Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5e0cb923-05c4-3d7c-bb73-3f847ea621e2.roa
File: 5e0cb923-05c4-3d7c-bb73-3f847ea621e2.roa (raw, json)
Hash identifier: ZnmH3a0X4GdhE7Onsss3gC/Pv06TyDWzMwBe7fQmpv8=
Subject key identifier: F9:58:79:D0:1C:AC:C1:CB:14:CF:DD:19:94:0D:15:FA:04:FA:1B:63
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285849244E922000C34DAC2979BBC8
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5e0cb923-05c4-3d7c-bb73-3f847ea621e2.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 36623
IP address blocks: 2001:500:122::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 18 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:92:20:00:c3:4d:ac:29:79:bb:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=71b55258-4204-430c-b8ef-6f51c8f18c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:45:d3:56:79:7d:0a:ed:70:d6:ef:bc:ca:af:
82:a8:64:4c:01:20:eb:73:21:2e:43:12:ff:b0:8b:
f0:35:49:97:ab:22:e4:fc:d3:0d:24:6a:b2:37:cc:
ed:21:b3:87:c1:8f:b1:80:cb:62:e4:3f:6f:09:0f:
78:e8:d6:c3:99:85:4f:bb:05:7d:e6:61:84:55:9f:
b1:f8:27:72:57:6b:47:61:bb:05:d0:1c:ca:b5:09:
ac:59:4f:7b:0f:d4:de:2a:e2:9e:46:3f:a0:37:1c:
72:b8:b2:54:2a:16:87:34:a1:b6:98:83:23:c0:63:
52:98:d4:d7:41:3f:33:04:4a:09:ac:f8:5e:12:1d:
18:ae:ee:cf:ca:3d:7c:92:b2:58:39:c0:6e:2b:9a:
1c:e3:1a:95:d3:52:c2:c3:6d:ee:cb:de:61:a3:1c:
47:d6:ba:ac:03:22:05:9c:53:48:2e:4a:8a:6a:f9:
ed:e2:58:b0:cd:cd:3b:1d:2e:a4:dc:74:62:fa:61:
30:ee:29:a8:44:e8:a8:78:4f:86:55:af:04:d4:52:
30:1e:bb:5f:fa:62:9e:9c:04:a8:fa:81:a0:55:20:
ad:e3:7f:2c:9b:dc:49:b0:58:63:62:cc:72:e0:a0:
db:6c:d9:1b:be:03:3f:e9:d7:2a:62:b0:df:0c:ba:
aa:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:58:79:D0:1C:AC:C1:CB:14:CF:DD:19:94:0D:15:FA:04:FA:1B:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5e0cb923-05c4-3d7c-bb73-3f847ea621e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:122:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:bb:5e:47:de:e5:0c:07:61:89:38:e2:9e:de:f8:42:5d:2f:
66:48:95:6c:3e:49:2c:6a:26:e6:df:5f:32:f0:ce:35:ea:d4:
9c:b5:58:91:b0:cb:64:7a:41:9a:b1:d0:b0:97:27:da:eb:6d:
6f:c1:c6:ac:16:e9:dc:92:46:bd:92:49:73:3a:fc:50:80:01:
3d:b7:a9:1f:0f:16:c4:26:6a:8e:4c:d0:b3:7d:2f:60:67:ea:
ba:28:d9:e5:65:16:a3:af:29:89:68:c8:50:a0:ba:fe:70:6d:
aa:cf:ec:c1:b6:04:66:29:d7:2d:a8:8a:b6:33:b1:15:31:7d:
3d:27:8d:d7:07:31:c2:ec:a9:ca:49:56:f2:df:93:2f:67:a2:
16:2b:d3:62:4e:ae:62:1f:1f:74:f3:fa:39:d6:11:1a:6f:3f:
ba:ac:ca:11:3e:20:9e:3e:eb:ae:40:7a:98:a5:d7:cc:ef:9b:
4f:96:db:ab:ce:da:e9:67:a3:e3:41:f4:d3:e5:67:86:f6:dc:
8b:45:d1:3e:f8:75:89:27:17:ab:5f:75:b6:4f:a1:21:cd:c7:
66:e6:f8:d4:36:2e:1e:bd:fd:c7:e5:fc:de:c9:02:3a:b0:4d:
14:37:cb:ed:66:2a:99:0b:db:38:78:1b:a4:fc:31:92:4b:00:
58:90:fe:b3
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkkTpIgAMNNrCl5u8gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk
NzFiNTUyNTgtNDIwNC00MzBjLWI4ZWYtNmY1MWM4ZjE4YzNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7kXTVnl9Cu1w1u+8yq+CqGRMASDrcyEuQxL/
sIvwNUmXqyLk/NMNJGqyN8ztIbOHwY+xgMti5D9vCQ946NbDmYVPuwV95mGEVZ+x
+CdyV2tHYbsF0BzKtQmsWU97D9TeKuKeRj+gNxxyuLJUKhaHNKG2mIMjwGNSmNTX
QT8zBEoJrPheEh0Yru7Pyj18krJYOcBuK5oc4xqV01LCw23uy95hoxxH1rqsAyIF
nFNILkqKavnt4liwzc07HS6k3HRi+mEw7imoROioeE+GVa8E1FIwHrtf+mKenASo
+oGgVSCt438sm9xJsFhjYsxy4KDbbNkbvgM/6dcqYrDfDLqqDQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFPlYedAcrMHLFM/dGZQNFfoE+htjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNWUwY2I5MjMtMDVjNC0z
ZDdjLWJiNzMtM2Y4NDdlYTYyMWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEi
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAru15H3uUMB2GJOOKe3vhCXS9mSJVsPkksaibm
318y8M416tSctViRsMtkekGasdCwlyfa621vwcasFunckka9kklzOvxQgAE9t6kf
DxbEJmqOTNCzfS9gZ+q6KNnlZRajrymJaMhQoLr+cG2qz+zBtgRmKdctqIq2M7EV
MX09J43XBzHC7KnKSVby35MvZ6IWK9NiTq5iHx908/o51hEabz+6rMoRPiCePuuu
QHqYpdfM75tPlturztrpZ6PjQfTT5WeG9tyLRdE++HWJJxerX3W2T6Ehzcdm5vjU
Ni4evf3H5fzeyQI6sE0UN8vtZiqZC9s4eBuk/DGSSwBYkP6z
-----END CERTIFICATE-----
Generated at Wed Apr 16 14:36:55 2025 by rpki-client