Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/bd87b42a-cb7c-39c4-8fda-3f3a8fc69336.roa
File: bd87b42a-cb7c-39c4-8fda-3f3a8fc69336.roa (raw, json)
Hash identifier: eChahqCjb+D7xpoBcf3qzZkRWuJGFldqGTOa0kuLIwQ=
Subject key identifier: 5C:0E:36:B9:C0:4B:4A:8A:90:60:80:40:D1:9B:DE:45:86:5A:4C:1F
Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial: 010D0C9F4328584950F964F38DBF1AB260CA6900
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/bd87b42a-cb7c-39c4-8fda-3f3a8fc69336.roa
Signing time: Wed 26 Mar 2025 13:00:53 +0000
ROA not before: Wed 26 Mar 2025 13:00:53 +0000
ROA not after: Tue 24 Jun 2025 13:00:53 +0000
asID: 10397
IP address blocks: 162.244.96.0/24 maxlen: 24
162.244.97.0/24 maxlen: 24
162.244.98.0/24 maxlen: 24
162.244.99.0/24 maxlen: 24
162.244.100.0/24 maxlen: 24
162.244.101.0/24 maxlen: 24
204.16.48.0/24 maxlen: 24
208.67.12.0/24 maxlen: 24
208.67.13.0/24 maxlen: 24
208.67.14.0/24 maxlen: 24
208.67.15.0/24 maxlen: 24
208.85.128.0/24 maxlen: 24
208.85.133.0/24 maxlen: 24
208.85.134.0/24 maxlen: 24
208.85.135.0/24 maxlen: 24
209.42.166.0/24 maxlen: 24
209.42.191.0/24 maxlen: 24
209.209.128.0/21 maxlen: 21
209.209.139.0/24 maxlen: 24
209.209.140.0/22 maxlen: 22
209.209.141.0/24 maxlen: 24
209.209.144.0/20 maxlen: 20
209.209.160.0/20 maxlen: 20
209.209.163.0/24 maxlen: 24
209.209.167.0/24 maxlen: 24
209.209.176.0/22 maxlen: 22
209.209.180.0/23 maxlen: 23
209.209.181.0/24 maxlen: 24
209.209.183.0/24 maxlen: 24
209.209.184.0/24 maxlen: 24
209.209.186.0/23 maxlen: 23
209.209.189.0/24 maxlen: 24
209.209.190.0/23 maxlen: 23
209.250.32.0/19 maxlen: 19
2607:b600::/48 maxlen: 48
2607:b600:1::/48 maxlen: 48
2607:b600:2::/48 maxlen: 48
2607:b600:4::/48 maxlen: 48
2607:b600:5::/48 maxlen: 48
2607:b600:6::/48 maxlen: 48
2607:b600:8::/48 maxlen: 48
2607:b600:10::/48 maxlen: 48
2607:b600:12::/48 maxlen: 48
2607:b600:13::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 18 Apr 2025 05:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:50:f9:64:f3:8d:bf:1a:b2:60:ca:69:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Validity
Not Before: Mar 26 13:00:53 2025 GMT
Not After : Jun 24 13:00:53 2025 GMT
Subject: CN=fafd0a59-e5e1-4149-b1fa-db1c88c80f23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4e:66:66:09:fb:44:75:1e:2e:7c:68:ff:a1:
7b:71:c4:c7:b9:f2:e5:28:fe:1f:c0:15:1d:3b:bb:
2e:be:e2:74:0a:7a:99:e4:a4:ec:4c:94:9c:84:83:
86:01:fa:30:30:36:70:59:78:cd:98:60:55:a3:63:
e3:c5:ed:71:53:5a:6b:6f:20:46:d6:bf:b3:19:f3:
3a:3b:d3:9b:69:b3:a4:c8:10:db:e8:60:9a:2c:ed:
46:18:b1:8b:a6:03:05:87:fa:e1:94:b1:d4:44:4b:
33:63:c9:50:da:a1:43:66:4d:2d:4a:7b:25:0d:3d:
5e:d6:81:18:21:94:6f:0b:97:9f:25:10:a7:72:5c:
93:01:58:13:3b:56:3e:e8:91:3f:c8:50:4b:f4:f7:
46:f3:07:49:4e:a5:0b:53:92:60:c6:0e:7a:a5:a7:
4f:2b:88:b7:fc:4c:21:64:3a:7e:7a:9b:f0:ea:4e:
c6:63:d0:c9:b4:58:16:59:0e:24:8f:22:5f:39:6e:
a7:3d:bc:c2:10:f2:ea:af:ca:b1:d6:60:06:6d:6a:
f0:52:63:31:fd:b8:54:cd:77:1a:48:4e:da:ec:07:
3c:f5:b1:1f:f7:0b:af:6b:25:3a:ad:8a:3b:53:d4:
68:87:db:8b:1d:e3:20:8f:33:04:db:ba:bf:08:27:
f4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:0E:36:B9:C0:4B:4A:8A:90:60:80:40:D1:9B:DE:45:86:5A:4C:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/bd87b42a-cb7c-39c4-8fda-3f3a8fc69336.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
X509v3 Authority Key Identifier:
keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
sbgp-ipAddrBlock: critical
IPv4:
162.244.96.0-162.244.101.255
204.16.48.0/24
208.67.12.0/22
208.85.128.0/24
208.85.133.0-208.85.135.255
209.42.166.0/24
209.42.191.0/24
209.209.128.0/21
209.209.139.0-209.209.181.255
209.209.183.0-209.209.184.255
209.209.186.0/23
209.209.189.0-209.209.191.255
209.250.32.0/19
IPv6:
2607:b600::-2607:b600:2:ffff:ffff:ffff:ffff:ffff
2607:b600:4::-2607:b600:6:ffff:ffff:ffff:ffff:ffff
2607:b600:8::/48
2607:b600:10::/48
2607:b600:12::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:f8:84:a5:cf:ba:b5:9f:63:ae:dc:f4:95:50:f5:36:ca:05:
74:00:c4:84:0c:1f:69:87:71:29:e4:f9:42:74:28:07:19:9b:
98:3f:44:0a:b9:58:b5:65:e8:67:21:01:3f:dc:bd:56:06:f3:
55:4b:3c:b1:ff:b3:61:7a:52:82:85:a2:c5:65:4a:02:5f:22:
29:1a:6d:ca:dc:6d:a1:93:99:61:1d:7c:72:45:0a:cc:82:7e:
fc:36:6a:7b:d2:21:84:83:7d:cc:04:d5:d9:4d:c2:46:f0:e8:
92:59:4f:af:63:3b:67:76:a8:b6:4c:0f:38:9e:60:4d:5a:5d:
d6:79:6e:22:36:b5:a6:0d:f8:d7:1b:55:99:b5:58:37:c5:36:
64:3a:3e:57:c4:ab:c8:39:da:94:c0:35:35:66:84:32:a0:32:
d4:9f:ad:cb:51:d7:ae:39:65:21:1b:83:da:85:6c:48:47:6d:
9f:a1:92:ea:f5:4e:c5:3f:50:a0:70:a6:2c:d7:6c:b4:2f:73:
49:40:77:87:64:01:3e:dd:72:6f:d5:b9:23:13:b7:f4:4b:03:
15:f6:60:0f:61:3e:6d:e7:d3:a6:17:fd:b9:98:3d:11:91:49:
14:c2:7f:7b:f7:0b:2f:18:94:6d:5c:b9:2a:96:d1:c3:d6:eb:
21:30:2d:f9
-----BEGIN CERTIFICATE-----
MIIG/jCCBeagAwIBAgIUAQ0Mn0MoWElQ+WTzjb8asmDKaQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4
MzcwMB4XDTI1MDMyNjEzMDA1M1oXDTI1MDYyNDEzMDA1M1owLzEtMCsGA1UEAxMk
ZmFmZDBhNTktZTVlMS00MTQ5LWIxZmEtZGIxYzg4YzgwZjIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArE5mZgn7RHUeLnxo/6F7ccTHufLlKP4fwBUd
O7suvuJ0CnqZ5KTsTJSchIOGAfowMDZwWXjNmGBVo2Pjxe1xU1prbyBG1r+zGfM6
O9ObabOkyBDb6GCaLO1GGLGLpgMFh/rhlLHUREszY8lQ2qFDZk0tSnslDT1e1oEY
IZRvC5efJRCnclyTAVgTO1Y+6JE/yFBL9PdG8wdJTqULU5Jgxg56padPK4i3/Ewh
ZDp+epvw6k7GY9DJtFgWWQ4kjyJfOW6nPbzCEPLqr8qx1mAGbWrwUmMx/bhUzXca
SE7a7Ac89bEf9wuvayU6rYo7U9Roh9uLHeMgjzME27q/CCf0VwIDAQABo4IEEDCC
BAwwHQYDVR0OBBYEFFwONrnAS0qKkGCAQNGb3kWGWkwfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj
NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvYmQ4N2I0MmEtY2I3Yy0z
OWM0LThmZGEtM2YzYThmYzY5MzM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm
MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2
ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx
YjZjNjgzNzAuY2VyMIHZBggrBgEFBQcBBwEB/wSByTCBxjB8BAIAATB2MAwDBAWi
9GADBAGi9GQDBADMEDADBALQQwwDBADQVYAwDAMEANBVhQMEA9BVgAMEANEqpgME
ANEqvwMEA9HRgDAMAwQA0dGLAwQB0dG0MAwDBADR0bcDBADR0bgDBAHR0bowDAME
ANHRvQMEBtHRgAMEBdH6IDBGBAIAAjBAMA8DBAEmB7YDBwAmB7YAAAIwEgMHAiYH
tgAABAMHACYHtgAABgMHACYHtgAACAMHACYHtgAAEAMHASYHtgAAEjBUBgNVHSAB
Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy
aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB
AQA5+ISlz7q1n2Ou3PSVUPU2ygV0AMSEDB9ph3Ep5PlCdCgHGZuYP0QKuVi1Zehn
IQE/3L1WBvNVSzyx/7NhelKChaLFZUoCXyIpGm3K3G2hk5lhHXxyRQrMgn78Nmp7
0iGEg33MBNXZTcJG8OiSWU+vYztndqi2TA84nmBNWl3WeW4iNrWmDfjXG1WZtVg3
xTZkOj5XxKvIOdqUwDU1ZoQyoDLUn63LUdeuOWUhG4PahWxIR22foZLq9U7FP1Cg
cKYs12y0L3NJQHeHZAE+3XJv1bkjE7f0SwMV9mAPYT5t59OmF/25mD0RkUkUwn97
9wsvGJRtXLkqltHD1ushMC35
-----END CERTIFICATE-----
Generated at Tue Apr 15 19:38:23 2025 by rpki-client