Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dd2667cf-9f9f-3968-8634-737825ec5a64.roa
File: dd2667cf-9f9f-3968-8634-737825ec5a64.roa (raw, json)
Hash identifier: U4DRR7v7rtKFBxBUwrff/AzzODYO8RkhXMtS8X38cAk=
Subject key identifier: 07:33:F6:DB:26:EB:8B:AC:AF:0D:3E:B4:22:42:4A:C9:25:3D:F4:40
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB0360B573E1AABDCFB8038
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dd2667cf-9f9f-3968-8634-737825ec5a64.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33660
IP address blocks: 67.172.236.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b0:36:0b:57:3e:1a:ab:dc:fb:80:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=a5cc0a37-c52a-4ffc-bdac-9cba3d664af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:90:28:d8:4e:08:dc:f3:59:25:13:b2:85:f4:
91:aa:cd:4d:bc:61:fa:38:ef:f9:b6:cf:2a:ea:58:
4e:9a:12:82:1a:ad:ca:9d:aa:1f:62:09:1e:a6:3e:
ee:5c:1d:ce:1c:e9:ce:56:e2:55:80:29:a5:fd:d7:
d3:b4:3c:50:b3:41:f1:35:06:20:74:5d:1a:44:22:
93:e8:8f:32:03:39:6e:fb:8d:6a:26:52:8b:d3:36:
ad:77:f7:f7:32:7d:73:6d:4e:66:66:ba:e5:74:d8:
8e:2c:b1:57:64:d8:04:6a:9c:82:49:2d:46:16:ef:
e2:f1:fc:f7:87:82:60:93:77:58:c9:1d:06:cb:43:
2a:04:b9:83:e9:59:8b:3a:62:6d:2f:ea:b5:18:ab:
44:67:1b:3a:4a:30:ac:08:ff:eb:a5:a4:3a:bf:43:
95:b8:25:32:8e:8a:c3:10:4e:be:1d:4b:fd:19:cd:
d5:df:d8:77:1c:b0:3e:01:d6:9f:8d:0e:5f:63:df:
2a:66:a6:73:1b:20:bc:08:62:79:2b:5f:68:c6:4c:
3b:09:b7:7d:a4:d9:d2:e3:f2:df:b7:11:25:fd:d9:
dd:94:ad:89:34:ed:44:06:a2:c2:a8:ea:7d:a6:d3:
b6:67:85:3d:86:31:05:bd:40:6d:c5:5f:6e:90:8f:
36:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:33:F6:DB:26:EB:8B:AC:AF:0D:3E:B4:22:42:4A:C9:25:3D:F4:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dd2667cf-9f9f-3968-8634-737825ec5a64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
67.172.236.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:30:7b:2c:27:a8:0c:9b:57:67:d7:d9:16:0b:61:9b:8b:c5:
9b:23:cf:83:a7:ca:63:4f:32:80:fc:8b:fc:bf:6b:0c:6f:36:
f1:98:07:f2:81:fc:7b:05:37:ab:4f:05:8d:40:e1:5d:09:de:
7f:05:8a:47:19:4d:d2:85:ee:e0:01:e5:7f:ab:aa:75:49:7b:
17:ea:f0:d0:f6:d5:3d:c7:72:9b:21:d4:98:12:68:c5:b5:52:
d7:44:c1:f2:0f:04:c6:3d:ca:b5:96:13:61:45:ed:d6:3e:aa:
08:e5:1a:2d:3c:86:b9:e2:51:c3:0c:d4:7c:4c:cb:a2:7b:cd:
6a:fc:3b:99:1b:bb:8b:65:1d:5a:79:3c:ec:fe:60:df:02:93:
20:24:c8:4e:b7:d1:ef:bd:c1:bf:fe:ce:69:c1:c8:62:05:df:
83:ee:17:15:b0:58:5e:a8:79:07:00:b0:ec:b2:71:09:e3:9d:
3c:42:62:c8:92:b9:38:4a:89:b4:e6:a8:50:c8:11:14:0f:ea:
9c:5a:70:5a:f4:e0:07:9a:58:c8:ed:1a:5e:82:42:a6:b4:14:
7d:7f:06:fc:e0:6a:3a:4c:1f:61:59:bc:48:5a:29:90:f3:21:
fa:8b:71:31:fb:eb:03:64:ca:56:40:b9:c5:70:bc:6c:17:a9:
fa:38:b4:88
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssDYLVz4aq9z7gDgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
YTVjYzBhMzctYzUyYS00ZmZjLWJkYWMtOWNiYTNkNjY0YWY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpAo2E4I3PNZJROyhfSRqs1NvGH6OO/5ts8q
6lhOmhKCGq3KnaofYgkepj7uXB3OHOnOVuJVgCml/dfTtDxQs0HxNQYgdF0aRCKT
6I8yAzlu+41qJlKL0zatd/f3Mn1zbU5mZrrldNiOLLFXZNgEapyCSS1GFu/i8fz3
h4Jgk3dYyR0Gy0MqBLmD6VmLOmJtL+q1GKtEZxs6SjCsCP/rpaQ6v0OVuCUyjorD
EE6+HUv9Gc3V39h3HLA+AdafjQ5fY98qZqZzGyC8CGJ5K19oxkw7Cbd9pNnS4/Lf
txEl/dndlK2JNO1EBqLCqOp9ptO2Z4U9hjEFvUBtxV9ukI82gQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAcz9tsm64usrw0+tCJCSsklPfRAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGQyNjY3Y2YtOWY5Zi0z
OTY4LTg2MzQtNzM3ODI1ZWM1YTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ6zsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG8weywnqAybV2fX2RYLYZuLxZsjz4OnymNPMoD8i/y/awxvNvGYB/KB
/HsFN6tPBY1A4V0J3n8FikcZTdKF7uAB5X+rqnVJexfq8ND21T3Hcpsh1JgSaMW1
UtdEwfIPBMY9yrWWE2FF7dY+qgjlGi08hrniUcMM1HxMy6J7zWr8O5kbu4tlHVp5
POz+YN8CkyAkyE630e+9wb/+zmnByGIF34PuFxWwWF6oeQcAsOyycQnjnTxCYsiS
uThKibTmqFDIERQP6pxacFr04AeaWMjtGl6CQqa0FH1/BvzgajpMH2FZvEhaKZDz
IfqLcTH76wNkylZAucVwvGwXqfo4tIg=
-----END CERTIFICATE-----
Generated at Sat Apr 12 22:04:32 2025 by rpki-client