Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/970d9bca-40c5-40bc-9803-1ef81a602415/6e7a68c3-0547-3263-8434-d888d57e10cc.roa
File: 6e7a68c3-0547-3263-8434-d888d57e10cc.roa (raw, json)
Hash identifier: QFrK4haPb5ryprie2vkdhu2vSOlGpUjUD6jYclX0ONM=
Subject key identifier: 03:66:47:AC:B8:AA:D0:D9:30:2E:8D:45:20:61:AA:80:DF:BF:D9:13
Certificate issuer: /CN=970d9bca-40c5-40bc-9803-1ef81a602415
Certificate serial: 010D0C9F4328584944693D56BEEB58747B6CC380
Authority key identifier: 0D:2F:9B:99:1D:D7:B7:CA:98:0F:30:C4:8F:14:B2:C3:85:23:DD:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/970d9bca-40c5-40bc-9803-1ef81a602415.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/970d9bca-40c5-40bc-9803-1ef81a602415/6e7a68c3-0547-3263-8434-d888d57e10cc.roa
Signing time: Sat 22 Mar 2025 01:00:40 +0000
ROA not before: Sat 22 Mar 2025 01:00:40 +0000
ROA not after: Fri 20 Jun 2025 01:00:40 +0000
asID: 21859
IP address blocks: 172.247.32.0/24 maxlen: 24
172.247.34.0/24 maxlen: 24
172.247.35.0/24 maxlen: 24
172.247.38.0/24 maxlen: 24
172.247.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/970d9bca-40c5-40bc-9803-1ef81a602415/970d9bca-40c5-40bc-9803-1ef81a602415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/970d9bca-40c5-40bc-9803-1ef81a602415/970d9bca-40c5-40bc-9803-1ef81a602415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/970d9bca-40c5-40bc-9803-1ef81a602415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 13 Apr 2025 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:44:69:3d:56:be:eb:58:74:7b:6c:c3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=970d9bca-40c5-40bc-9803-1ef81a602415
Validity
Not Before: Mar 22 01:00:40 2025 GMT
Not After : Jun 20 01:00:40 2025 GMT
Subject: CN=24c8521f-642f-4bd9-acd8-243f4fe4f039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b8:b2:39:04:fc:0f:d4:81:70:c3:ca:7e:75:
ac:ca:15:18:77:0b:18:da:3b:4e:85:4b:5d:0e:8a:
5b:43:f8:0a:5a:e3:ad:b2:de:4c:e2:4d:ac:46:48:
54:7f:98:df:37:49:5d:7a:34:0e:b3:50:3d:69:58:
1d:39:75:b0:74:7e:89:ad:69:65:3c:fe:d6:fb:52:
b0:fd:29:12:85:52:f8:18:f4:34:38:aa:b8:c5:7c:
34:69:b9:2b:ba:db:85:bd:76:27:02:b5:6e:21:a1:
5f:5e:1c:b4:52:37:ee:30:e7:26:2b:c2:13:b5:98:
57:ab:47:09:c0:2a:ec:00:b6:64:fc:73:06:e7:69:
e6:ec:8a:81:66:1e:7c:ea:89:fd:1f:60:91:b7:5f:
97:7c:c5:6b:90:35:71:fc:9a:66:db:45:53:26:33:
c7:c0:10:30:a7:56:64:da:82:03:a7:00:b7:82:d9:
15:af:f7:a8:82:c1:be:3f:f4:3c:01:e3:4a:c9:1e:
cf:78:7e:58:4b:59:6c:84:15:8c:4a:31:28:50:45:
4b:c2:42:7d:5b:9f:17:07:dc:e2:3d:6f:3f:85:a0:
65:f1:2c:98:d4:30:06:d5:46:38:2d:27:9d:59:4a:
3a:fc:f3:f6:35:5b:d4:1b:e8:50:fb:78:39:a9:a4:
3b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:66:47:AC:B8:AA:D0:D9:30:2E:8D:45:20:61:AA:80:DF:BF:D9:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/970d9bca-40c5-40bc-9803-1ef81a602415/6e7a68c3-0547-3263-8434-d888d57e10cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/970d9bca-40c5-40bc-9803-1ef81a602415/970d9bca-40c5-40bc-9803-1ef81a602415.crl
X509v3 Authority Key Identifier:
keyid:0D:2F:9B:99:1D:D7:B7:CA:98:0F:30:C4:8F:14:B2:C3:85:23:DD:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/970d9bca-40c5-40bc-9803-1ef81a602415.cer
sbgp-ipAddrBlock: critical
IPv4:
172.247.32.0/24
172.247.34.0/23
172.247.38.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:8d:b0:dc:db:bb:e5:e8:33:f6:1c:7f:69:1c:71:e9:68:e7:
aa:e7:3a:78:66:8f:46:41:81:18:4a:00:04:78:49:1c:59:38:
57:d3:5e:f1:d8:e1:5a:cc:af:d6:80:3a:58:7e:44:f5:38:05:
a4:69:ed:8e:32:e6:94:66:d6:cd:95:25:b4:75:28:df:20:8f:
cd:33:0b:cf:58:29:6d:c3:db:b4:b9:53:92:80:58:69:0c:22:
55:ee:f3:29:ae:ec:87:80:52:02:76:bd:1c:f0:4d:3f:b8:65:
f1:62:80:90:e3:f7:b4:fa:92:b7:4b:5c:57:bc:e5:02:91:42:
28:50:99:20:29:17:d5:e8:30:14:a5:00:4e:e4:c5:b5:e4:c8:
4a:8d:29:5b:58:d8:40:8a:db:f1:04:d4:fd:4d:af:7a:7e:a6:
1e:26:f6:fd:b8:c0:4c:54:09:b6:bc:33:12:5a:e1:19:ed:16:
9b:3d:c4:2d:df:f0:38:47:b6:d9:9b:1a:ce:09:e8:b9:f8:c8:
77:84:11:58:ea:38:a4:d4:5c:34:b9:ad:3b:6e:ff:ee:03:03:
15:a3:4f:e4:8f:7c:19:65:b9:3b:bd:1c:dc:d0:16:15:a3:bd:
05:ab:17:62:fe:2e:85:09:f9:28:9c:c9:83:e0:1d:a7:d0:91:
8d:98:4f:db
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWElEaT1WvutYdHtsw4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTcwZDliY2EtNDBjNS00MGJjLTk4MDMtMWVmODFhNjAy
NDE1MB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk
MjRjODUyMWYtNjQyZi00YmQ5LWFjZDgtMjQzZjRmZTRmMDM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkriyOQT8D9SBcMPKfnWsyhUYdwsY2jtOhUtd
DopbQ/gKWuOtst5M4k2sRkhUf5jfN0ldejQOs1A9aVgdOXWwdH6JrWllPP7W+1Kw
/SkShVL4GPQ0OKq4xXw0abkrutuFvXYnArVuIaFfXhy0UjfuMOcmK8ITtZhXq0cJ
wCrsALZk/HMG52nm7IqBZh586on9H2CRt1+XfMVrkDVx/Jpm20VTJjPHwBAwp1Zk
2oIDpwC3gtkVr/eogsG+P/Q8AeNKyR7PeH5YS1lshBWMSjEoUEVLwkJ9W58XB9zi
PW8/haBl8SyY1DAG1UY4LSedWUo6/PP2NVvUG+hQ+3g5qaQ7SQIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFANmR6y4qtDZMC6NRSBhqoDfv9kTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NzBk
OWJjYS00MGM1LTQwYmMtOTgwMy0xZWY4MWE2MDI0MTUvNmU3YTY4YzMtMDU0Ny0z
MjYzLTg0MzQtZDg4OGQ1N2UxMGNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTcwZDliY2EtNDBjNS00MGJjLTk4
MDMtMWVmODFhNjAyNDE1Lzk3MGQ5YmNhLTQwYzUtNDBiYy05ODAzLTFlZjgxYTYw
MjQxNS5jcmwwHwYDVR0jBBgwFoAUDS+bmR3Xt8qYDzDEjxSyw4Uj3bIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85NzBkOWJjYS00MGM1LTQwYmMtOTgwMy0xZWY4
MWE2MDI0MTUuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQArPcgAwQB
rPciAwQBrPcmMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAFeNsNzbu+XoM/Ycf2kccelo56rnOnhmj0ZBgRhK
AAR4SRxZOFfTXvHY4VrMr9aAOlh+RPU4BaRp7Y4y5pRm1s2VJbR1KN8gj80zC89Y
KW3D27S5U5KAWGkMIlXu8ymu7IeAUgJ2vRzwTT+4ZfFigJDj97T6krdLXFe85QKR
QihQmSApF9XoMBSlAE7kxbXkyEqNKVtY2ECK2/EE1P1Nr3p+ph4m9v24wExUCba8
MxJa4RntFps9xC3f8DhHttmbGs4J6Ln4yHeEEVjqOKTUXDS5rTtu/+4DAxWjT+SP
fBlluTu9HNzQFhWjvQWrF2L+LoUJ+SicyYPgHafQkY2YT9s=
-----END CERTIFICATE-----
Generated at Sat Apr 12 09:57:46 2025 by rpki-client