Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/b9adabc2-fc08-39d4-aaca-584aaef77c91.roa
File: b9adabc2-fc08-39d4-aaca-584aaef77c91.roa (raw, json)
Hash identifier: aRRreCSeGZr0ri2KO98tcDmx5S1CTAr7kIjp6+YgBM8=
Subject key identifier: F3:3B:91:A6:6C:25:95:91:1F:8A:F3:AD:79:42:57:08:D8:57:6A:30
Certificate issuer: /CN=60af319e-0c74-40e2-b93c-daa51c45791e
Certificate serial: 010D0C9F432858495ABEE47671DEFE8A0946D680
Authority key identifier: 11:7A:F7:77:29:9D:64:9C:CE:9C:56:4A:81:6C:42:D9:C9:5F:B3:40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/b9adabc2-fc08-39d4-aaca-584aaef77c91.roa
Signing time: Sun 30 Mar 2025 01:00:47 +0000
ROA not before: Sun 30 Mar 2025 01:00:47 +0000
ROA not after: Sat 28 Jun 2025 01:00:47 +0000
asID: 8018
IP address blocks: 172.82.36.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/60af319e-0c74-40e2-b93c-daa51c45791e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/60af319e-0c74-40e2-b93c-daa51c45791e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5a:be:e4:76:71:de:fe:8a:09:46:d6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60af319e-0c74-40e2-b93c-daa51c45791e
Validity
Not Before: Mar 30 01:00:47 2025 GMT
Not After : Jun 28 01:00:47 2025 GMT
Subject: CN=ffe9d7ac-f7dc-4832-a004-2407352f174e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f9:88:03:ee:42:d6:66:38:23:06:28:27:59:
bd:43:37:fb:43:cd:96:8b:25:1c:c9:6f:8d:22:af:
84:f9:ac:1f:23:05:f2:37:c3:46:34:cb:ff:f2:6d:
ed:82:dc:17:d5:08:71:d4:1d:00:e6:6d:db:86:d2:
30:f4:3a:0f:6b:5a:3e:04:08:79:01:37:e3:ee:9b:
be:e8:eb:b0:ed:1f:34:8b:cf:f6:14:c1:bc:05:5c:
b1:29:c0:47:8f:1b:b8:8a:d1:c0:c0:28:94:35:60:
44:66:a6:0f:be:b3:85:ec:8c:90:a9:b9:78:63:83:
e6:80:a3:74:b4:14:b5:6e:e6:af:53:fe:ff:e0:e0:
91:6e:21:8d:e1:7a:ee:93:e1:72:0d:df:d9:6a:91:
97:79:aa:01:36:76:3a:69:f7:73:ed:7d:b9:25:d4:
ca:5e:6c:3c:93:3b:50:5f:f7:1e:78:b6:80:a1:f7:
89:17:f5:81:d4:f9:30:16:23:a1:fa:7d:e4:c6:fb:
a6:cc:5b:d9:7b:00:a5:a7:7c:a3:db:d1:77:ee:4e:
84:30:01:76:25:c1:e0:8e:6f:2c:dc:5f:28:14:a9:
f3:4a:22:0e:10:14:0c:ae:d8:a2:75:00:23:e4:fd:
d8:2b:c0:d1:80:54:87:36:54:7c:b9:89:ac:c3:68:
91:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:3B:91:A6:6C:25:95:91:1F:8A:F3:AD:79:42:57:08:D8:57:6A:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/b9adabc2-fc08-39d4-aaca-584aaef77c91.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/60af319e-0c74-40e2-b93c-daa51c45791e.crl
X509v3 Authority Key Identifier:
keyid:11:7A:F7:77:29:9D:64:9C:CE:9C:56:4A:81:6C:42:D9:C9:5F:B3:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e.cer
sbgp-ipAddrBlock: critical
IPv4:
172.82.36.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:c6:b0:fe:ce:4a:89:ca:09:4a:2d:7e:dc:b3:e7:8a:ae:1f:
0d:8d:42:b2:93:5e:2f:8c:65:3c:eb:e4:d5:40:18:4a:46:31:
c6:44:bb:c1:5b:6c:6b:10:e4:b9:da:e7:e2:6e:28:9b:d3:81:
fb:e0:56:5f:6d:76:03:37:de:84:2a:59:2d:4b:5b:f4:d4:c7:
73:1f:00:48:5b:eb:c4:91:cb:c0:e1:62:ac:04:7e:99:69:37:
92:f0:b5:ab:63:55:a2:60:bc:d3:82:69:65:c1:45:7d:73:c6:
aa:0e:aa:ac:1b:2d:6e:80:72:2a:b0:77:21:d3:76:fe:bf:2b:
f5:f0:cd:8e:d6:f3:55:07:03:58:13:4b:23:f1:4a:92:3b:fe:
12:18:67:67:b9:31:5f:79:84:26:0b:d7:d6:c9:f3:0f:f1:3a:
40:bc:28:84:e0:12:4d:74:ba:9d:85:0b:4f:ca:ba:de:11:33:
25:e8:52:16:4c:b8:87:51:55:43:98:ff:9a:e4:4b:53:b5:be:
7a:ed:2e:aa:e5:63:d2:7c:9a:30:48:2a:70:90:7c:43:58:23:
0d:50:0c:a8:af:30:d9:d2:11:2b:52:c6:00:84:07:9a:5c:b1:
6c:59:44:33:f8:1c:bb:77:8f:ac:00:c2:dd:d6:e3:77:b6:7a:
57:e5:80:f0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavuR2cd7+iglG1oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjBhZjMxOWUtMGM3NC00MGUyLWI5M2MtZGFhNTFjNDU3
OTFlMB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk
ZmZlOWQ3YWMtZjdkYy00ODMyLWEwMDQtMjQwNzM1MmYxNzRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/mIA+5C1mY4IwYoJ1m9Qzf7Q82WiyUcyW+N
Iq+E+awfIwXyN8NGNMv/8m3tgtwX1Qhx1B0A5m3bhtIw9DoPa1o+BAh5ATfj7pu+
6Ouw7R80i8/2FMG8BVyxKcBHjxu4itHAwCiUNWBEZqYPvrOF7IyQqbl4Y4PmgKN0
tBS1buavU/7/4OCRbiGN4Xruk+FyDd/ZapGXeaoBNnY6afdz7X25JdTKXmw8kztQ
X/ceeLaAofeJF/WB1PkwFiOh+n3kxvumzFvZewClp3yj29F37k6EMAF2JcHgjm8s
3F8oFKnzSiIOEBQMrtiidQAj5P3YK8DRgFSHNlR8uYmsw2iRXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPM7kaZsJZWRH4rzrXlCVwjYV2owMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82MGFm
MzE5ZS0wYzc0LTQwZTItYjkzYy1kYWE1MWM0NTc5MWUvYjlhZGFiYzItZmMwOC0z
OWQ0LWFhY2EtNTg0YWFlZjc3YzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjBhZjMxOWUtMGM3NC00MGUyLWI5
M2MtZGFhNTFjNDU3OTFlLzYwYWYzMTllLTBjNzQtNDBlMi1iOTNjLWRhYTUxYzQ1
NzkxZS5jcmwwHwYDVR0jBBgwFoAUEXr3dymdZJzOnFZKgWxC2clfs0AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC82MGFmMzE5ZS0wYzc0LTQwZTItYjkzYy1kYWE1
MWM0NTc5MWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrFIkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKzGsP7OSonKCUotftyz54quHw2NQrKTXi+MZTzr5NVAGEpGMcZEu8Fb
bGsQ5Lna5+JuKJvTgfvgVl9tdgM33oQqWS1LW/TUx3MfAEhb68SRy8DhYqwEfplp
N5LwtatjVaJgvNOCaWXBRX1zxqoOqqwbLW6AciqwdyHTdv6/K/XwzY7W81UHA1gT
SyPxSpI7/hIYZ2e5MV95hCYL19bJ8w/xOkC8KITgEk10up2FC0/Kut4RMyXoUhZM
uIdRVUOY/5rkS1O1vnrtLqrlY9J8mjBIKnCQfENYIw1QDKivMNnSEStSxgCEB5pc
sWxZRDP4HLt3j6wAwt3W43e2elflgPA=
-----END CERTIFICATE-----
Generated at Wed Apr 9 06:29:53 2025 by rpki-client