Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f382ca97-6f48-3bd2-bde5-77813507a2e5.roa
File: f382ca97-6f48-3bd2-bde5-77813507a2e5.roa (raw, json)
Hash identifier: cfZGa2vrE9gccBKGhlXpY8Z1kQyFtZFskP3F3ogF7jE=
Subject key identifier: 05:D7:F1:23:23:20:CF:89:93:11:AC:C9:9F:09:75:94:E0:DE:33:11
Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial: 010D0C9F43285848B35B73F23BB65E05FA82B700
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f382ca97-6f48-3bd2-bde5-77813507a2e5.roa
Signing time: Wed 29 Jan 2025 02:00:39 +0000
ROA not before: Wed 29 Jan 2025 02:00:39 +0000
ROA not after: Tue 29 Apr 2025 01:00:39 +0000
asID: 209854
IP address blocks: 136.0.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b3:5b:73:f2:3b:b6:5e:05:fa:82:b7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
Validity
Not Before: Jan 29 02:00:39 2025 GMT
Not After : Apr 29 01:00:39 2025 GMT
Subject: CN=5b2c2063-44b9-44e7-a3af-0757dfad75d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:65:32:1c:79:40:56:8f:03:66:c0:3e:44:3a:
12:b7:46:59:2f:9c:ab:07:b6:63:4a:07:84:88:a9:
64:ed:31:cb:a2:3e:b4:02:a3:e6:28:ed:96:2c:2f:
fd:a7:e4:cf:2b:3e:a6:0a:f6:e6:0c:48:aa:7f:4a:
bc:d7:6e:70:13:18:58:b1:ba:60:57:a7:aa:44:d5:
ff:f4:8f:66:39:b7:44:46:d5:72:75:ba:37:f5:f8:
54:21:21:21:4c:bd:ba:d0:13:ff:1b:c6:30:45:2b:
46:b7:a9:fd:d8:60:2d:d1:fe:ce:28:20:81:b8:9f:
d3:0c:dc:39:1a:e5:a9:86:88:21:5e:84:bb:c7:e9:
6f:f5:a8:b5:48:5f:5c:6f:35:fc:45:43:02:f6:ff:
87:c5:cd:d4:d8:53:0b:f8:d4:39:73:be:34:08:ab:
07:c2:8b:13:f7:75:16:bc:c8:cc:da:a2:37:d5:11:
97:75:9f:f4:63:04:88:a8:fb:ba:e2:05:ac:f0:7f:
1f:8b:97:30:2d:99:f7:21:65:ba:c4:8f:c8:fe:7f:
ca:c6:5c:3e:fa:4c:39:f5:2d:14:c7:a6:66:f3:3e:
de:a6:92:e8:34:60:dc:fc:4b:c3:54:9f:9c:ae:8f:
71:cc:d1:20:5a:0a:d4:51:c0:6e:53:33:91:67:6e:
d7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D7:F1:23:23:20:CF:89:93:11:AC:C9:9F:09:75:94:E0:DE:33:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f382ca97-6f48-3bd2-bde5-77813507a2e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
X509v3 Authority Key Identifier:
keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
sbgp-ipAddrBlock: critical
IPv4:
136.0.214.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:54:1f:a4:67:23:e8:3b:61:07:a8:e1:9a:6a:5e:d5:f5:85:
51:94:0e:9f:21:a3:98:d7:99:13:6c:d2:df:eb:10:3d:9b:ad:
69:9f:3d:4e:ca:4a:c3:c4:46:8a:6b:3f:39:f2:1e:b2:8d:d9:
54:27:15:50:29:13:83:3c:c9:b2:4e:f1:55:7a:d8:ec:a8:89:
fb:66:5d:71:aa:18:72:fe:05:ca:5c:28:2d:03:c0:14:0e:8c:
08:87:23:90:d9:71:0b:1d:e8:7f:b3:28:04:a9:f7:0b:dc:32:
8f:d5:fb:71:e9:f1:84:cd:e5:9f:4f:56:d4:ee:64:bd:1f:e7:
46:0a:7b:f4:da:df:52:97:13:88:65:92:c0:a1:5f:45:68:37:
4d:fa:87:4c:5f:82:20:39:ab:45:b2:b4:83:12:5b:92:92:88:
4c:eb:96:40:d7:c7:09:6c:d2:3c:aa:1b:28:53:11:84:e3:e5:
2a:ae:8a:5a:d2:69:d3:4b:d7:7f:e4:3d:d4:a0:37:10:87:05:
f5:1f:a7:90:9f:ce:b6:fa:f5:17:52:0c:41:7d:27:1c:2a:12:
ec:1b:28:fd:04:6d:64:5f:cb:12:76:3d:d4:6f:4b:f8:bf:c5:
3a:ec:38:12:62:7a:3f:69:55:45:d9:3d:04:e6:db:23:a1:ef:
02:2c:80:a4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEizW3PyO7ZeBfqCtwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MDEyOTAyMDAzOVoXDTI1MDQyOTAxMDAzOVowLzEtMCsGA1UEAxMk
NWIyYzIwNjMtNDRiOS00NGU3LWEzYWYtMDc1N2RmYWQ3NWQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGUyHHlAVo8DZsA+RDoSt0ZZL5yrB7ZjSgeE
iKlk7THLoj60AqPmKO2WLC/9p+TPKz6mCvbmDEiqf0q8125wExhYsbpgV6eqRNX/
9I9mObdERtVydbo39fhUISEhTL260BP/G8YwRStGt6n92GAt0f7OKCCBuJ/TDNw5
GuWphoghXoS7x+lv9ai1SF9cbzX8RUMC9v+Hxc3U2FML+NQ5c740CKsHwosT93UW
vMjM2qI31RGXdZ/0YwSIqPu64gWs8H8fi5cwLZn3IWW6xI/I/n/Kxlw++kw59S0U
x6Zm8z7eppLoNGDc/EvDVJ+cro9xzNEgWgrUUcBuUzORZ27XhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAXX8SMjIM+JkxGsyZ8JdZTg3jMRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZjM4MmNhOTctNmY0OC0z
YmQyLWJkZTUtNzc4MTM1MDdhMmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiADWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHZUH6RnI+g7YQeo4ZpqXtX1hVGUDp8ho5jXmRNs0t/rED2brWmfPU7K
SsPERoprPznyHrKN2VQnFVApE4M8ybJO8VV62OyoiftmXXGqGHL+BcpcKC0DwBQO
jAiHI5DZcQsd6H+zKASp9wvcMo/V+3Hp8YTN5Z9PVtTuZL0f50YKe/Ta31KXE4hl
ksChX0VoN036h0xfgiA5q0WytIMSW5KSiEzrlkDXxwls0jyqGyhTEYTj5SquilrS
adNL13/kPdSgNxCHBfUfp5Cfzrb69RdSDEF9JxwqEuwbKP0EbWRfyxJ2PdRvS/i/
xTrsOBJiej9pVUXZPQTm2yOh7wIsgKQ=
-----END CERTIFICATE-----
Generated at Wed Apr 9 22:04:08 2025 by rpki-client