Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cd7efa9b-16e8-3a70-bb6e-87c84bb02c86.roa
File: cd7efa9b-16e8-3a70-bb6e-87c84bb02c86.roa (raw, json)
Hash identifier: zz3HiaKbs8cgXteSd9fWhXrEW1u2WVjI2rOS4bKaa58=
Subject key identifier: EB:23:AA:28:8F:40:58:E0:1D:CA:AD:3C:E4:3F:F2:0D:65:9A:11:D2
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858497DA623428B8CCE06E8F74D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cd7efa9b-16e8-3a70-bb6e-87c84bb02c86.roa
Signing time: Fri 11 Apr 2025 13:01:00 +0000
ROA not before: Fri 11 Apr 2025 13:01:00 +0000
ROA not after: Thu 10 Jul 2025 13:01:00 +0000
asID: 33489
IP address blocks: 173.165.152.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:7d:a6:23:42:8b:8c:ce:06:e8:f7:4d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Apr 11 13:01:00 2025 GMT
Not After : Jul 10 13:01:00 2025 GMT
Subject: CN=3376faaa-7786-4574-bb95-ac9bf17d50fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c8:bc:ae:13:34:17:9b:c0:ab:7d:10:d4:1c:
fc:e4:bf:de:4c:86:b7:3f:fd:f5:b5:de:42:14:35:
e0:92:00:f5:e3:0d:85:89:5a:9e:32:70:5e:5e:9c:
73:81:5c:4d:53:cd:fb:22:b4:87:08:f9:22:49:e4:
ac:09:bc:f1:00:34:3c:45:71:31:19:63:f2:e7:d8:
0c:00:bf:92:c7:cf:2d:88:db:ec:82:ce:0a:b6:ee:
00:79:1d:31:65:2d:84:9e:cf:ec:3b:da:e3:2b:ed:
80:0a:c2:58:7f:74:18:9f:19:d6:34:3a:c1:e5:6b:
41:f1:6a:f5:c5:72:33:78:bc:59:91:d4:ad:d3:05:
70:b2:52:a2:ef:d4:48:ab:51:b7:22:39:52:1f:8f:
39:50:a3:f1:56:0f:48:b0:53:36:ca:31:f4:2a:5c:
40:41:c9:d7:79:d9:0a:33:57:c2:40:08:09:b3:45:
79:3c:ff:7b:49:e7:dc:81:67:73:be:11:9e:66:e8:
31:83:a8:46:ec:0c:52:b7:39:8f:d6:2c:c4:3d:03:
5e:75:ad:7e:32:d0:f0:9d:b9:2b:31:2d:a3:df:2d:
df:ec:0b:99:e5:c6:2c:32:fa:af:8b:ce:13:e0:e5:
c3:93:50:2f:46:71:66:09:3f:34:46:06:99:69:ac:
9a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:23:AA:28:8F:40:58:E0:1D:CA:AD:3C:E4:3F:F2:0D:65:9A:11:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cd7efa9b-16e8-3a70-bb6e-87c84bb02c86.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
173.165.152.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:eb:54:08:05:32:ef:61:05:6e:f9:e7:f3:e3:12:42:e2:f8:
fe:ba:2c:a1:1f:30:63:c5:f8:38:4e:95:33:22:d5:8b:43:68:
48:59:8b:3b:8d:73:03:64:7c:12:59:26:54:22:2e:bc:6e:5c:
f3:e2:09:16:67:fd:2a:1a:d8:94:d0:38:a7:c0:36:1a:76:cb:
66:96:e4:fd:c8:23:f1:1e:47:ca:28:68:78:54:44:dd:6d:fa:
aa:dc:37:1a:70:b1:9a:e6:08:a1:d6:fb:22:cb:f4:09:57:ca:
a5:81:12:61:b5:e4:93:d7:84:be:24:7f:e4:b0:3b:cf:b8:2d:
ec:0d:ab:12:f3:d9:55:ec:4f:ba:54:62:e4:22:2d:d8:2a:be:
81:d4:a5:43:b8:73:33:3a:7e:2a:42:22:9a:d6:e3:c4:e6:32:
00:3b:46:14:82:5d:ea:ed:04:97:b6:40:81:96:9f:72:43:bd:
5f:84:4c:de:39:40:86:77:9f:f0:be:48:3e:63:18:99:6e:43:
99:1b:e0:46:e5:28:ab:53:86:49:80:98:b5:79:52:8d:f9:a4:
a8:ca:1b:7c:af:14:de:55:69:7a:02:3b:9b:e0:15:03:45:94:
08:e4:e1:60:ae:27:3d:a4:4a:eb:3d:a3:e1:e7:25:be:eb:7c:
09:b2:d6:9d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9piNCi4zOBuj3TQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk
MzM3NmZhYWEtNzc4Ni00NTc0LWJiOTUtYWM5YmYxN2Q1MGZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApci8rhM0F5vAq30Q1Bz85L/eTIa3P/31td5C
FDXgkgD14w2FiVqeMnBeXpxzgVxNU837IrSHCPkiSeSsCbzxADQ8RXExGWPy59gM
AL+Sx88tiNvsgs4Ktu4AeR0xZS2Ens/sO9rjK+2ACsJYf3QYnxnWNDrB5WtB8Wr1
xXIzeLxZkdSt0wVwslKi79RIq1G3IjlSH485UKPxVg9IsFM2yjH0KlxAQcnXedkK
M1fCQAgJs0V5PP97SefcgWdzvhGeZugxg6hG7AxStzmP1izEPQNeda1+MtDwnbkr
MS2j3y3f7AuZ5cYsMvqvi84T4OXDk1AvRnFmCT80RgaZaayaqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOsjqiiPQFjgHcqtPOQ/8g1lmhHSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2Q3ZWZhOWItMTZlOC0z
YTcwLWJiNmUtODdjODRiYjAyYzg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDraWYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABfrVAgFMu9hBW755/PjEkLi+P66LKEfMGPF+DhOlTMi1YtDaEhZizuN
cwNkfBJZJlQiLrxuXPPiCRZn/Soa2JTQOKfANhp2y2aW5P3II/EeR8ooaHhURN1t
+qrcNxpwsZrmCKHW+yLL9AlXyqWBEmG15JPXhL4kf+SwO8+4LewNqxLz2VXsT7pU
YuQiLdgqvoHUpUO4czM6fipCIprW48TmMgA7RhSCXertBJe2QIGWn3JDvV+ETN45
QIZ3n/C+SD5jGJluQ5kb4EblKKtThkmAmLV5Uo35pKjKG3yvFN5VaXoCO5vgFQNF
lAjk4WCuJz2kSus9o+HnJb7rfAmy1p0=
-----END CERTIFICATE-----
Generated at Sat Apr 12 07:27:09 2025 by rpki-client