Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/01c0aeda-ee8d-36ea-83a4-307519d21bc6.roa
File: 01c0aeda-ee8d-36ea-83a4-307519d21bc6.roa (raw, json)
Hash identifier: oWLfQH32DK6fKeDwAPwNQmCfhS4TQz9YbaLDWekFsJo=
Subject key identifier: D3:56:34:EC:97:57:37:4A:09:63:37:1C:1A:57:14:D0:B0:4D:34:9D
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F432858494039717FBCF276E2F40B1D80
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/01c0aeda-ee8d-36ea-83a4-307519d21bc6.roa
Signing time: Thu 20 Mar 2025 13:00:53 +0000
ROA not before: Thu 20 Mar 2025 13:00:53 +0000
ROA not after: Wed 18 Jun 2025 13:00:53 +0000
asID: 54113
IP address blocks: 2607:8940:45d0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:40:39:71:7f:bc:f2:76:e2:f4:0b:1d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Mar 20 13:00:53 2025 GMT
Not After : Jun 18 13:00:53 2025 GMT
Subject: CN=e390b296-3d9a-4374-81eb-f38a27ac868c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d6:5d:2a:78:b3:d2:72:c7:fb:7b:3c:26:e9:
4e:e4:2d:9f:0a:b7:16:7e:9c:03:90:3c:1e:82:bc:
30:29:98:13:a8:46:3c:13:73:d7:20:8b:95:03:1f:
dc:a2:0c:82:9f:22:01:65:b5:cb:14:17:e4:45:9e:
58:de:fb:c1:41:19:1c:4c:81:af:55:7d:1f:b1:08:
d7:ec:70:a6:ec:d0:46:44:d6:70:33:0c:83:91:32:
0a:cb:ab:f0:e4:5a:32:aa:71:29:9d:08:e1:58:14:
01:99:32:be:53:4e:a9:db:a0:b9:65:1c:09:0a:e8:
85:4a:20:9d:68:3b:69:c6:93:ee:5b:52:e2:04:7e:
d7:a8:a6:5b:ed:bb:39:a6:e6:7d:55:47:58:41:5f:
41:e8:28:86:eb:b5:50:ef:68:2e:af:f0:63:cb:7c:
0a:fc:25:2b:71:3e:c3:72:81:16:8d:ab:34:d3:c3:
4c:91:4a:79:4c:7f:50:9f:73:19:14:34:c4:04:05:
35:96:73:ca:7a:e5:47:c4:c0:6f:9d:6d:3c:bd:76:
2b:03:60:ef:97:82:ae:d1:44:04:00:80:be:d6:b9:
4f:d8:97:90:2d:ef:e3:69:d5:7b:fa:67:bd:79:a6:
64:19:a9:35:d5:1c:45:a5:e4:f5:77:66:b6:e0:f4:
91:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:56:34:EC:97:57:37:4A:09:63:37:1C:1A:57:14:D0:B0:4D:34:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/01c0aeda-ee8d-36ea-83a4-307519d21bc6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:45d0::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:0d:7c:93:a3:4d:e2:37:fd:56:82:aa:0a:d6:25:fd:57:d6:
ee:6e:18:05:fd:f3:20:bf:98:26:ce:e0:dc:4b:e5:a8:73:bd:
cb:ff:32:d9:92:e9:0e:8f:32:c0:3f:7c:65:3a:e8:86:55:97:
f2:81:44:33:91:9d:4d:6c:af:8a:30:5d:a0:be:40:07:ec:62:
40:0b:a6:55:01:f6:1a:c6:5d:46:3d:31:47:12:32:ce:3e:8e:
b2:9e:fc:fd:d4:6a:cb:9c:91:c7:bc:7d:6f:24:9b:19:85:99:
0b:f3:e1:46:a2:38:f1:0b:e8:aa:c5:00:0d:8c:e9:db:15:05:
ef:4b:a1:8b:f3:17:21:c9:b4:ce:dc:24:ef:50:1b:73:65:8c:
a4:28:d1:9e:a9:ac:8f:68:a3:86:d4:7e:b5:ec:99:9a:88:a2:
d8:9b:08:0e:36:7d:ba:86:dd:c0:11:39:eb:55:c5:a9:3b:50:
52:46:66:5c:a8:7e:f5:9b:a8:02:94:49:2d:e5:35:b1:b7:ae:
2b:16:94:fb:8a:43:7c:b6:9b:d1:34:a1:c3:82:60:04:fe:fd:
c5:1f:2e:c9:8c:0f:47:a5:3a:ec:04:ac:0f:ca:e4:d9:fe:0a:
f8:95:26:17:10:7b:6a:e9:ce:c5:69:fa:ca:84:88:c6:78:29:
50:b5:3c:08
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElAOXF/vPJ24vQLHYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk
ZTM5MGIyOTYtM2Q5YS00Mzc0LTgxZWItZjM4YTI3YWM4NjhjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstZdKniz0nLH+3s8JulO5C2fCrcWfpwDkDwe
grwwKZgTqEY8E3PXIIuVAx/cogyCnyIBZbXLFBfkRZ5Y3vvBQRkcTIGvVX0fsQjX
7HCm7NBGRNZwMwyDkTIKy6vw5FoyqnEpnQjhWBQBmTK+U06p26C5ZRwJCuiFSiCd
aDtpxpPuW1LiBH7XqKZb7bs5puZ9VUdYQV9B6CiG67VQ72gur/Bjy3wK/CUrcT7D
coEWjas008NMkUp5TH9Qn3MZFDTEBAU1lnPKeuVHxMBvnW08vXYrA2Dvl4Ku0UQE
AIC+1rlP2JeQLe/jadV7+me9eaZkGak11RxFpeT1d2a24PSRSQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNNWNOyXVzdKCWM3HBpXFNCwTTSdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMDFjMGFlZGEtZWU4ZC0z
NmVhLTgzYTQtMzA3NTE5ZDIxYmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQEXQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAH4NfJOjTeI3/VaCqgrWJf1X1u5uGAX98yC/mCbO4NxL5ahzvcv/
MtmS6Q6PMsA/fGU66IZVl/KBRDORnU1sr4owXaC+QAfsYkALplUB9hrGXUY9MUcS
Ms4+jrKe/P3Uasuckce8fW8kmxmFmQvz4UaiOPEL6KrFAA2M6dsVBe9LoYvzFyHJ
tM7cJO9QG3NljKQo0Z6prI9oo4bUfrXsmZqIotibCA42fbqG3cAROetVxak7UFJG
ZlyofvWbqAKUSS3lNbG3risWlPuKQ3y2m9E0ocOCYAT+/cUfLsmMD0elOuwErA/K
5Nn+CviVJhcQe2rpzsVp+sqEiMZ4KVC1PAg=
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:35:27 2025 by rpki-client