Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/e0dbb7be-029b-3c82-9afe-732168712a6d.roa
File: e0dbb7be-029b-3c82-9afe-732168712a6d.roa (raw, json)
Hash identifier: Q0MVXSdUO7FHoTzWNVsnsVVOvYx20vR0ghVgoNEZ+44=
Subject key identifier: 46:C9:1B:4B:90:A5:19:7F:8A:6F:01:91:EE:66:CA:1E:10:59:2E:86
Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial: 010D0C9F4328584905B6B5641D90D9454F925A10
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/e0dbb7be-029b-3c82-9afe-732168712a6d.roa
Signing time: Thu 27 Feb 2025 14:00:51 +0000
ROA not before: Thu 27 Feb 2025 14:00:51 +0000
ROA not after: Wed 28 May 2025 13:00:51 +0000
asID: 16696
IP address blocks: 204.209.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:05:b6:b5:64:1d:90:d9:45:4f:92:5a:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Validity
Not Before: Feb 27 14:00:51 2025 GMT
Not After : May 28 13:00:51 2025 GMT
Subject: CN=f1cb811a-07e8-4999-b6c9-70ae0562a866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c6:b3:de:15:8e:9e:82:7d:04:f2:86:60:69:
da:01:e3:78:c2:ff:d4:29:88:07:70:21:2f:e3:1b:
05:da:8d:ef:23:2a:85:0b:5a:bd:3c:93:1d:49:78:
ed:42:88:3e:cf:65:71:05:5d:e6:8a:eb:45:05:63:
cd:bc:1f:cc:6e:fb:4c:fa:d9:2f:a1:11:3c:a7:48:
0f:d4:62:db:f6:10:a7:3c:2d:c8:e5:33:94:c5:da:
83:ee:81:0e:cc:78:76:a5:a5:0c:70:37:03:bb:5f:
41:8f:f7:41:74:cb:96:ab:5c:81:e1:5d:6f:91:dd:
c7:70:38:87:1e:d6:e5:9c:3a:3b:20:c1:12:1b:7a:
e5:a3:e4:7d:1f:78:14:fa:26:68:8f:b1:6c:06:2b:
7f:e8:9b:d2:17:76:48:33:cb:eb:b7:75:7e:62:09:
b7:1f:46:0f:f7:02:ef:f4:8c:9d:e2:d1:87:40:f3:
e6:40:ef:4a:ad:3c:57:8b:0f:75:e7:53:63:cf:a1:
25:64:94:c4:51:e6:da:eb:4e:1d:dd:4d:4c:39:8c:
e5:c1:ad:d1:8a:39:5d:09:38:ea:3a:64:03:08:5a:
3e:f5:bf:a8:bb:4d:08:6d:60:3e:ec:ff:f0:aa:56:
8f:14:36:c0:bd:93:7f:01:f9:43:05:55:c8:d6:7d:
e5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C9:1B:4B:90:A5:19:7F:8A:6F:01:91:EE:66:CA:1E:10:59:2E:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/e0dbb7be-029b-3c82-9afe-732168712a6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
X509v3 Authority Key Identifier:
keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
sbgp-ipAddrBlock: critical
IPv4:
204.209.176.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:6e:3d:ed:e9:e9:38:1a:be:b4:58:ad:1e:87:f1:83:33:72:
fb:57:15:ed:fd:70:9c:b6:9f:c5:eb:82:78:a8:df:5d:b6:d7:
af:42:26:af:6e:dd:52:4f:e8:6a:8b:66:73:d6:0e:01:c5:d2:
82:20:85:49:5b:d6:e5:2f:66:73:0c:f7:18:7f:49:03:3d:7b:
35:f4:47:7e:55:e4:2e:65:ac:e8:7d:79:e6:a3:fd:ab:c6:a7:
7a:a6:82:90:e7:e2:ca:6d:b4:bd:c0:e7:72:85:96:55:eb:36:
bb:f7:22:9a:5d:42:6a:dd:45:d7:f7:d7:3f:20:1e:a5:64:c3:
7d:c8:79:f1:99:55:e7:7e:4e:c3:77:5c:10:61:e5:e3:43:c2:
91:fc:21:0c:23:68:cd:0d:47:28:86:24:c5:6d:be:e8:31:62:
55:85:36:d1:96:fc:9b:cd:75:46:44:c2:91:2e:9f:e3:d4:3e:
89:a5:61:36:82:0a:c5:5a:d2:84:5a:6f:67:b8:53:07:23:0c:
c7:a2:03:53:ad:f8:6e:ed:5d:2e:67:b7:b6:8c:7d:31:47:a9:
31:85:8d:8c:38:66:71:3c:9a:37:7d:96:39:c1:db:08:47:91:
ae:52:e9:60:fa:b4:75:c9:30:c4:6a:9a:3b:73:c4:fa:c6:ad:
e6:89:07:48
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtrVkHZDZRU+SWhAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm
YzYwMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk
ZjFjYjgxMWEtMDdlOC00OTk5LWI2YzktNzBhZTA1NjJhODY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMaz3hWOnoJ9BPKGYGnaAeN4wv/UKYgHcCEv
4xsF2o3vIyqFC1q9PJMdSXjtQog+z2VxBV3miutFBWPNvB/MbvtM+tkvoRE8p0gP
1GLb9hCnPC3I5TOUxdqD7oEOzHh2paUMcDcDu19Bj/dBdMuWq1yB4V1vkd3HcDiH
HtblnDo7IMESG3rlo+R9H3gU+iZoj7FsBit/6JvSF3ZIM8vrt3V+Ygm3H0YP9wLv
9Iyd4tGHQPPmQO9KrTxXiw9151Njz6ElZJTEUeba604d3U1MOYzlwa3RijldCTjq
OmQDCFo+9b+ou00IbWA+7P/wqlaPFDbAvZN/AflDBVXI1n3lDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEbJG0uQpRl/im8Bke5myh4QWS6GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl
OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvZTBkYmI3YmUtMDI5Yi0z
YzgyLTlhZmUtNzMyMTY4NzEyYTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz
YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh
ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1
YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzNGwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADNuPe3p6TgavrRYrR6H8YMzcvtXFe39cJy2n8Xrgnio3122169CJq9u
3VJP6GqLZnPWDgHF0oIghUlb1uUvZnMM9xh/SQM9ezX0R35V5C5lrOh9eeaj/avG
p3qmgpDn4spttL3A53KFllXrNrv3IppdQmrdRdf31z8gHqVkw33IefGZVed+TsN3
XBBh5eNDwpH8IQwjaM0NRyiGJMVtvugxYlWFNtGW/JvNdUZEwpEun+PUPomlYTaC
CsVa0oRab2e4UwcjDMeiA1Ot+G7tXS5nt7aMfTFHqTGFjYw4ZnE8mjd9ljnB2whH
ka5S6WD6tHXJMMRqmjtzxPrGreaJB0g=
-----END CERTIFICATE-----
Generated at Wed Apr 9 12:36:14 2025 by rpki-client