Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/aac3df44-d0fd-3926-96ad-21bf93d9b3f9.roa
File: aac3df44-d0fd-3926-96ad-21bf93d9b3f9.roa (raw, json)
Hash identifier: z2mUqAeb0bqQ7C/gsfqyjF8X0aznkRPvqMPACdjpILs=
Subject key identifier: 95:F3:65:9B:4D:C1:91:BF:39:3F:42:01:B1:94:A8:E8:8F:F6:D4:85
Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial: 010D0C9F43285848AF2BA8E226BD2101B174DC80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/aac3df44-d0fd-3926-96ad-21bf93d9b3f9.roa
Signing time: Mon 27 Jan 2025 14:00:52 +0000
ROA not before: Mon 27 Jan 2025 14:00:52 +0000
ROA not after: Sun 27 Apr 2025 13:00:52 +0000
asID: 18779
IP address blocks: 166.88.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:2b:a8:e2:26:bd:21:01:b1:74:dc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
Validity
Not Before: Jan 27 14:00:52 2025 GMT
Not After : Apr 27 13:00:52 2025 GMT
Subject: CN=861b8e28-a559-4250-aae0-7bcf2cfc8a53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:11:e4:0d:4f:26:a8:fe:45:9f:2e:0c:55:d8:
d7:e4:f5:10:10:80:0c:6d:a5:4f:d6:9c:32:92:92:
20:59:0f:45:e8:ce:10:d2:08:68:5e:26:54:0c:d7:
7b:01:92:1b:0f:80:4a:8f:f6:1a:1b:7c:3d:b6:6d:
6e:31:7c:75:66:f4:bf:92:ba:cd:4f:59:dc:7b:59:
e4:f5:14:03:b5:cd:a6:05:68:36:fd:e5:0c:1e:56:
a8:3e:39:d7:1a:de:df:a3:bf:ca:a0:eb:ad:68:fb:
c3:33:5e:30:92:91:73:5e:6f:b4:4c:24:b6:f8:42:
68:6c:43:97:3f:aa:8f:b0:45:51:b9:e8:0b:34:95:
74:0e:52:3f:d3:18:72:e4:34:bf:12:8a:6d:13:5d:
f2:ad:fe:44:78:e5:b2:66:2b:c2:81:fa:a7:4b:1d:
1f:8f:fc:9e:7c:bb:e4:e4:69:94:e9:e3:03:14:be:
1c:7b:9b:e3:94:0f:48:eb:66:f8:b1:73:2a:94:77:
34:0c:4b:a8:a3:e0:62:f6:f4:97:4f:69:e7:7e:f7:
1a:90:be:e0:f7:99:cc:16:19:08:70:94:e9:b9:55:
06:98:40:8f:b7:78:34:6e:c6:74:33:35:cb:12:5b:
03:ba:b2:64:cc:1b:76:1e:98:e3:e3:96:4e:4d:c9:
48:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F3:65:9B:4D:C1:91:BF:39:3F:42:01:B1:94:A8:E8:8F:F6:D4:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/aac3df44-d0fd-3926-96ad-21bf93d9b3f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
X509v3 Authority Key Identifier:
keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
sbgp-ipAddrBlock: critical
IPv4:
166.88.154.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:6b:78:e2:8a:26:6f:aa:39:9c:89:fc:df:c1:b1:51:f9:7f:
97:0f:ef:25:e5:3d:a3:5c:c5:e9:a8:51:b2:b2:ba:d9:78:73:
7f:e2:5d:3d:04:06:8f:be:6e:2b:f9:fb:bc:eb:8b:4b:48:04:
84:00:61:cf:2f:d8:91:9b:82:77:ac:e0:53:aa:de:00:20:6b:
9c:d9:9a:f1:55:ba:a1:14:8a:c2:fc:15:b5:c6:11:74:93:90:
3b:37:a9:f9:17:8b:b5:53:bc:95:fb:1e:29:15:2b:9d:0e:45:
94:34:bc:86:3d:3c:1b:ba:4b:90:dc:c4:db:fb:79:a4:f2:be:
53:85:4e:29:8b:22:88:29:2c:3d:d5:9d:36:2a:c2:e1:9f:dd:
38:ef:4f:8e:7e:d5:91:51:54:f5:8f:36:82:fc:37:81:d3:d3:
15:1b:90:9e:f5:83:14:21:ea:5d:38:92:42:93:25:eb:b4:71:
18:9a:2d:a1:d8:5a:55:e0:82:ea:68:9e:a9:28:30:35:f7:0e:
6a:9e:22:cc:2e:1a:1a:8c:eb:59:81:03:e7:37:88:8a:3a:d5:
4c:00:fd:d6:4d:88:28:e3:b3:a0:0e:de:5f:59:a2:7a:bc:eb:
5f:94:a7:05:ea:c8:e0:b5:19:ec:b8:06:2b:78:02:59:dc:8f:
6e:3a:46:d0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivK6jiJr0hAbF03IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk
ODYxYjhlMjgtYTU1OS00MjUwLWFhZTAtN2JjZjJjZmM4YTUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohHkDU8mqP5Fny4MVdjX5PUQEIAMbaVP1pwy
kpIgWQ9F6M4Q0ghoXiZUDNd7AZIbD4BKj/YaG3w9tm1uMXx1ZvS/krrNT1nce1nk
9RQDtc2mBWg2/eUMHlaoPjnXGt7fo7/KoOutaPvDM14wkpFzXm+0TCS2+EJobEOX
P6qPsEVRuegLNJV0DlI/0xhy5DS/EoptE13yrf5EeOWyZivCgfqnSx0fj/yefLvk
5GmU6eMDFL4ce5vjlA9I62b4sXMqlHc0DEuoo+Bi9vSXT2nnfvcakL7g95nMFhkI
cJTpuVUGmECPt3g0bsZ0MzXLElsDurJkzBt2Hpjj45ZOTclINQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJXzZZtNwZG/OT9CAbGUqOiP9tSFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYWFjM2RmNDQtZDBmZC0z
OTI2LTk2YWQtMjFiZjkzZDliM2Y5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApliaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGhreOKKJm+qOZyJ/N/BsVH5f5cP7yXlPaNcxemoUbKyutl4c3/iXT0E
Bo++biv5+7zri0tIBIQAYc8v2JGbgnes4FOq3gAga5zZmvFVuqEUisL8FbXGEXST
kDs3qfkXi7VTvJX7HikVK50ORZQ0vIY9PBu6S5DcxNv7eaTyvlOFTimLIogpLD3V
nTYqwuGf3TjvT45+1ZFRVPWPNoL8N4HT0xUbkJ71gxQh6l04kkKTJeu0cRiaLaHY
WlXgguponqkoMDX3DmqeIswuGhqM61mBA+c3iIo61UwA/dZNiCjjs6AO3l9Zonq8
61+UpwXqyOC1Gey4Bit4Alncj246RtA=
-----END CERTIFICATE-----
Generated at Wed Apr 9 17:30:36 2025 by rpki-client