Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/1c3443e5-ebe4-3caa-96b1-b4f6fb4c5e83.roa
File: 1c3443e5-ebe4-3caa-96b1-b4f6fb4c5e83.roa (raw, json)
Hash identifier: If1HnWc9Z8vKWPV2NRXGl5+gA8SHgkINiVZ4FNVk8Ec=
Subject key identifier: 33:19:DD:96:1B:82:94:14:05:6E:E5:FC:FB:5E:05:F2:99:08:5D:18
Certificate issuer: /CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb
Certificate serial: 010D0C9F43285848C84B9F41A67E033430383580
Authority key identifier: 8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/1c3443e5-ebe4-3caa-96b1-b4f6fb4c5e83.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 33322
IP address blocks: 208.67.180.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 18 Apr 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:9f:41:a6:7e:03:34:30:38:35:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=e7de8c2b-bb7d-4521-b395-a047419dd8b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4b:05:0f:7e:cb:7d:cf:d1:bb:d7:83:19:52:
cd:b0:25:0f:5a:65:33:86:7a:71:7f:1a:22:27:2a:
a0:3a:ad:6f:bd:80:ae:b5:85:5d:bb:31:1e:ff:be:
66:5b:b4:e5:90:2e:fe:d6:a4:a9:11:dd:b9:06:c3:
47:e2:24:c5:b8:e2:0e:50:f2:38:2c:19:60:49:16:
f3:13:ac:3e:89:63:41:dd:6e:ae:b3:f6:c0:a2:11:
eb:f3:a2:a5:26:a6:4a:1e:9d:22:fc:0f:2e:e8:ef:
00:c8:0d:8d:45:1a:29:35:ad:d7:0c:a2:22:55:4c:
de:e7:03:36:23:8d:37:79:84:f3:2d:15:51:73:2a:
0f:1d:54:b5:6e:b4:cd:fc:5d:c5:b3:eb:89:f4:04:
9a:91:16:1e:c4:85:07:fd:1e:21:71:01:dc:d0:39:
0a:95:6b:5a:4c:78:fa:3d:30:be:c5:9b:c3:95:4e:
8b:b5:0e:1e:49:82:63:18:49:a2:3d:54:ab:7a:53:
b4:71:f0:2d:53:14:8a:0e:1a:1c:e5:7c:04:d3:8b:
a2:c6:18:70:fe:54:bf:f0:20:15:c5:45:c4:6c:88:
11:2d:5c:5a:dd:fe:b4:93:ae:cf:d4:ce:8c:44:c0:
7d:aa:fc:bf:29:2d:fa:cf:57:e7:ce:0c:fa:e0:1d:
fa:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:19:DD:96:1B:82:94:14:05:6E:E5:FC:FB:5E:05:F2:99:08:5D:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/1c3443e5-ebe4-3caa-96b1-b4f6fb4c5e83.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl
X509v3 Authority Key Identifier:
keyid:8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer
sbgp-ipAddrBlock: critical
IPv4:
208.67.180.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:32:7b:7e:d0:7e:62:2b:30:13:4f:82:64:7d:34:cd:93:a3:
a7:3f:f3:e1:28:35:ce:91:02:dd:32:9b:4f:0e:58:91:d0:15:
d2:c5:6a:71:24:98:41:7d:f4:20:d3:9e:c8:84:d2:a7:6e:d0:
82:1d:04:12:55:89:57:81:d6:ed:80:f3:c0:98:80:33:9e:cc:
e5:dc:98:e7:27:70:bf:38:90:1a:16:dd:3a:20:8c:ac:b9:63:
7a:5a:6e:db:e9:22:7e:70:b5:45:e0:7e:22:83:10:c2:47:15:
cd:ce:33:a4:38:67:10:2e:dd:2a:49:42:2e:86:99:de:c8:c0:
6e:7a:97:b1:72:28:46:77:2d:7a:98:89:79:ff:7c:46:37:30:
51:66:5e:66:c5:1b:a6:6a:95:c2:e5:2c:c6:64:8d:ef:27:8e:
4a:b4:41:73:21:0c:49:1f:f1:3b:ff:5b:85:fb:6b:00:6d:3e:
c1:b7:c3:bb:16:f8:60:c3:83:d3:f7:d7:34:2f:33:39:5d:4b:
82:b6:8e:9e:1d:4b:99:b3:07:41:69:c1:57:ef:53:58:0c:8b:
7f:3f:d7:57:54:14:4d:a2:ed:26:a4:e7:73:c6:e0:a8:6a:8c:
aa:c8:75:d5:2b:5e:ba:00:b0:37:12:bb:65:70:ef:53:da:c2:
a1:78:df:44
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS59Bpn4DNDA4NYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmFkY2I4NzQtNmE5Zi00M2QzLTlmMWMtZWFjNDk4Nzkx
OGJiMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk
ZTdkZThjMmItYmI3ZC00NTIxLWIzOTUtYTA0NzQxOWRkOGIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0sFD37Lfc/Ru9eDGVLNsCUPWmUzhnpxfxoi
JyqgOq1vvYCutYVduzEe/75mW7TlkC7+1qSpEd25BsNH4iTFuOIOUPI4LBlgSRbz
E6w+iWNB3W6us/bAohHr86KlJqZKHp0i/A8u6O8AyA2NRRopNa3XDKIiVUze5wM2
I403eYTzLRVRcyoPHVS1brTN/F3Fs+uJ9ASakRYexIUH/R4hcQHc0DkKlWtaTHj6
PTC+xZvDlU6LtQ4eSYJjGEmiPVSrelO0cfAtUxSKDhoc5XwE04uixhhw/lS/8CAV
xUXEbIgRLVxa3f60k67P1M6MRMB9qvy/KS36z1fnzgz64B36pQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDMZ3ZYbgpQUBW7l/PteBfKZCF0YMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mYWRj
Yjg3NC02YTlmLTQzZDMtOWYxYy1lYWM0OTg3OTE4YmIvMWMzNDQzZTUtZWJlNC0z
Y2FhLTk2YjEtYjRmNmZiNGM1ZTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmFkY2I4NzQtNmE5Zi00M2QzLTlm
MWMtZWFjNDk4NzkxOGJiL2ZhZGNiODc0LTZhOWYtNDNkMy05ZjFjLWVhYzQ5ODc5
MThiYi5jcmwwHwYDVR0jBBgwFoAUjRdauYsK5jYPArBgl1RLElU+OdMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mYWRjYjg3NC02YTlmLTQzZDMtOWYxYy1lYWM0
OTg3OTE4YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EO0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADMye37QfmIrMBNPgmR9NM2To6c/8+EoNc6RAt0ym08OWJHQFdLFanEk
mEF99CDTnsiE0qdu0IIdBBJViVeB1u2A88CYgDOezOXcmOcncL84kBoW3TogjKy5
Y3pabtvpIn5wtUXgfiKDEMJHFc3OM6Q4ZxAu3SpJQi6Gmd7IwG56l7FyKEZ3LXqY
iXn/fEY3MFFmXmbFG6ZqlcLlLMZkje8njkq0QXMhDEkf8Tv/W4X7awBtPsG3w7sW
+GDDg9P31zQvMzldS4K2jp4dS5mzB0FpwVfvU1gMi38/11dUFE2i7Sak53PG4Khq
jKrIddUrXroAsDcSu2Vw71PawqF430Q=
-----END CERTIFICATE-----
Generated at Wed Apr 16 03:30:09 2025 by rpki-client