Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a1235cc1-f1fd-3968-b88e-3a97332ef032.roa
File: a1235cc1-f1fd-3968-b88e-3a97332ef032.roa (raw, json)
Hash identifier: rz1rIhN3vaxE9KSssTnW4mPUePjbK0CryvJpOeRH/pk=
Subject key identifier: 25:2E:16:50:BD:66:B5:71:29:7C:54:B5:72:AE:0F:C6:01:CA:69:9A
Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial: 010D0C9F43285848AF2BA012F9BD1EEDE1283660
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a1235cc1-f1fd-3968-b88e-3a97332ef032.roa
Signing time: Mon 27 Jan 2025 14:00:52 +0000
ROA not before: Mon 27 Jan 2025 14:00:52 +0000
ROA not after: Sun 27 Apr 2025 13:00:52 +0000
asID: 18779
IP address blocks: 166.88.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:2b:a0:12:f9:bd:1e:ed:e1:28:36:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
Validity
Not Before: Jan 27 14:00:52 2025 GMT
Not After : Apr 27 13:00:52 2025 GMT
Subject: CN=2f8c2922-9473-4e75-9abb-1dcf82fb63f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ad:4c:24:d6:bc:ff:cd:2c:c8:3e:7e:e6:0c:
70:c4:61:c1:bf:5a:f5:b4:31:57:a0:1e:1f:04:f7:
a1:06:49:32:44:8e:ad:0e:e1:52:ec:7a:df:89:67:
18:b3:70:2e:63:e5:4b:07:7f:34:56:4b:aa:12:3b:
e8:b2:07:ed:26:23:5a:9f:e7:ed:cd:09:76:53:ae:
3d:08:e3:dd:dd:d4:25:50:24:60:da:08:fa:83:0d:
dd:a4:ed:03:9c:f4:0e:58:9c:f2:97:da:99:03:4e:
8d:9e:eb:4b:bb:87:79:9a:89:56:37:e2:c7:01:7a:
5c:96:38:18:58:8b:79:fe:85:11:92:ed:fe:77:74:
7d:ed:d5:91:ad:1d:65:5e:38:a7:00:23:30:c4:82:
e1:f1:dd:93:b1:63:79:84:82:48:8c:ee:1d:7b:9b:
da:f0:7c:39:f3:f0:92:5e:61:f5:fb:6b:db:9d:98:
d2:fc:71:78:4c:5c:31:7d:58:99:2f:d0:68:2e:a9:
1a:97:3f:c0:09:39:94:58:ad:0b:22:60:67:b6:69:
f5:30:11:50:5a:62:bf:4f:fc:36:93:bd:e1:73:66:
cf:2e:2e:7e:3c:28:c2:80:63:c1:2b:6b:57:64:a3:
c1:16:c5:4e:30:ab:d5:00:0c:ed:62:7b:ac:d0:3f:
3f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:2E:16:50:BD:66:B5:71:29:7C:54:B5:72:AE:0F:C6:01:CA:69:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a1235cc1-f1fd-3968-b88e-3a97332ef032.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
X509v3 Authority Key Identifier:
keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
sbgp-ipAddrBlock: critical
IPv4:
166.88.227.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:6c:94:ce:0b:57:84:9a:1e:db:80:a9:40:80:2b:75:3d:f1:
2e:5c:5e:77:e8:59:67:6d:93:2f:b1:e1:ad:d9:f1:d7:92:b3:
ef:d6:62:b9:a4:f6:f9:41:6b:32:00:1f:42:28:d1:81:85:d5:
71:44:c0:da:5c:5e:4d:45:4c:b8:de:5d:ba:c6:a9:28:dc:6d:
98:8b:bd:f0:38:3d:78:50:b3:af:a5:8a:8a:2f:8c:da:51:d3:
ac:3d:a2:3a:d5:a9:6d:cf:26:dd:c5:b7:6b:74:ca:da:0b:43:
b7:29:f6:ab:87:5d:4e:7a:15:58:53:4f:fe:67:25:62:14:27:
7b:fa:a9:be:bc:a8:e6:dc:c8:6e:90:7f:fb:fe:34:2b:8e:ff:
98:ea:43:8f:fd:4b:b2:f7:8d:a3:d4:5b:bd:2d:52:08:29:07:
22:8d:e9:3a:3f:67:b0:00:b5:15:bc:0b:4c:df:0e:30:3e:ec:
a1:fa:4e:c9:30:a1:f2:64:6e:ce:14:a5:94:6b:9a:06:55:9c:
8b:b3:c9:12:31:d9:39:e8:63:dd:34:81:14:c7:46:81:b3:61:
79:68:0d:48:c1:28:15:b7:72:d0:84:23:cd:3d:b8:fc:85:b6:
68:17:54:17:f7:b7:09:04:fc:89:f5:1f:97:df:12:c7:a3:fe:
6f:c3:78:a1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivK6AS+b0e7eEoNmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk
MmY4YzI5MjItOTQ3My00ZTc1LTlhYmItMWRjZjgyZmI2M2Y4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnq1MJNa8/80syD5+5gxwxGHBv1r1tDFXoB4f
BPehBkkyRI6tDuFS7HrfiWcYs3AuY+VLB380VkuqEjvosgftJiNan+ftzQl2U649
COPd3dQlUCRg2gj6gw3dpO0DnPQOWJzyl9qZA06NnutLu4d5molWN+LHAXpcljgY
WIt5/oURku3+d3R97dWRrR1lXjinACMwxILh8d2TsWN5hIJIjO4de5va8Hw58/CS
XmH1+2vbnZjS/HF4TFwxfViZL9BoLqkalz/ACTmUWK0LImBntmn1MBFQWmK/T/w2
k73hc2bPLi5+PCjCgGPBK2tXZKPBFsVOMKvVAAztYnus0D8/7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCUuFlC9ZrVxKXxUtXKuD8YBymmaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYTEyMzVjYzEtZjFmZC0z
OTY4LWI4OGUtM2E5NzMzMmVmMDMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApljjMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFtslM4LV4SaHtuAqUCAK3U98S5cXnfoWWdtky+x4a3Z8deSs+/WYrmk
9vlBazIAH0Io0YGF1XFEwNpcXk1FTLjeXbrGqSjcbZiLvfA4PXhQs6+lioovjNpR
06w9ojrVqW3PJt3Ft2t0ytoLQ7cp9quHXU56FVhTT/5nJWIUJ3v6qb68qObcyG6Q
f/v+NCuO/5jqQ4/9S7L3jaPUW70tUggpByKN6To/Z7AAtRW8C0zfDjA+7KH6Tskw
ofJkbs4UpZRrmgZVnIuzyRIx2TnoY900gRTHRoGzYXloDUjBKBW3ctCEI809uPyF
tmgXVBf3twkE/In1H5ffEsej/m/DeKE=
-----END CERTIFICATE-----
Generated at Wed Apr 9 12:58:19 2025 by rpki-client