Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b0eaa650-22ae-3760-988d-251c57476d7f.roa
File: b0eaa650-22ae-3760-988d-251c57476d7f.roa (raw, json)
Hash identifier: 2Ruelzr1X+aknEs+GEDSIi3qzLGPWQBuSAbUlptpkzE=
Subject key identifier: 47:82:D4:19:61:5E:08:A7:9F:BB:D0:E1:D8:1D:55:3E:65:03:01:B0
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584909E69AE717D9DB8D5CDD1800
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b0eaa650-22ae-3760-988d-251c57476d7f.roa
Signing time: Sat 01 Mar 2025 02:00:39 +0000
ROA not before: Sat 01 Mar 2025 02:00:39 +0000
ROA not after: Fri 30 May 2025 01:00:39 +0000
asID: 13335
IP address blocks: 172.68.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:09:e6:9a:e7:17:d9:db:8d:5c:dd:18:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Mar 1 02:00:39 2025 GMT
Not After : May 30 01:00:39 2025 GMT
Subject: CN=6157242f-3d29-4dca-b5dc-231dbee411fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:f8:38:02:37:64:b2:07:db:57:f4:f1:00:c2:
b4:36:bb:cd:40:2c:ba:98:3f:83:bb:8d:eb:9b:af:
28:85:8e:5d:3c:d9:ae:e7:dc:ec:ee:9b:af:76:30:
ce:33:2c:d4:9e:5b:b6:cb:f1:c0:65:57:0c:c2:73:
07:dc:8e:15:1a:6c:ad:54:88:0a:b9:2d:50:ea:d3:
2e:cf:99:bb:23:85:0b:63:fe:4a:29:ec:f8:3b:d0:
12:6f:ed:f4:08:a8:6a:86:bd:02:f3:f5:f6:06:c6:
1b:53:67:8a:6b:9a:7c:81:82:ee:43:9d:0e:3b:48:
e7:72:fc:36:a0:07:d7:10:ba:e8:f5:6c:2c:c9:f0:
d0:96:73:2f:79:4b:c0:26:51:55:92:0e:e8:08:c5:
3e:7d:21:60:8c:42:bc:16:d8:f3:ce:f9:b0:81:44:
8c:2b:1f:5d:5e:50:e8:2f:52:25:ae:34:6b:21:c9:
9f:48:f8:69:bf:69:c1:b9:67:a7:9d:29:4a:e0:51:
3c:1e:e6:0a:54:c9:fb:04:11:30:31:59:3b:38:0e:
0c:81:c5:0d:ca:ce:cd:14:69:6c:92:90:ee:40:93:
76:01:6c:be:19:d2:8b:4b:c3:82:9e:30:99:7a:a2:
c2:94:00:2e:34:c7:e7:15:69:c5:e8:46:93:87:aa:
1e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:82:D4:19:61:5E:08:A7:9F:BB:D0:E1:D8:1D:55:3E:65:03:01:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b0eaa650-22ae-3760-988d-251c57476d7f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.118.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:c2:de:18:f9:89:7a:63:f6:d0:a9:7f:9b:69:f9:c0:a4:9c:
b2:58:07:ee:52:38:c2:d3:7d:72:63:d0:d5:d8:36:ba:cc:f1:
fe:ab:b3:f8:1d:3c:0f:8b:c1:0a:ba:ba:cf:eb:91:6a:ff:4a:
b6:ae:9c:e9:a5:d6:3c:23:70:cf:b5:c2:73:1c:9e:0a:02:56:
44:63:24:6c:5e:97:d0:f7:68:a0:1e:e1:0a:6a:9b:f9:68:08:
f7:39:19:15:28:73:3b:6c:ed:64:4c:83:28:ec:bd:64:f2:50:
45:d8:9e:7a:0a:23:92:c7:e1:a8:d2:e3:36:1f:f8:c4:95:cf:
57:b0:13:f0:38:4c:0d:e8:33:b5:ba:a9:d7:e5:6e:a5:31:2e:
66:81:5d:07:69:78:b8:ef:67:6f:44:cc:3f:9c:80:16:6f:1d:
c1:97:89:3b:2c:9a:c6:07:71:27:31:29:47:44:d3:dd:3f:11:
f5:25:f7:8a:57:e9:1a:08:a3:4a:42:08:9e:e3:d9:d8:64:62:
07:e1:d6:a3:6f:42:14:fd:1a:b2:66:05:15:31:8f:3f:65:a5:
0d:99:16:e8:ad:2c:65:21:8c:a8:25:b7:6b:77:39:0b:3e:07:
7e:4a:36:6b:00:eb:7d:2e:4f:82:52:d5:f7:cc:b9:c7:41:23:
4c:df:07:81
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkJ5prnF9nbjVzdGAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDMwMTAyMDAzOVoXDTI1MDUzMDAxMDAzOVowLzEtMCsGA1UEAxMk
NjE1NzI0MmYtM2QyOS00ZGNhLWI1ZGMtMjMxZGJlZTQxMWZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9/g4AjdksgfbV/TxAMK0NrvNQCy6mD+Du43r
m68ohY5dPNmu59zs7puvdjDOMyzUnlu2y/HAZVcMwnMH3I4VGmytVIgKuS1Q6tMu
z5m7I4ULY/5KKez4O9ASb+30CKhqhr0C8/X2BsYbU2eKa5p8gYLuQ50OO0jncvw2
oAfXELro9WwsyfDQlnMveUvAJlFVkg7oCMU+fSFgjEK8FtjzzvmwgUSMKx9dXlDo
L1IlrjRrIcmfSPhpv2nBuWennSlK4FE8HuYKVMn7BBEwMVk7OA4MgcUNys7NFGls
kpDuQJN2AWy+GdKLS8OCnjCZeqLClAAuNMfnFWnF6EaTh6oezwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEeC1BlhXginn7vQ4dgdVT5lAwGwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYjBlYWE2NTAtMjJhZS0z
NzYwLTk4OGQtMjUxYzU3NDc2ZDdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArER2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACzC3hj5iXpj9tCpf5tp+cCknLJYB+5SOMLTfXJj0NXYNrrM8f6rs/gd
PA+LwQq6us/rkWr/SraunOml1jwjcM+1wnMcngoCVkRjJGxel9D3aKAe4Qpqm/lo
CPc5GRUoczts7WRMgyjsvWTyUEXYnnoKI5LH4ajS4zYf+MSVz1ewE/A4TA3oM7W6
qdflbqUxLmaBXQdpeLjvZ29EzD+cgBZvHcGXiTssmsYHcScxKUdE090/EfUl94pX
6RoIo0pCCJ7j2dhkYgfh1qNvQhT9GrJmBRUxjz9lpQ2ZFuitLGUhjKglt2t3OQs+
B35KNmsA630uT4JS1ffMucdBI0zfB4E=
-----END CERTIFICATE-----
Generated at Thu Apr 10 11:18:04 2025 by rpki-client