Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d78b42e4-9619-389e-ba14-1b0f2e039be4.roa
File: d78b42e4-9619-389e-ba14-1b0f2e039be4.roa (raw, json)
Hash identifier: qyxxfKQI2Xqw4Jn8I9ytWnJH6rYUwQImaxnVhqZiEjg=
Subject key identifier: 22:87:34:38:E0:B0:82:75:8C:9A:98:7F:FE:B1:77:39:B8:E7:6F:5E
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB080966E3E436FD76C4C80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d78b42e4-9619-389e-ba14-1b0f2e039be4.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33659
IP address blocks: 2603:301b:c00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b0:80:96:6e:3e:43:6f:d7:6c:4c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=786c9b3a-a65d-4b44-8cfd-41fd5b5a5439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:43:29:eb:8f:eb:a3:88:04:40:29:a8:00:31:
06:f3:a8:45:b6:a9:76:84:50:0a:70:8a:f6:dc:9b:
5c:93:49:d4:5f:ac:fc:22:07:39:1f:86:73:7a:cd:
0d:19:12:e0:42:d5:30:f2:1f:46:43:ba:89:76:46:
e6:17:56:72:2d:2c:d4:4a:21:4f:3d:6c:1b:78:87:
00:a7:09:5a:5d:ef:f0:88:f8:56:50:48:22:31:4c:
23:46:4e:12:f2:20:0b:ee:11:00:63:a9:b8:c7:8a:
04:13:08:84:77:b3:c4:7b:fc:1c:64:2a:a5:5b:6c:
60:82:f3:4d:dd:98:6a:6b:0f:f7:20:09:2f:f8:d3:
36:77:37:2f:89:26:9b:e8:81:d4:2d:87:f4:11:02:
e7:1b:e0:30:06:e4:93:16:ed:20:b1:90:37:ba:d2:
2a:6f:1f:7e:55:10:fc:be:d1:e4:a9:bd:5c:46:42:
74:10:fd:a1:3b:c4:13:55:99:68:13:33:36:6c:6d:
a4:87:74:b4:92:6a:9e:9f:88:7c:ef:c8:8d:52:dd:
d0:b3:a1:e9:37:7a:b8:a2:9f:17:e8:06:51:4e:72:
a7:f1:03:ec:12:14:cf:46:60:21:63:ca:db:fb:41:
45:a2:22:c5:59:ea:70:29:79:e6:6b:a1:9d:aa:44:
c6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:87:34:38:E0:B0:82:75:8C:9A:98:7F:FE:B1:77:39:B8:E7:6F:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d78b42e4-9619-389e-ba14-1b0f2e039be4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:301b:c00::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:b2:91:65:51:2d:6d:27:72:27:77:9e:24:a7:03:f3:93:92:
59:72:71:40:18:24:2d:5e:f1:0b:66:e5:06:36:84:14:c5:a0:
f7:5b:d0:ae:e7:fc:8b:57:e8:be:95:57:05:ba:18:f1:5c:a6:
3a:ff:aa:4a:ba:8f:0c:b8:36:13:0b:58:11:36:e7:dc:83:de:
29:29:2e:d0:c3:7a:85:16:18:e4:ea:5c:49:d6:9d:10:36:94:
21:50:42:d7:a3:00:65:a4:66:70:2b:9e:96:b3:af:b4:6e:5f:
71:d3:a2:b2:9e:59:1b:e8:2c:18:85:70:6c:9f:64:e4:a2:af:
4b:32:59:99:71:e4:32:9e:24:db:34:97:f7:f9:ba:b5:3b:b0:
c4:4b:09:a6:66:19:ac:a1:05:2b:13:7d:19:da:c3:0a:ea:1e:
77:75:60:0a:b1:1e:67:97:8d:a2:65:3e:a1:d3:0b:94:da:73:
05:e7:fa:70:42:e7:b1:1b:22:59:8f:90:58:f9:3a:90:6e:70:
a0:9f:fd:c4:6e:76:25:ed:19:c2:ee:2b:ab:6c:25:31:fa:83:
85:77:f6:24:c4:78:3c:10:3e:04:88:30:0a:f4:1c:5a:7e:9f:
5f:75:b8:36:da:76:ec:62:a3:c9:a2:93:93:69:bd:fb:f7:28:
e6:d0:fb:cc
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEkssICWbj5Db9dsTIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
Nzg2YzliM2EtYTY1ZC00YjQ0LThjZmQtNDFmZDViNWE1NDM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUMp64/ro4gEQCmoADEG86hFtql2hFAKcIr2
3Jtck0nUX6z8Igc5H4Zzes0NGRLgQtUw8h9GQ7qJdkbmF1ZyLSzUSiFPPWwbeIcA
pwlaXe/wiPhWUEgiMUwjRk4S8iAL7hEAY6m4x4oEEwiEd7PEe/wcZCqlW2xggvNN
3Zhqaw/3IAkv+NM2dzcviSab6IHULYf0EQLnG+AwBuSTFu0gsZA3utIqbx9+VRD8
vtHkqb1cRkJ0EP2hO8QTVZloEzM2bG2kh3S0kmqen4h878iNUt3Qs6HpN3q4op8X
6AZRTnKn8QPsEhTPRmAhY8rb+0FFoiLFWepwKXnma6GdqkTG9QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFCKHNDjgsIJ1jJqYf/6xdzm4529eMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDc4YjQyZTQtOTYxOS0z
ODllLWJhMTQtMWIwZjJlMDM5YmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwGwww
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAS7KRZVEtbSdyJ3eeJKcD85OSWXJxQBgkLV7xC2blBjaEFMWg91vQ
ruf8i1fovpVXBboY8VymOv+qSrqPDLg2EwtYETbn3IPeKSku0MN6hRYY5OpcSdad
EDaUIVBC16MAZaRmcCuelrOvtG5fcdOisp5ZG+gsGIVwbJ9k5KKvSzJZmXHkMp4k
2zSX9/m6tTuwxEsJpmYZrKEFKxN9GdrDCuoed3VgCrEeZ5eNomU+odMLlNpzBef6
cELnsRsiWY+QWPk6kG5woJ/9xG52Je0Zwu4rq2wlMfqDhXf2JMR4PBA+BIgwCvQc
Wn6fX3W4Ntp27GKjyaKTk2m9+/co5tD7zA==
-----END CERTIFICATE-----
Generated at Wed Apr 9 14:32:03 2025 by rpki-client