Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f300ecb3-d45a-3ee2-9574-a8215e05e1cf.roa
File: f300ecb3-d45a-3ee2-9574-a8215e05e1cf.roa (raw, json)
Hash identifier: Jp6KoL8Sp5eN2eMEnA3oCXpQTT4RBl6X9d3rM6PBiSg=
Subject key identifier: AE:1E:35:27:7C:19:CA:70:5A:5B:04:AD:6F:C5:FF:27:0D:7B:BB:5E
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848B268EA4600FBB048A764C880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f300ecb3-d45a-3ee2-9574-a8215e05e1cf.roa
Signing time: Tue 28 Jan 2025 17:52:10 +0000
ROA not before: Tue 28 Jan 2025 17:52:10 +0000
ROA not after: Mon 28 Apr 2025 16:52:10 +0000
asID: 33651
IP address blocks: 76.21.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 17 Mar 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b2:68:ea:46:00:fb:b0:48:a7:64:c8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 28 17:52:10 2025 GMT
Not After : Apr 28 16:52:10 2025 GMT
Subject: CN=371864cb-b37e-4255-9564-b83e77d361f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ca:7e:65:6c:b0:7f:4c:cd:96:de:70:4a:55:
14:9a:0b:df:08:aa:65:50:5d:cc:f6:1c:5e:cd:74:
7d:70:be:63:94:2e:a8:e6:a7:a2:60:37:0d:b3:27:
63:05:86:00:b2:bb:7e:7c:ae:c1:3f:06:12:18:0e:
33:95:b8:5f:a4:2f:72:84:99:e7:f7:cc:91:b6:77:
ba:01:13:2b:18:9f:d5:60:1d:68:97:8d:29:73:f2:
1b:be:57:74:07:32:55:d8:81:90:ec:01:f0:ee:65:
5e:9e:d1:cf:a0:e7:92:93:0e:84:db:4b:23:90:f1:
79:a8:3f:13:ae:68:c1:c5:a7:d4:e5:b2:62:a7:8e:
43:c1:4c:bf:e1:bc:8e:52:ef:b4:3d:7c:62:cd:56:
e4:89:f9:0c:58:0c:5a:ad:31:d2:a2:5f:d4:e7:71:
d8:fe:4d:61:7c:78:c7:c2:98:33:cf:d7:95:98:e5:
fe:6b:e4:38:89:23:1f:0b:1f:3b:e4:06:7b:a9:3d:
46:1c:40:9a:30:ba:f8:05:66:7a:88:70:ea:b2:c4:
a1:9d:e9:b4:4a:20:32:f7:95:26:24:46:17:83:51:
5f:ba:ed:65:c8:19:89:e9:97:4a:36:d5:b5:5f:91:
96:02:52:ef:1d:7d:db:6f:d4:ce:6a:30:b1:a1:2f:
26:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:1E:35:27:7C:19:CA:70:5A:5B:04:AD:6F:C5:FF:27:0D:7B:BB:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f300ecb3-d45a-3ee2-9574-a8215e05e1cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.21.113.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:a9:96:18:50:51:8b:21:a9:4a:4f:51:83:c8:68:7d:60:61:
fe:51:ce:1a:f9:40:ae:53:13:7c:34:23:dc:2d:ef:80:49:48:
90:e3:06:a1:96:7b:d5:20:91:e8:16:3c:7e:4e:db:81:7e:6f:
de:f4:91:d6:ab:60:0c:a1:1b:ea:bb:24:dc:48:b7:83:c9:6a:
57:5e:02:ed:ed:4b:21:e5:5f:21:59:77:dd:53:ba:e7:f0:a0:
d4:34:42:9f:67:4a:cd:e6:b8:20:b3:93:50:53:58:bf:d9:71:
56:c1:9c:dd:28:41:4c:58:f1:59:6f:60:b1:fb:03:39:dc:e2:
f6:64:af:92:2c:17:13:b9:db:37:0c:c5:04:32:de:bb:05:86:
dd:a7:c4:00:d7:2d:64:41:39:b3:8e:cc:2b:60:80:5e:03:b9:
4c:38:0c:88:ec:f6:57:e9:b7:bf:08:41:04:9b:4f:45:57:b2:
0b:c8:7d:57:e0:bc:23:55:be:69:6e:25:1e:ca:68:e3:23:79:
a2:dc:e7:09:5d:69:62:6a:9e:5e:26:af:92:a9:85:d8:8b:b7:
c5:91:ad:4a:d0:de:de:72:49:cb:07:8b:96:c2:49:75:fa:02:
05:a7:66:2a:e7:bf:ef:79:b1:7e:c7:2d:43:22:99:8b:09:50:
cc:6c:83:81
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiyaOpGAPuwSKdkyIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyODE3NTIxMFoXDTI1MDQyODE2NTIxMFowLzEtMCsGA1UEAxMk
MzcxODY0Y2ItYjM3ZS00MjU1LTk1NjQtYjgzZTc3ZDM2MWY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcp+ZWywf0zNlt5wSlUUmgvfCKplUF3M9hxe
zXR9cL5jlC6o5qeiYDcNsydjBYYAsrt+fK7BPwYSGA4zlbhfpC9yhJnn98yRtne6
ARMrGJ/VYB1ol40pc/Ibvld0BzJV2IGQ7AHw7mVentHPoOeSkw6E20sjkPF5qD8T
rmjBxafU5bJip45DwUy/4byOUu+0PXxizVbkifkMWAxarTHSol/U53HY/k1hfHjH
wpgzz9eVmOX+a+Q4iSMfCx875AZ7qT1GHECaMLr4BWZ6iHDqssShnem0SiAy95Um
JEYXg1Ffuu1lyBmJ6ZdKNtW1X5GWAlLvHX3bb9TOajCxoS8mKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK4eNSd8GcpwWlsErW/F/ycNe7teMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjMwMGVjYjMtZDQ1YS0z
ZWUyLTk1NzQtYTgyMTVlMDVlMWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATBVxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFuplhhQUYshqUpPUYPIaH1gYf5Rzhr5QK5TE3w0I9wt74BJSJDjBqGW
e9UgkegWPH5O24F+b970kdarYAyhG+q7JNxIt4PJaldeAu3tSyHlXyFZd91Tuufw
oNQ0Qp9nSs3muCCzk1BTWL/ZcVbBnN0oQUxY8VlvYLH7Aznc4vZkr5IsFxO52zcM
xQQy3rsFht2nxADXLWRBObOOzCtggF4DuUw4DIjs9lfpt78IQQSbT0VXsgvIfVfg
vCNVvmluJR7KaOMjeaLc5wldaWJqnl4mr5KphdiLt8WRrUrQ3t5yScsHi5bCSXX6
AgWnZirnv+95sX7HLUMimYsJUMxsg4E=
-----END CERTIFICATE-----
Generated at Sat Mar 15 00:29:37 2025 by rpki-client