Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d90bc969-9b92-3e4a-a9be-7d0fe798baae.roa
File: d90bc969-9b92-3e4a-a9be-7d0fe798baae.roa (raw, json)
Hash identifier: mnV+0EuThzrepFA35lVHrWGbYBJ5UhIGUwcfyyCdkAk=
Subject key identifier: 2E:50:C0:2A:18:6C:21:5D:2A:4E:69:1D:0C:5F:88:8D:BE:E4:31:5D
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858497DA545FC3321486A5F172920
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d90bc969-9b92-3e4a-a9be-7d0fe798baae.roa
Signing time: Fri 11 Apr 2025 13:01:00 +0000
ROA not before: Fri 11 Apr 2025 13:01:00 +0000
ROA not after: Thu 10 Jul 2025 13:01:00 +0000
asID: 13367
IP address blocks: 76.156.120.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:7d:a5:45:fc:33:21:48:6a:5f:17:29:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Apr 11 13:01:00 2025 GMT
Not After : Jul 10 13:01:00 2025 GMT
Subject: CN=cc73d77e-a5eb-4cda-9deb-14a7fc605718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f7:8f:5d:80:64:e4:92:f8:55:90:8a:79:90:
ec:9e:4a:56:c9:42:d6:e2:54:f4:03:bd:ec:50:d6:
46:d5:12:47:5d:3a:08:b3:cf:74:ac:c9:9f:2e:be:
09:88:2c:78:6f:29:e8:3c:c6:d1:c6:67:6c:07:db:
e9:b6:a1:c4:21:33:76:47:3b:a2:02:3b:26:48:48:
2d:5c:14:7b:32:12:59:de:52:e5:8e:0d:b6:3a:fc:
19:31:d6:ab:31:41:38:84:67:f2:ff:f1:d9:67:00:
0e:d2:67:3f:2e:fd:71:cf:6f:23:6a:54:78:a6:a1:
cd:73:b6:ea:f6:fd:42:fa:c7:1e:b6:28:e6:72:88:
90:62:3b:6a:b5:5d:c7:1e:bf:b0:54:e2:4e:21:db:
06:f9:7a:34:67:71:d8:6e:43:18:6f:4e:58:51:fc:
e2:4e:8f:93:84:1b:2b:7f:ae:fc:83:25:9f:d4:e9:
ea:dc:d9:04:12:80:42:b5:89:27:e2:17:0b:66:8b:
19:60:90:da:21:03:4d:df:a7:a3:cb:65:08:10:50:
ee:88:2f:e5:39:fb:7b:35:63:6f:ac:4a:46:48:0d:
6f:37:11:c0:a0:97:eb:8a:72:8c:e7:ec:a8:a7:7e:
fd:5a:ae:52:94:48:f5:3f:e9:0f:3c:61:aa:19:f0:
30:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:50:C0:2A:18:6C:21:5D:2A:4E:69:1D:0C:5F:88:8D:BE:E4:31:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d90bc969-9b92-3e4a-a9be-7d0fe798baae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.156.120.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:2c:97:8a:02:de:1d:4c:d8:66:0f:01:a5:45:a4:b7:c9:f5:
17:75:4e:1d:1e:32:f3:09:d6:11:53:51:fd:45:e4:b8:e9:ef:
e0:ab:e5:50:37:50:6f:6f:fc:1b:8f:5c:7b:3a:4b:26:a2:ea:
03:f2:d2:20:c1:c2:49:47:e5:7a:c1:7e:59:5e:42:52:7d:38:
af:c9:83:23:aa:34:73:64:d0:e6:d9:a9:81:d9:5a:00:da:70:
35:87:2b:de:a3:ee:49:02:00:97:a0:17:b2:65:fe:50:05:71:
b6:7f:fd:25:66:bf:d7:c1:65:3a:d6:58:03:19:7d:f1:67:b0:
97:14:b9:07:c4:91:17:94:34:73:3e:3f:91:1d:14:d7:f4:ff:
47:64:1c:e5:dc:8d:a1:e2:74:3c:c5:14:68:7f:49:4a:72:61:
89:2a:55:3f:9d:3a:d3:1c:8b:da:e5:44:ee:62:90:9d:dd:dc:
47:31:67:a2:48:9e:1c:10:ec:88:a5:f8:8a:5b:34:b5:d7:86:
0a:98:05:17:2d:f4:05:bf:6f:3c:5d:97:99:6f:a2:ee:03:a2:
f2:95:bc:6e:e9:45:1b:12:f5:30:53:b0:47:d5:b5:3e:e0:2f:
17:f9:88:fd:ea:57:b7:32:31:7b:40:b7:2d:93:01:75:35:d9:
9c:43:ea:c6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pUX8MyFIal8XKSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk
Y2M3M2Q3N2UtYTVlYi00Y2RhLTlkZWItMTRhN2ZjNjA1NzE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/ePXYBk5JL4VZCKeZDsnkpWyULW4lT0A73s
UNZG1RJHXToIs890rMmfLr4JiCx4bynoPMbRxmdsB9vptqHEITN2RzuiAjsmSEgt
XBR7MhJZ3lLljg22OvwZMdarMUE4hGfy//HZZwAO0mc/Lv1xz28jalR4pqHNc7bq
9v1C+scetijmcoiQYjtqtV3HHr+wVOJOIdsG+Xo0Z3HYbkMYb05YUfziTo+ThBsr
f678gyWf1Onq3NkEEoBCtYkn4hcLZosZYJDaIQNN36ejy2UIEFDuiC/lOft7NWNv
rEpGSA1vNxHAoJfrinKM5+yop379Wq5SlEj1P+kPPGGqGfAw3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC5QwCoYbCFdKk5pHQxfiI2+5DFdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDkwYmM5NjktOWI5Mi0z
ZTRhLWE5YmUtN2QwZmU3OThiYWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTJx4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHcsl4oC3h1M2GYPAaVFpLfJ9Rd1Th0eMvMJ1hFTUf1F5Ljp7+Cr5VA3
UG9v/BuPXHs6Syai6gPy0iDBwklH5XrBflleQlJ9OK/JgyOqNHNk0ObZqYHZWgDa
cDWHK96j7kkCAJegF7Jl/lAFcbZ//SVmv9fBZTrWWAMZffFnsJcUuQfEkReUNHM+
P5EdFNf0/0dkHOXcjaHidDzFFGh/SUpyYYkqVT+dOtMci9rlRO5ikJ3d3EcxZ6JI
nhwQ7Iil+IpbNLXXhgqYBRct9AW/bzxdl5lvou4DovKVvG7pRRsS9TBTsEfVtT7g
Lxf5iP3qV7cyMXtAty2TAXU12ZxD6sY=
-----END CERTIFICATE-----
Generated at Sat Apr 12 12:29:10 2025 by rpki-client