:89:c6:bf:09:6e:27:0d:16:
b0:0d:81:f6:cf:e7:c6:b3:2e:38:9c:28:9a:0a:17:
01:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:5A:7B:D4:9F:1F:95:9D:67:A8:42:8C:92:B2:4A:88:B3:32:CE:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a82d3485-039b-3e9b-b690-74403fd4ca2d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.221.64.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:86:4b:08:07:e5:a3:5e:c1:dd:5d:00:c8:97:a8:d0:85:39:
33:3d:d0:ac:78:1a:ec:a7:7b:64:6d:cb:7e:39:d8:4f:6e:2a:
b9:9f:37:e6:5e:0a:1b:cc:d3:de:67:e2:90:5f:32:3f:63:71:
d0:89:bb:3a:81:04:dc:8b:35:f1:5e:30:6c:89:10:7f:d9:03:
cc:f5:3d:bb:a8:81:02:01:ed:99:b8:f9:d8:f9:67:17:d1:48:
92:ef:47:86:11:6b:03:34:37:b0:28:2b:91:25:53:4e:fb:d4:
2a:18:26:4b:d2:b6:8f:0b:de:23:b9:9e:cd:74:05:05:21:bc:
3f:b3:57:8c:af:84:a2:7e:a6:3d:b1:59:66:c6:62:c0:4e:8c:
f3:e3:89:b9:ad:c9:28:8f:c4:44:dd:30:ab:b1:df:af:cf:43:
6b:3f:e4:50:f5:4d:0a:56:31:49:67:0b:be:a0:18:33:fa:75:
ef:47:3b:ff:78:d3:72:e1:b8:aa:c6:2e:38:39:74:16:c6:c5:
43:85:8a:2c:32:cc:68:6b:93:59:69:d2:22:4a:63:a9:89:cd:
b3:85:f7:97:12:9e:09:86:a9:ff:5f:b0:d5:f3:b4:ec:46:26:
52:c0:ea:68:53:b0:76:6d:5a:a1:f7:32:dc:0b:83:91:c3:1e:
f9:3f:bc:04
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrvL16ZrMdgCLYUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
ZGNiYTZkZjctY2I4ZS00NzhmLWJlNGUtNjE4ZDFhZjUzOWZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilyMoGt+AAuSOqnksMI6q1G4I+KV2DRRCUZe
AvoRF7NwOiKLJnx/Lvda4nAl1LgvoAn39bac2fNqw1CEXISPvKbQah8hD1tVsf7i
bMcaiBCoKEL5wHPRo7aO9UN3sXibqG/yLlG6FSTJrs4d1ZsM/nwvcHtDHKufHv5P
OGPhF0bfmAJ8WoLInCYP2nWnM1AQ4dV9p4PXueyG/77bo23AmGcIQZhFlV2/kyNL
evJEauQNLqcJKVXbtC/FDXxvk3mf1BJwDgZ8GCKu6Zm7i8U9Bs1ONFk+7mMS9Cnk
gZwOWOmTfU2jP35gica/CW4nDRawDYH2z+fGsy44nCiaChcBmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBFae9SfH5WdZ6hCjJKySoizMs5+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTgyZDM0ODUtMDM5Yi0z
ZTliLWI2OTAtNzQ0MDNmZDRjYTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYt1AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIGGSwgH5aNewd1dAMiXqNCFOTM90Kx4Guyne2Rty3452E9uKrmfN+Ze
ChvM095n4pBfMj9jcdCJuzqBBNyLNfFeMGyJEH/ZA8z1PbuogQIB7Zm4+dj5ZxfR
SJLvR4YRawM0N7AoK5ElU0771CoYJkvSto8L3iO5ns10BQUhvD+zV4yvhKJ+pj2x
WWbGYsBOjPPjibmtySiPxETdMKux36/PQ2s/5FD1TQpWMUlnC76gGDP6de9HO/94
03LhuKrGLjg5dBbGxUOFiiwyzGhrk1lp0iJKY6mJzbOF95cSngmGqf9fsNXztOxG
JlLA6mhTsHZtWqH3MtwLg5HDHvk/vAQ=
-----END CERTIFICATE-----
Generated at Wed Apr 9 02:27:20 2025 by rpki-client