Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f366969b-d907-307d-9e2f-d6db76f32927.roa
File: f366969b-d907-307d-9e2f-d6db76f32927.roa (raw, json)
Hash identifier: n5idFZefjxLOpbwDR/j0DDab2RUy8osbbQgEoLgkJ4c=
Subject key identifier: 6D:61:8B:91:25:00:1B:C9:D5:65:0B:7B:B6:27:00:82:5F:B9:45:B5
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858498769C0CBF7ACEE6B0F5DA700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f366969b-d907-307d-9e2f-d6db76f32927.roa
Signing time: Tue 15 Apr 2025 01:00:47 +0000
ROA not before: Tue 15 Apr 2025 01:00:47 +0000
ROA not after: Mon 14 Jul 2025 01:00:47 +0000
asID: 36625
IP address blocks: 192.68.126.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 16 Apr 2025 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:87:69:c0:cb:f7:ac:ee:6b:0f:5d:a7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Apr 15 01:00:47 2025 GMT
Not After : Jul 14 01:00:47 2025 GMT
Subject: CN=78491fd5-08cb-446a-a762-6432a0a9c2b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e0:dd:99:c6:8a:51:37:7e:28:5d:fc:86:8a:
ea:ea:d6:8a:7f:0d:a1:3f:9b:11:fe:ae:17:e5:01:
83:e8:33:f4:b7:0d:80:3f:68:f9:31:9c:fc:74:c5:
09:db:a5:f9:a9:2b:dd:22:a8:25:11:d4:ff:31:bd:
5b:87:c7:2b:0b:b2:bd:09:d2:cb:05:fc:ac:aa:e9:
52:68:8d:59:ae:a2:43:1e:61:c0:c2:ec:a6:51:d5:
17:0a:8c:30:13:f2:d7:72:0f:6b:d3:7b:b6:b3:76:
f2:89:62:21:a8:22:69:f2:3f:d0:58:24:38:8a:d0:
5b:9e:08:d4:ce:27:58:44:68:f2:eb:c4:65:19:6e:
fd:20:4e:9f:c8:25:8d:71:6f:e8:d3:f5:9a:de:08:
7b:ed:c5:bb:7a:f2:d8:97:0a:4f:f9:67:82:bf:34:
37:36:37:bd:a3:1d:1e:f5:e4:68:74:71:fc:c6:02:
fe:41:d6:ad:3b:6b:df:09:ff:02:c3:7f:07:9a:8e:
45:07:7b:b6:8f:81:0b:95:0a:c7:fc:d3:a5:43:6f:
96:9a:e5:c8:8d:20:de:08:0c:4c:10:78:cc:14:7b:
68:3c:a1:5d:36:c6:93:e6:01:6c:85:fd:f9:44:13:
78:3a:61:34:35:33:3a:cd:82:38:66:b8:42:27:e4:
bb:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:61:8B:91:25:00:1B:C9:D5:65:0B:7B:B6:27:00:82:5F:B9:45:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f366969b-d907-307d-9e2f-d6db76f32927.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.126.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:cc:eb:5d:7b:65:f9:d6:9e:c9:e6:58:9c:ef:e7:43:5d:04:
22:cf:f2:37:8a:d5:04:1b:f6:fd:1c:a2:b3:f1:c0:eb:89:48:
3a:94:80:8b:97:92:a3:50:0d:d0:3a:b6:6a:8e:d9:1b:1e:69:
c6:e8:40:7a:19:68:d4:81:28:88:10:69:7c:59:72:96:ce:bd:
2c:74:3e:7b:f0:9e:d6:62:65:61:cd:c8:1d:63:c5:cf:f9:f4:
77:ca:f3:56:7f:5e:c3:c6:de:e8:70:97:15:a8:3d:d5:3b:f1:
0e:ad:3c:6e:e8:8e:dd:92:65:15:82:5e:a3:09:59:1d:51:7c:
0c:cd:f1:b1:3a:76:03:21:bb:5f:74:69:76:47:fa:93:fd:95:
96:5a:84:f5:5a:ef:7d:06:5b:34:3d:e5:4d:e1:5d:68:89:47:
79:33:b4:76:a3:21:77:e8:e6:3f:93:93:ba:9d:44:6e:8c:b8:
df:25:0c:49:44:56:89:70:7d:47:02:c1:88:d1:04:0e:a7:15:
32:6a:97:27:9f:29:f1:65:c2:19:c4:ca:a2:27:bc:1f:db:a3:
b1:08:42:c8:68:97:48:d9:22:ea:99:98:e1:fa:a5:14:d2:9d:
da:a8:c8:de:11:85:49:c8:40:a8:90:ac:0d:fd:7d:5d:2e:7c:
08:ab:2b:5f
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmHacDL96zuaw9dpwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk
Nzg0OTFmZDUtMDhjYi00NDZhLWE3NjItNjQzMmEwYTljMmIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuDdmcaKUTd+KF38horq6taKfw2hP5sR/q4X
5QGD6DP0tw2AP2j5MZz8dMUJ26X5qSvdIqglEdT/Mb1bh8crC7K9CdLLBfysqulS
aI1ZrqJDHmHAwuymUdUXCowwE/LXcg9r03u2s3byiWIhqCJp8j/QWCQ4itBbngjU
zidYRGjy68RlGW79IE6fyCWNcW/o0/Wa3gh77cW7evLYlwpP+WeCvzQ3Nje9ox0e
9eRodHH8xgL+QdatO2vfCf8Cw38Hmo5FB3u2j4ELlQrH/NOlQ2+WmuXIjSDeCAxM
EHjMFHtoPKFdNsaT5gFshf35RBN4OmE0NTM6zYI4ZrhCJ+S76wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFG1hi5ElABvJ1WULe7YnAIJfuUW1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjM2Njk2OWItZDkwNy0z
MDdkLTllMmYtZDZkYjc2ZjMyOTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQANzOtde2X51p7J5lic7+dDXQQiz/I3itUEG/b9HKKz8cDriUg6lICL
l5KjUA3QOrZqjtkbHmnG6EB6GWjUgSiIEGl8WXKWzr0sdD578J7WYmVhzcgdY8XP
+fR3yvNWf17Dxt7ocJcVqD3VO/EOrTxu6I7dkmUVgl6jCVkdUXwMzfGxOnYDIbtf
dGl2R/qT/ZWWWoT1Wu99Bls0PeVN4V1oiUd5M7R2oyF36OY/k5O6nURujLjfJQxJ
RFaJcH1HAsGI0QQOpxUyapcnnynxZcIZxMqiJ7wf26OxCELIaJdI2SLqmZjh+qUU
0p3aqMjeEYVJyECokKwN/X1dLnwIqytf
-----END CERTIFICATE-----
Generated at Tue Apr 15 09:15:11 2025 by rpki-client