Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a83a185f-81f7-3604-a213-2589c84c84cd.roa
File: a83a185f-81f7-3604-a213-2589c84c84cd.roa (raw, json)
Hash identifier: M21N4gozTvtBid6z3eYZtgDenUs87FEry6v0aquOR/4=
Subject key identifier: 40:72:B8:5F:17:27:D1:DF:36:94:46:4F:F3:D7:CF:44:58:D0:0D:88
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F8EE5E0D22266030523540
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a83a185f-81f7-3604-a213-2589c84c84cd.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33668
IP address blocks: 68.56.150.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f8:ee:5e:0d:22:26:60:30:52:35:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=2c816605-f2d8-45d2-8826-574fb02a07a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a3:f2:20:8f:b4:0e:32:0d:69:96:60:af:e1:
f9:2b:56:15:32:74:e8:72:08:c1:2d:b4:16:eb:df:
08:e7:7a:82:3e:3a:be:5b:78:63:f4:4c:b8:a0:18:
0d:0e:f9:bb:ef:bb:08:08:e4:96:1f:45:cf:7a:52:
7a:1b:90:4c:7f:5f:63:d9:41:d5:5a:c3:3f:1f:19:
c0:fe:ac:e2:ef:5c:bb:8f:89:f1:55:92:75:19:dd:
86:e0:77:2a:38:65:34:16:40:06:0e:77:b8:f2:89:
82:4c:06:a2:05:6d:9c:c8:03:32:2f:d8:d1:53:cc:
37:d0:a8:9c:60:7c:8f:1d:a4:bb:b1:29:27:2f:0f:
c4:1e:45:e0:81:82:d9:01:4d:c4:5b:28:2c:18:b6:
42:20:a6:c3:10:c9:3a:40:cf:f1:76:d1:94:6f:93:
32:ef:13:00:20:14:57:6f:11:8f:92:a9:b0:21:3a:
a3:e5:bf:1e:bf:e0:c1:f2:55:7d:ed:ac:f4:95:af:
aa:77:40:bb:cc:4b:33:eb:26:3d:26:85:89:93:8c:
d7:e1:bd:ec:22:a1:66:7c:ec:ef:e7:90:ac:ea:65:
87:7c:f9:97:34:f9:b4:8e:aa:26:eb:d1:6b:43:f1:
6a:a4:90:fe:e4:fb:51:38:aa:8e:0c:85:43:60:1c:
2f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:72:B8:5F:17:27:D1:DF:36:94:46:4F:F3:D7:CF:44:58:D0:0D:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a83a185f-81f7-3604-a213-2589c84c84cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.56.150.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:0e:bb:2c:12:bb:65:77:4f:f1:f6:ea:ad:d7:e1:59:c0:e4:
43:5b:7b:22:8e:fa:01:31:0a:a1:ab:41:74:53:62:0f:5d:e8:
42:36:f7:53:68:c8:92:61:47:7b:8c:5d:f4:1c:95:3e:bd:15:
58:f6:60:b0:13:ac:89:1e:55:aa:85:2f:77:03:9c:d2:67:87:
15:f2:ce:60:f8:63:59:2f:4a:27:77:f5:55:90:41:d9:f8:da:
86:58:59:9a:25:f2:a4:db:a3:bc:3c:ab:d2:f8:8c:e0:e9:43:
67:e4:94:9e:4b:0d:1d:02:35:11:27:0c:f6:d3:72:47:df:93:
85:34:0b:1d:fd:2c:90:c0:2c:e5:01:b9:1f:d2:e1:d5:0b:1d:
68:c2:e4:4c:bc:e2:ae:08:6e:18:49:a6:1a:8a:c8:b9:b8:b6:
e5:66:09:b4:0e:89:f0:2a:59:fc:58:e7:fb:82:f1:9c:8b:f6:
97:8d:0d:c0:e2:7c:36:2f:1e:2a:a4:ec:d0:d2:b9:b4:97:00:
84:87:fd:77:13:ac:f3:70:c3:ef:e7:12:6d:c7:31:2e:a4:cd:
85:fd:89:cc:71:60:9f:ae:27:fa:14:9a:80:30:11:4a:e3:7a:
79:c7:8e:7d:b8:3f:8a:32:2a:bf:c0:23:99:f6:06:a5:09:00:
68:4d:d7:22
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+O5eDSImYDBSNUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
MmM4MTY2MDUtZjJkOC00NWQyLTg4MjYtNTc0ZmIwMmEwN2EyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqPyII+0DjINaZZgr+H5K1YVMnTocgjBLbQW
698I53qCPjq+W3hj9Ey4oBgNDvm777sICOSWH0XPelJ6G5BMf19j2UHVWsM/HxnA
/qzi71y7j4nxVZJ1Gd2G4HcqOGU0FkAGDne48omCTAaiBW2cyAMyL9jRU8w30Kic
YHyPHaS7sSknLw/EHkXggYLZAU3EWygsGLZCIKbDEMk6QM/xdtGUb5My7xMAIBRX
bxGPkqmwITqj5b8ev+DB8lV97az0la+qd0C7zEsz6yY9JoWJk4zX4b3sIqFmfOzv
55Cs6mWHfPmXNPm0jqom69FrQ/FqpJD+5PtROKqODIVDYBwvNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEByuF8XJ9HfNpRGT/PXz0RY0A2IMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTgzYTE4NWYtODFmNy0z
NjA0LWEyMTMtMjU4OWM4NGM4NGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRDiWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFMOuywSu2V3T/H26q3X4VnA5ENbeyKO+gExCqGrQXRTYg9d6EI291No
yJJhR3uMXfQclT69FVj2YLATrIkeVaqFL3cDnNJnhxXyzmD4Y1kvSid39VWQQdn4
2oZYWZol8qTbo7w8q9L4jODpQ2fklJ5LDR0CNREnDPbTckffk4U0Cx39LJDALOUB
uR/S4dULHWjC5Ey84q4IbhhJphqKyLm4tuVmCbQOifAqWfxY5/uC8ZyL9peNDcDi
fDYvHiqk7NDSubSXAISH/XcTrPNww+/nEm3HMS6kzYX9icxxYJ+uJ/oUmoAwEUrj
ennHjn24P4oyKr/AI5n2BqUJAGhN1yI=
-----END CERTIFICATE-----
Generated at Sat Apr 12 05:32:49 2025 by rpki-client