Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c067ebcd-d586-4479-97f2-23ae813be2d8/ff0d7608-989c-3f5d-bd2d-f07d422f1a99.roa
File: ff0d7608-989c-3f5d-bd2d-f07d422f1a99.roa (raw, json)
Hash identifier: de+Js3MfDPCJIGxpTUuqEid4w/QQ//Xfua7g2G17jJI=
Subject key identifier: AE:4E:0E:2E:A1:77:4C:0E:9D:4A:AC:1C:B1:20:F2:A8:90:70:F9:7A
Certificate issuer: /CN=c067ebcd-d586-4479-97f2-23ae813be2d8
Certificate serial: 010D0C9F43285849552952AC3730DE6503539C00
Authority key identifier: 06:7C:1D:5F:E4:88:A6:4E:A5:97:22:D4:A1:74:18:6C:C6:DC:AE:7F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c067ebcd-d586-4479-97f2-23ae813be2d8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c067ebcd-d586-4479-97f2-23ae813be2d8/ff0d7608-989c-3f5d-bd2d-f07d422f1a99.roa
Signing time: Fri 28 Mar 2025 01:00:41 +0000
ROA not before: Fri 28 Mar 2025 01:00:41 +0000
ROA not after: Thu 26 Jun 2025 01:00:41 +0000
asID: 19224
IP address blocks: 130.51.84.0/22 maxlen: 24
172.98.0.0/22 maxlen: 22
192.210.0.0/24 maxlen: 24
204.10.32.0/22 maxlen: 22
2606:bb40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c067ebcd-d586-4479-97f2-23ae813be2d8/c067ebcd-d586-4479-97f2-23ae813be2d8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c067ebcd-d586-4479-97f2-23ae813be2d8/c067ebcd-d586-4479-97f2-23ae813be2d8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c067ebcd-d586-4479-97f2-23ae813be2d8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 18 Apr 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:55:29:52:ac:37:30:de:65:03:53:9c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c067ebcd-d586-4479-97f2-23ae813be2d8
Validity
Not Before: Mar 28 01:00:41 2025 GMT
Not After : Jun 26 01:00:41 2025 GMT
Subject: CN=403712da-a135-443e-8a70-92a1a6fdf5da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ae:b0:38:ea:8a:1b:1e:d1:93:44:b9:ab:0e:
aa:fd:50:24:5e:67:d2:b9:1a:35:a0:61:d0:f6:c8:
8f:ac:ac:51:00:a5:94:19:56:af:97:a5:89:64:d2:
ab:d8:65:9d:e3:c8:c3:42:79:44:87:c4:fc:45:1e:
e2:ad:15:db:08:82:87:57:01:cf:9c:28:7b:81:1c:
19:06:4a:9e:55:72:5f:2e:f4:5b:9d:18:75:a6:4e:
cb:5c:67:45:97:1e:40:a8:59:5f:7b:6b:f9:9d:d4:
2e:2a:12:38:fc:11:a1:d0:fb:fc:1c:c1:90:48:c4:
46:76:b7:90:67:c2:33:25:53:2f:35:0a:39:dd:f0:
fb:4b:74:4a:dd:f1:17:7e:5d:a9:e7:79:e3:e9:4e:
ef:bd:9f:10:36:df:2b:c9:b1:20:34:d5:11:50:5f:
f4:49:ab:48:43:bb:ed:93:27:dc:be:a5:3b:7e:c2:
62:aa:4b:de:d8:ae:c6:84:df:d4:82:73:36:c2:1a:
a0:61:5b:ad:60:d2:a6:d7:d2:11:7b:68:16:06:c2:
ec:0e:71:ed:ae:ee:aa:97:b4:65:76:a0:b7:f6:3f:
e7:77:2c:7e:c6:eb:10:0c:59:99:5b:44:10:fb:4c:
3f:f6:3d:f5:fc:8e:0b:07:6a:63:56:2e:55:10:1c:
06:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:4E:0E:2E:A1:77:4C:0E:9D:4A:AC:1C:B1:20:F2:A8:90:70:F9:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c067ebcd-d586-4479-97f2-23ae813be2d8/ff0d7608-989c-3f5d-bd2d-f07d422f1a99.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c067ebcd-d586-4479-97f2-23ae813be2d8/c067ebcd-d586-4479-97f2-23ae813be2d8.crl
X509v3 Authority Key Identifier:
keyid:06:7C:1D:5F:E4:88:A6:4E:A5:97:22:D4:A1:74:18:6C:C6:DC:AE:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c067ebcd-d586-4479-97f2-23ae813be2d8.cer
sbgp-ipAddrBlock: critical
IPv4:
130.51.84.0/22
172.98.0.0/22
192.210.0.0/24
204.10.32.0/22
IPv6:
2606:bb40::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:38:60:af:63:2c:96:21:8d:38:ed:8e:01:3c:58:7a:36:6b:
17:30:f4:06:0e:5e:ec:c9:1d:21:9a:e0:37:5a:4c:d4:8e:ea:
ce:fc:c8:ae:e0:8b:12:c8:a3:63:f7:4a:e5:7c:7f:50:0c:5d:
06:91:2f:63:4b:7e:da:0d:6e:4b:52:be:42:2e:fa:86:24:11:
76:f9:9e:eb:19:50:a4:03:8f:26:ab:5b:2e:69:0d:68:88:4c:
ad:e7:c9:3d:9a:39:e8:3a:64:42:a8:2a:77:b4:21:0f:ea:54:
8d:88:a7:58:92:07:13:ca:12:cf:cc:72:59:55:78:28:32:e1:
e7:96:59:2e:1e:f0:6a:86:4f:4d:f7:b3:69:61:46:eb:d0:0f:
a7:23:59:d3:25:0d:51:b6:0a:ff:0d:f0:65:8d:9a:f3:c4:92:
b8:ba:e0:66:ac:2f:13:51:24:ed:5f:ec:38:b7:83:6c:ad:50:
cc:89:8a:ef:98:37:2d:b1:94:9f:42:b3:ef:29:c1:53:56:28:
2b:3a:54:fc:e3:62:31:b6:75:4c:df:7c:aa:46:ca:a8:bd:b7:
03:86:db:32:09:10:1e:ae:8f:60:c2:bf:3b:dc:5e:2c:20:b9:
7a:a6:70:3a:01:a7:37:7e:16:55:a8:38:b5:f5:96:5d:7f:2c:
10:3d:28:a9
-----BEGIN CERTIFICATE-----
MIIGZDCCBUygAwIBAgIUAQ0Mn0MoWElVKVKsNzDeZQNTnAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzA2N2ViY2QtZDU4Ni00NDc5LTk3ZjItMjNhZTgxM2Jl
MmQ4MB4XDTI1MDMyODAxMDA0MVoXDTI1MDYyNjAxMDA0MVowLzEtMCsGA1UEAxMk
NDAzNzEyZGEtYTEzNS00NDNlLThhNzAtOTJhMWE2ZmRmNWRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApa6wOOqKGx7Rk0S5qw6q/VAkXmfSuRo1oGHQ
9siPrKxRAKWUGVavl6WJZNKr2GWd48jDQnlEh8T8RR7irRXbCIKHVwHPnCh7gRwZ
BkqeVXJfLvRbnRh1pk7LXGdFlx5AqFlfe2v5ndQuKhI4/BGh0Pv8HMGQSMRGdreQ
Z8IzJVMvNQo53fD7S3RK3fEXfl2p53nj6U7vvZ8QNt8rybEgNNURUF/0SatIQ7vt
kyfcvqU7fsJiqkve2K7GhN/UgnM2whqgYVutYNKm19IRe2gWBsLsDnHtru6ql7Rl
dqC39j/ndyx+xusQDFmZW0QQ+0w/9j31/I4LB2pjVi5VEBwGRQIDAQABo4IDdjCC
A3IwHQYDVR0OBBYEFK5ODi6hd0wOnUqsHLEg8qiQcPl6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jMDY3
ZWJjZC1kNTg2LTQ0NzktOTdmMi0yM2FlODEzYmUyZDgvZmYwZDc2MDgtOTg5Yy0z
ZjVkLWJkMmQtZjA3ZDQyMmYxYTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzA2N2ViY2QtZDU4Ni00NDc5LTk3
ZjItMjNhZTgxM2JlMmQ4L2MwNjdlYmNkLWQ1ODYtNDQ3OS05N2YyLTIzYWU4MTNi
ZTJkOC5jcmwwHwYDVR0jBBgwFoAUBnwdX+SIpk6llyLUoXQYbMbcrn8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9jMDY3ZWJjZC1kNTg2LTQ0NzktOTdmMi0yM2Fl
ODEzYmUyZDguY2VyMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCgjNUAwQC
rGIAAwQAwNIAAwQCzAogMA0EAgACMAcDBQAmBrtAMFQGA1UdIAEB/wRKMEgwRgYI
KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz
b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADQ4YK9jLJYh
jTjtjgE8WHo2axcw9AYOXuzJHSGa4DdaTNSO6s78yK7gixLIo2P3SuV8f1AMXQaR
L2NLftoNbktSvkIu+oYkEXb5nusZUKQDjyarWy5pDWiITK3nyT2aOeg6ZEKoKne0
IQ/qVI2Ip1iSBxPKEs/McllVeCgy4eeWWS4e8GqGT033s2lhRuvQD6cjWdMlDVG2
Cv8N8GWNmvPEkri64GasLxNRJO1f7Di3g2ytUMyJiu+YNy2xlJ9Cs+8pwVNWKCs6
VPzjYjG2dUzffKpGyqi9twOG2zIJEB6uj2DCvzvcXiwguXqmcDoBpzd+FlWoOLX1
ll1/LBA9KKk=
-----END CERTIFICATE-----
Generated at Wed Apr 16 12:03:37 2025 by rpki-client