Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4eb61a6a-1785-3238-b458-3cb8ddc84b12.roa
File: 4eb61a6a-1785-3238-b458-3cb8ddc84b12.roa (raw, json)
Hash identifier: CJ2CHxwohUSz+JKKwnijCFOOUDN0QH0rI8imzvASgFA=
Subject key identifier: 12:77:B5:DC:0A:2E:4E:E9:4D:0C:7D:51:36:48:6F:01:A5:31:E1:3B
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F4328584925B3B2F0005A1DA8C66A32E0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4eb61a6a-1785-3238-b458-3cb8ddc84b12.roa
Signing time: Tue 11 Mar 2025 01:00:40 +0000
ROA not before: Tue 11 Mar 2025 01:00:40 +0000
ROA not after: Mon 09 Jun 2025 01:00:40 +0000
asID: 13335
IP address blocks: 204.195.248.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:25:b3:b2:f0:00:5a:1d:a8:c6:6a:32:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Mar 11 01:00:40 2025 GMT
Not After : Jun 9 01:00:40 2025 GMT
Subject: CN=c5f51eeb-ff5e-4832-807b-13998205e161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9a:d8:fb:06:24:0b:44:52:ce:e6:aa:23:00:
52:2a:d7:97:43:46:d0:ce:ce:b7:99:95:e5:6a:41:
d0:0b:da:0a:75:a5:c1:20:5e:18:d6:06:49:79:41:
c7:39:0a:74:8b:69:0d:f0:42:e7:79:03:51:3f:97:
db:a1:71:af:86:b0:49:bf:9c:4f:f4:66:1e:a8:f7:
85:b9:f8:ab:a5:36:c3:83:0b:71:ea:2c:23:d8:c5:
87:a0:78:04:b9:06:16:eb:89:98:df:3c:ae:03:1d:
49:87:5b:4c:30:98:3d:ed:34:7d:20:5a:83:da:be:
de:5b:09:13:7e:12:35:dd:ad:6a:34:a6:28:33:f6:
0d:a9:69:7d:18:a5:a5:95:54:34:55:84:dc:de:07:
e2:49:b2:f6:70:da:58:5d:ec:a0:72:1d:d7:47:fc:
39:99:c1:c4:81:88:d4:7c:57:5a:b2:0e:4d:50:d3:
15:d1:55:f1:c4:10:5d:90:1e:0f:3d:02:a5:6b:4a:
0a:03:2b:13:85:b3:48:c3:4f:c2:f3:fa:34:5c:f8:
96:47:0e:aa:fc:64:e1:23:b3:18:5c:05:ba:32:74:
50:7e:1b:20:ed:b3:96:81:d6:ee:c9:d9:fc:c9:cc:
c1:ca:b6:e6:7f:c8:03:53:cb:c8:76:1b:bb:37:b1:
f8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:77:B5:DC:0A:2E:4E:E9:4D:0C:7D:51:36:48:6F:01:A5:31:E1:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4eb61a6a-1785-3238-b458-3cb8ddc84b12.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv4:
204.195.248.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:48:a5:c9:e5:c4:eb:46:57:20:0c:6d:2c:9f:8e:be:d6:1c:
59:3d:9c:a6:4a:6e:b9:28:6f:ec:33:d3:8a:f9:2b:31:9f:17:
5d:94:0b:11:38:61:31:4f:d0:f4:e1:6b:3e:1f:a6:26:4c:94:
94:ed:89:28:83:d5:7f:ef:6e:6b:71:e3:03:93:d3:ec:0a:a2:
ef:7f:91:f6:3d:20:59:94:8d:ab:6b:ca:8a:76:ac:73:e8:5f:
ca:91:b3:88:2a:f2:fd:56:f0:76:90:f4:ec:6c:ec:a1:63:ee:
4a:2a:5a:d2:27:2f:b6:99:7b:bf:de:be:40:e6:a7:72:ed:27:
45:2f:46:6f:a4:a2:ee:76:12:03:62:9e:99:98:d2:c8:c2:16:
b2:bb:e0:e3:6d:28:7b:6e:6c:66:e6:c0:d8:ec:ee:83:2d:ed:
af:67:b5:4c:f3:d5:90:87:be:ef:ca:8d:d4:dc:49:26:a3:f8:
79:48:d4:da:08:0d:f3:06:6a:fe:07:b6:17:ac:00:dd:42:fb:
47:c0:81:91:d8:42:d4:52:d3:b7:79:08:92:7d:e6:bb:b8:96:
ca:ae:0b:2e:e4:1f:e6:f8:b2:8d:6f:39:7f:b1:d0:5d:ec:f7:
cd:92:05:56:c7:4c:da:2d:67:25:d8:d2:81:29:48:6e:4e:08:
62:87:d7:b7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkls7LwAFodqMZqMuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI1MDMxMTAxMDA0MFoXDTI1MDYwOTAxMDA0MFowLzEtMCsGA1UEAxMk
YzVmNTFlZWItZmY1ZS00ODMyLTgwN2ItMTM5OTgyMDVlMTYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArprY+wYkC0RSzuaqIwBSKteXQ0bQzs63mZXl
akHQC9oKdaXBIF4Y1gZJeUHHOQp0i2kN8ELneQNRP5fboXGvhrBJv5xP9GYeqPeF
ufirpTbDgwtx6iwj2MWHoHgEuQYW64mY3zyuAx1Jh1tMMJg97TR9IFqD2r7eWwkT
fhI13a1qNKYoM/YNqWl9GKWllVQ0VYTc3gfiSbL2cNpYXeygch3XR/w5mcHEgYjU
fFdasg5NUNMV0VXxxBBdkB4PPQKla0oKAysThbNIw0/C8/o0XPiWRw6q/GThI7MY
XAW6MnRQfhsg7bOWgdbuydn8yczByrbmf8gDU8vIdhu7N7H4WQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBJ3tdwKLk7pTQx9UTZIbwGlMeE7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNGViNjFhNmEtMTc4NS0z
MjM4LWI0NTgtM2NiOGRkYzg0YjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzMP4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAINIpcnlxOtGVyAMbSyfjr7WHFk9nKZKbrkob+wz04r5KzGfF12UCxE4
YTFP0PThaz4fpiZMlJTtiSiD1X/vbmtx4wOT0+wKou9/kfY9IFmUjatryop2rHPo
X8qRs4gq8v1W8HaQ9Oxs7KFj7koqWtInL7aZe7/evkDmp3LtJ0UvRm+kou52EgNi
npmY0sjCFrK74ONtKHtubGbmwNjs7oMt7a9ntUzz1ZCHvu/KjdTcSSaj+HlI1NoI
DfMGav4HthesAN1C+0fAgZHYQtRS07d5CJJ95ru4lsquCy7kH+b4so1vOX+x0F3s
982SBVbHTNotZyXY0oEpSG5OCGKH17c=
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:51:51 2025 by rpki-client