Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/4cb51156-681b-3b02-bfaf-14a78060c1f2.roa
File: 4cb51156-681b-3b02-bfaf-14a78060c1f2.roa (raw, json)
Hash identifier: dXjYuprBf7Gs0nGd5fMEsZLWe51lQm8DHT5yx/tviUs=
Subject key identifier: CA:15:3B:00:19:F9:10:8F:50:C2:7E:C6:43:8E:3D:D4:D7:09:8F:57
Certificate issuer: /CN=9de2e0c2-2707-42c9-b26d-59fe7d0b342f
Certificate serial: 010D0C9F4328584937D9352D44A02B619586E1C0
Authority key identifier: 44:24:09:83:D6:FE:E5:17:5D:60:BD:AC:DC:B3:27:E5:CC:C5:BF:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/4cb51156-681b-3b02-bfaf-14a78060c1f2.roa
Signing time: Mon 17 Mar 2025 13:00:52 +0000
ROA not before: Mon 17 Mar 2025 13:00:52 +0000
ROA not after: Sun 15 Jun 2025 13:00:52 +0000
asID: 399542
IP address blocks: 2602:f8ef:fb::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 17 Apr 2025 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:37:d9:35:2d:44:a0:2b:61:95:86:e1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9de2e0c2-2707-42c9-b26d-59fe7d0b342f
Validity
Not Before: Mar 17 13:00:52 2025 GMT
Not After : Jun 15 13:00:52 2025 GMT
Subject: CN=5d52dbbe-d531-45f7-8a6a-89c5fe2bab23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6a:16:79:2a:9a:4d:e6:e3:47:1e:84:b4:41:
0b:3e:3d:47:aa:98:0c:6f:8d:38:ee:bc:02:5a:62:
4d:b7:50:93:92:bd:af:0c:c5:3d:bd:cc:b1:54:95:
93:7d:09:95:e0:e6:ec:21:ff:34:91:d5:64:1a:d6:
66:5a:a2:88:ab:0b:da:d7:27:bd:82:91:24:aa:79:
f5:96:65:e8:e4:e3:ab:f2:87:36:82:82:60:4d:42:
ca:50:5f:b9:c0:0a:00:7f:67:eb:20:01:3f:87:d7:
33:23:37:4d:b2:9c:2a:98:9a:8a:08:b7:59:50:13:
bd:28:98:fc:ca:b8:ae:54:7e:c8:59:8f:cc:0f:79:
51:2b:eb:2c:d1:6c:a6:f8:5a:c6:7c:2f:f7:dc:5e:
4c:c0:a5:95:ac:7c:39:22:b0:77:55:1b:8b:fe:5e:
ed:3e:e6:70:d2:a7:16:9b:c2:2c:6a:8f:f8:7b:5f:
ff:54:5d:e0:50:e5:c9:85:9a:e5:1a:08:2e:c8:23:
87:13:19:7d:ed:d5:97:ca:7f:04:07:fb:2c:55:cb:
01:50:69:c3:9d:fa:63:0a:9c:f0:86:ab:87:4a:53:
17:0d:a5:0f:26:9d:7d:e9:c4:07:fb:1f:17:28:4c:
b3:bd:69:32:37:19:68:cc:c1:3b:8e:3c:e5:28:b0:
99:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:15:3B:00:19:F9:10:8F:50:C2:7E:C6:43:8E:3D:D4:D7:09:8F:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/4cb51156-681b-3b02-bfaf-14a78060c1f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.crl
X509v3 Authority Key Identifier:
keyid:44:24:09:83:D6:FE:E5:17:5D:60:BD:AC:DC:B3:27:E5:CC:C5:BF:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f8ef:fb::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:7f:d3:0c:97:63:f1:fb:41:13:7d:3b:99:1a:08:53:2d:1a:
b7:94:6d:de:57:74:c8:04:cd:6a:b7:e9:08:b0:ad:f1:a0:74:
4d:98:68:98:43:c5:fc:fb:b6:e2:28:cc:33:c0:51:ce:e7:fc:
e4:cf:97:63:b1:a7:0e:03:88:6b:d7:5f:11:e0:d7:17:4c:4e:
be:3d:49:fb:68:44:01:14:8f:af:ce:f1:3d:07:65:95:84:86:
82:45:ad:df:47:f9:2a:05:af:ef:88:af:68:a2:59:32:1e:e8:
80:cb:0b:83:db:74:0e:aa:4b:85:35:fd:86:32:ef:81:80:5d:
a3:7a:e2:24:23:5d:19:55:4f:3e:d4:52:57:df:75:f2:80:ac:
27:b4:e9:c9:fd:93:cd:98:21:49:69:db:e3:1e:e7:8f:ab:83:
52:f5:fb:84:23:96:fc:b3:b7:e1:4f:7c:d7:68:48:c5:14:6f:
21:cc:55:1f:11:6b:7a:16:c6:2e:f3:82:a1:27:d6:6c:d0:39:
c0:65:3c:d3:12:ea:e7:a7:dd:5f:f7:e1:8f:42:80:dd:bb:3b:
4e:31:13:e2:16:49:d5:17:87:1a:aa:41:7f:28:03:06:9f:84:
38:6d:ab:62:ad:ff:ee:6a:a1:a8:19:26:42:26:66:07:c9:dc:
9e:67:5e:8b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEk32TUtRKArYZWG4cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWRlMmUwYzItMjcwNy00MmM5LWIyNmQtNTlmZTdkMGIz
NDJmMB4XDTI1MDMxNzEzMDA1MloXDTI1MDYxNTEzMDA1MlowLzEtMCsGA1UEAxMk
NWQ1MmRiYmUtZDUzMS00NWY3LThhNmEtODljNWZlMmJhYjIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGoWeSqaTebjRx6EtEELPj1HqpgMb4047rwC
WmJNt1CTkr2vDMU9vcyxVJWTfQmV4ObsIf80kdVkGtZmWqKIqwva1ye9gpEkqnn1
lmXo5OOr8oc2goJgTULKUF+5wAoAf2frIAE/h9czIzdNspwqmJqKCLdZUBO9KJj8
yriuVH7IWY/MD3lRK+ss0Wym+FrGfC/33F5MwKWVrHw5IrB3VRuL/l7tPuZw0qcW
m8Isao/4e1//VF3gUOXJhZrlGgguyCOHExl97dWXyn8EB/ssVcsBUGnDnfpjCpzw
hquHSlMXDaUPJp196cQH+x8XKEyzvWkyNxlozME7jjzlKLCZBwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMoVOwAZ+RCPUMJ+xkOOPdTXCY9XMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85ZGUy
ZTBjMi0yNzA3LTQyYzktYjI2ZC01OWZlN2QwYjM0MmYvNGNiNTExNTYtNjgxYi0z
YjAyLWJmYWYtMTRhNzgwNjBjMWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOWRlMmUwYzItMjcwNy00MmM5LWIy
NmQtNTlmZTdkMGIzNDJmLzlkZTJlMGMyLTI3MDctNDJjOS1iMjZkLTU5ZmU3ZDBi
MzQyZi5jcmwwHwYDVR0jBBgwFoAURCQJg9b+5RddYL2s3LMn5czFvyEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS85ZGUyZTBjMi0yNzA3LTQyYzktYjI2ZC01OWZl
N2QwYjM0MmYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL47wD7
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAC9/0wyXY/H7QRN9O5kaCFMtGreUbd5XdMgEzWq36QiwrfGgdE2Y
aJhDxfz7tuIozDPAUc7n/OTPl2Oxpw4DiGvXXxHg1xdMTr49SftoRAEUj6/O8T0H
ZZWEhoJFrd9H+SoFr++Ir2iiWTIe6IDLC4PbdA6qS4U1/YYy74GAXaN64iQjXRlV
Tz7UUlffdfKArCe06cn9k82YIUlp2+Me54+rg1L1+4Qjlvyzt+FPfNdoSMUUbyHM
VR8Ra3oWxi7zgqEn1mzQOcBlPNMS6uen3V/34Y9CgN27O04xE+IWSdUXhxqqQX8o
AwafhDhtq2Kt/+5qoagZJkImZgfJ3J5nXos=
-----END CERTIFICATE-----
Generated at Tue Apr 15 20:09:59 2025 by rpki-client