Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af17d8c1-bd21-30df-be99-bbdfe48db891.roa
File: af17d8c1-bd21-30df-be99-bbdfe48db891.roa (raw, json)
Hash identifier: 2FywSwciDLHPSEOdREbS+q8wLCEOC90mxv4Pww66mAw=
Subject key identifier: 75:1F:F4:BB:D4:18:5E:62:EE:F8:99:A0:09:D4:0E:09:01:11:57:81
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848B26864A4AFB37003BAAC2240
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af17d8c1-bd21-30df-be99-bbdfe48db891.roa
Signing time: Tue 28 Jan 2025 17:51:07 +0000
ROA not before: Tue 28 Jan 2025 17:51:07 +0000
ROA not after: Mon 28 Apr 2025 16:51:07 +0000
asID: 33651
IP address blocks: 73.241.198.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 17 Mar 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b2:68:64:a4:af:b3:70:03:ba:ac:22:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 28 17:51:07 2025 GMT
Not After : Apr 28 16:51:07 2025 GMT
Subject: CN=a7785dd2-0ea7-4a1c-98f7-6371e7e6bb56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2b:5d:f1:69:b4:ef:c3:2a:bd:27:c7:96:30:
34:70:bc:ac:9e:9e:c3:74:9d:c7:d9:a3:3f:b1:5c:
e6:d8:89:1d:b8:61:c8:8a:f9:6f:ba:79:fe:fe:cb:
e7:fd:88:92:02:bd:e6:50:3c:d7:d3:9c:d8:43:b1:
c2:5c:ea:2f:0b:bc:bc:1e:b3:87:34:fe:fa:48:2c:
03:0c:cf:ce:9e:0e:b0:67:98:4d:8d:c8:1f:2a:09:
53:ff:56:30:6b:bf:49:dd:32:ff:23:28:62:12:b7:
fd:24:4e:d9:8c:c3:14:3c:1f:73:f3:70:49:cb:f6:
db:af:e6:7e:2f:05:8c:d3:bb:ce:c8:2b:d5:52:93:
19:9a:36:57:3d:76:7d:6a:91:c1:0f:15:c5:08:3e:
43:35:09:c7:3d:77:6e:51:93:28:79:4e:8c:9f:78:
82:71:97:9a:7c:79:14:fa:9a:18:6c:ab:4b:3f:81:
53:d1:51:ff:16:e3:02:85:d5:e0:29:7c:6d:29:54:
64:02:25:b8:d8:17:8e:ab:7c:41:f7:f6:ae:84:7d:
a2:ed:17:f9:14:ff:e6:f9:82:cb:f8:e0:b7:f2:74:
8e:4e:23:d8:6d:9e:95:bc:58:03:05:b4:ed:60:f0:
42:ed:47:e5:14:d9:d5:cf:61:35:22:9e:e1:9b:16:
71:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:1F:F4:BB:D4:18:5E:62:EE:F8:99:A0:09:D4:0E:09:01:11:57:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af17d8c1-bd21-30df-be99-bbdfe48db891.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.241.198.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:13:6f:ae:c7:e5:11:af:ab:d9:de:92:8d:c7:a7:2f:52:13:
27:16:cc:6f:d8:03:7d:3e:41:95:9d:07:06:99:d8:f8:9a:3a:
46:0a:ea:97:ae:81:ff:59:fc:9b:76:c7:28:bf:48:ea:8d:f1:
89:b0:62:86:c2:3a:cf:ad:86:ed:62:c2:97:67:43:b1:3c:04:
96:5d:41:ed:37:4e:eb:57:0f:ba:e5:85:52:1e:3f:a3:c6:0a:
b3:20:bb:98:70:7e:47:98:e2:ec:2a:60:81:71:3c:ec:ac:1f:
3a:66:60:50:03:8d:83:43:7a:b2:ce:52:c4:5a:be:4c:35:67:
40:d3:e5:ed:4a:7b:6e:65:dd:6b:f5:25:c6:61:f2:1f:21:47:
d8:90:78:2f:c1:21:69:59:e6:02:17:58:6d:e6:a7:be:28:b5:
18:26:04:92:00:80:06:9f:40:94:60:f1:2c:91:09:1d:c7:42:
69:f3:24:8e:6f:c5:94:1c:f8:c0:22:4a:9c:3a:11:88:47:e6:
67:29:2f:10:84:c6:ad:d0:d7:f8:61:83:8b:c5:6d:d1:8f:8c:
91:86:f9:2a:b0:8f:7b:41:2f:d5:46:65:ba:c1:e3:81:b1:70:
d1:b9:1f:0c:6e:21:36:0f:8c:9e:36:ed:27:49:f1:c0:76:4c:
ef:18:e0:a2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiyaGSkr7NwA7qsIkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyODE3NTEwN1oXDTI1MDQyODE2NTEwN1owLzEtMCsGA1UEAxMk
YTc3ODVkZDItMGVhNy00YTFjLTk4ZjctNjM3MWU3ZTZiYjU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsytd8Wm078MqvSfHljA0cLysnp7DdJ3H2aM/
sVzm2IkduGHIivlvunn+/svn/YiSAr3mUDzX05zYQ7HCXOovC7y8HrOHNP76SCwD
DM/Ong6wZ5hNjcgfKglT/1Ywa79J3TL/IyhiErf9JE7ZjMMUPB9z83BJy/bbr+Z+
LwWM07vOyCvVUpMZmjZXPXZ9apHBDxXFCD5DNQnHPXduUZMoeU6Mn3iCcZeafHkU
+poYbKtLP4FT0VH/FuMChdXgKXxtKVRkAiW42BeOq3xB9/auhH2i7Rf5FP/m+YLL
+OC38nSOTiPYbZ6VvFgDBbTtYPBC7UflFNnVz2E1Ip7hmxZxcwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHUf9LvUGF5i7viZoAnUDgkBEVeBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWYxN2Q4YzEtYmQyMS0z
MGRmLWJlOTktYmJkZmU0OGRiODkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSfHGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK0Tb67H5RGvq9neko3Hpy9SEycWzG/YA30+QZWdBwaZ2PiaOkYK6peu
gf9Z/Jt2xyi/SOqN8YmwYobCOs+thu1iwpdnQ7E8BJZdQe03TutXD7rlhVIeP6PG
CrMgu5hwfkeY4uwqYIFxPOysHzpmYFADjYNDerLOUsRavkw1Z0DT5e1Ke25l3Wv1
JcZh8h8hR9iQeC/BIWlZ5gIXWG3mp74otRgmBJIAgAafQJRg8SyRCR3HQmnzJI5v
xZQc+MAiSpw6EYhH5mcpLxCExq3Q1/hhg4vFbdGPjJGG+Sqwj3tBL9VGZbrB44Gx
cNG5HwxuITYPjJ427SdJ8cB2TO8Y4KI=
-----END CERTIFICATE-----
Generated at Sat Mar 15 00:09:01 2025 by rpki-client