Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e0524772-8289-3085-8270-2c7e599a5f2c.roa
File: e0524772-8289-3085-8270-2c7e599a5f2c.roa (raw, json)
Hash identifier: 5QC0p7tm0CCC2y3RjNHSWv7pAQEchyjxGhv7wpPWwZ4=
Subject key identifier: 7C:51:AF:DF:D4:1D:CD:3A:55:85:18:95:67:92:E8:C6:B6:E2:AA:C8
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285847BEF831FCFBAE7FE6C73619E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e0524772-8289-3085-8270-2c7e599a5f2c.roa
Signing time: Sat 02 Nov 2024 13:00:42 +0000
ROA not before: Sat 02 Nov 2024 13:00:42 +0000
ROA not after: Fri 31 Jan 2025 14:00:42 +0000
asID: 22909
IP address blocks: 66.208.214.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 06 Jan 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:be:f8:31:fc:fb:ae:7f:e6:c7:36:19:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Nov 2 13:00:42 2024 GMT
Not After : Jan 31 14:00:42 2025 GMT
Subject: CN=f2eaa52c-793c-4545-abba-05fd89977a66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a9:ea:a6:01:23:73:cb:72:47:3a:ba:d4:19:
82:8f:a5:fc:26:e7:06:ff:70:f8:0e:81:df:1b:8e:
c2:7b:70:56:b7:d7:70:20:28:3d:1e:45:55:46:f7:
21:1b:51:2b:5e:e8:f4:27:0e:35:09:02:8a:f3:a6:
e6:76:5d:d6:a0:bf:db:00:08:9d:78:e1:70:74:cd:
e0:7d:71:fa:25:1a:74:85:54:46:5a:0d:50:0f:e6:
9b:26:fe:8f:7d:27:e4:e6:36:6e:1b:9b:89:27:5f:
aa:47:74:a8:37:92:eb:ae:33:22:3e:ca:76:c8:a0:
37:dd:8e:d1:04:66:69:c9:42:7f:4a:cb:a5:a7:75:
14:f5:48:82:48:97:7b:72:30:8e:e4:5d:7a:bd:c8:
f2:5c:b2:cc:bf:f7:79:1a:13:5e:3b:bb:d7:f1:81:
65:3c:eb:14:e9:6e:1f:f8:bb:02:43:c8:f9:8d:ea:
47:7c:31:fa:90:80:a4:a5:95:99:6c:be:d5:c6:9d:
a2:ba:31:dd:95:14:96:af:6b:05:33:10:c7:f2:d9:
3b:39:62:c3:12:79:dc:62:0f:18:da:55:ef:1a:fb:
c4:84:62:90:09:9a:73:48:7e:d9:b6:c2:63:d1:41:
67:2e:2d:03:23:2b:b5:2a:cd:14:15:7b:63:25:1e:
c3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:51:AF:DF:D4:1D:CD:3A:55:85:18:95:67:92:E8:C6:B6:E2:AA:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e0524772-8289-3085-8270-2c7e599a5f2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
66.208.214.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:0c:30:35:04:da:ab:59:d1:d6:17:00:91:be:18:57:8d:b1:
9b:d6:e9:a0:48:97:d3:79:5a:17:25:0e:18:0d:50:cb:be:b6:
89:72:75:47:67:5f:82:ba:77:ef:a5:61:c9:b3:f6:c1:d6:90:
cb:69:bb:84:63:2e:31:46:02:b3:0c:ad:de:29:57:71:40:22:
14:a7:bf:2b:7c:0f:20:75:81:6a:e6:bb:ab:3a:14:0d:75:16:
b5:e4:27:97:03:b0:d4:ff:47:a9:cc:42:58:17:d9:54:42:36:
0b:f0:bc:29:a6:e7:3f:97:7c:1c:d7:65:02:aa:59:5c:cf:df:
e0:81:83:e0:c3:cb:31:5c:14:4a:6d:0b:ec:be:e5:fd:f3:aa:
ba:05:bc:54:8b:87:40:de:6d:b4:64:33:e4:c6:e6:10:85:91:
88:47:05:26:a8:e1:4c:a6:75:64:09:b0:4f:bf:0d:81:6f:26:
41:7c:5b:b5:70:24:71:08:58:95:ea:6f:08:d1:5d:ea:21:ef:
04:23:28:19:39:30:cf:fc:3a:83:40:19:12:12:98:8f:a4:ee:
64:4c:af:5f:0d:78:5a:2d:32:94:41:f1:3e:74:03:ea:bf:0c:
82:ed:88:ea:6d:e4:6f:e7:87:e3:29:43:31:e2:e5:06:f7:bb:
e4:bc:86:78
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe++DH8+65/5sc2GeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk
ZjJlYWE1MmMtNzkzYy00NTQ1LWFiYmEtMDVmZDg5OTc3YTY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4anqpgEjc8tyRzq61BmCj6X8JucG/3D4DoHf
G47Ce3BWt9dwICg9HkVVRvchG1ErXuj0Jw41CQKK86bmdl3WoL/bAAideOFwdM3g
fXH6JRp0hVRGWg1QD+abJv6PfSfk5jZuG5uJJ1+qR3SoN5LrrjMiPsp2yKA33Y7R
BGZpyUJ/Ssulp3UU9UiCSJd7cjCO5F16vcjyXLLMv/d5GhNeO7vX8YFlPOsU6W4f
+LsCQ8j5jepHfDH6kICkpZWZbL7Vxp2iujHdlRSWr2sFMxDH8tk7OWLDEnncYg8Y
2lXvGvvEhGKQCZpzSH7ZtsJj0UFnLi0DIyu1Ks0UFXtjJR7DVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHxRr9/UHc06VYUYlWeS6Ma24qrIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTA1MjQ3NzItODI4OS0z
MDg1LTgyNzAtMmM3ZTU5OWE1ZjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQtDWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABcMMDUE2qtZ0dYXAJG+GFeNsZvW6aBIl9N5WhclDhgNUMu+tolydUdn
X4K6d++lYcmz9sHWkMtpu4RjLjFGArMMrd4pV3FAIhSnvyt8DyB1gWrmu6s6FA11
FrXkJ5cDsNT/R6nMQlgX2VRCNgvwvCmm5z+XfBzXZQKqWVzP3+CBg+DDyzFcFEpt
C+y+5f3zqroFvFSLh0DebbRkM+TG5hCFkYhHBSao4UymdWQJsE+/DYFvJkF8W7Vw
JHEIWJXqbwjRXeoh7wQjKBk5MM/8OoNAGRISmI+k7mRMr18NeFotMpRB8T50A+q/
DILtiOpt5G/nh+MpQzHi5Qb3u+S8hng=
-----END CERTIFICATE-----
Generated at Fri Jan 3 15:15:01 2025 by rpki-client on console-fra.rpki-client.org