Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/436b55ee-9b99-3974-b7ef-b5904b816789.roa
File: 436b55ee-9b99-3974-b7ef-b5904b816789.roa (raw, json)
Hash identifier: GkIV5hmwMHsqi/l/4eZdGIPsYg+owDnyFz+E3xQY2GE=
Subject key identifier: EE:DF:BB:90:29:F0:E1:70:15:E4:60:88:A6:77:91:01:E8:1A:74:45
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D15B1D9E03D505A50F0E88
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/436b55ee-9b99-3974-b7ef-b5904b816789.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 33363
IP address blocks: 71.42.0.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Apr 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:5b:1d:9e:03:d5:05:a5:0f:0e:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=a0cddd89-43a2-4efd-9bde-5e59b3a6aec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:32:91:15:de:9a:b5:14:26:d0:83:91:60:3c:
f4:3a:c5:13:bc:05:88:6d:e8:37:60:78:8f:ef:a3:
d1:66:2d:1b:0d:fa:b7:ff:55:4e:e3:e9:eb:b3:68:
1f:be:52:e7:94:dc:65:62:79:40:e8:65:75:5a:7d:
78:a2:22:0b:bd:d0:d3:1d:0c:0a:a8:bd:ab:2b:26:
b4:fb:e7:13:0b:4c:e9:98:e2:f9:95:20:f1:d9:43:
ac:69:3a:00:f9:31:95:31:a3:a6:ff:22:ca:9f:65:
48:43:6c:ef:e5:ea:51:20:4b:c0:d0:f2:36:af:50:
91:de:34:27:5f:a4:2f:18:6f:c6:29:ea:af:15:7d:
74:16:93:b0:49:bb:e6:af:00:b4:88:23:da:4d:74:
45:b0:c7:d0:6b:e8:53:17:48:ee:b3:59:5e:63:91:
3b:c8:94:a4:80:19:21:44:40:ad:64:fa:e5:59:9a:
89:64:92:74:31:27:aa:89:6f:78:7a:a1:fa:c2:4a:
4c:34:64:a6:80:1d:47:8c:f9:00:a3:e3:dd:dc:54:
c5:48:50:bc:f9:b1:05:05:10:06:12:ad:aa:37:1b:
6c:10:c0:9e:02:61:93:c1:b3:64:1a:b9:91:c0:58:
63:8f:e0:83:d2:a5:4b:44:23:64:15:44:3e:23:f6:
a9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:DF:BB:90:29:F0:E1:70:15:E4:60:88:A6:77:91:01:E8:1A:74:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/436b55ee-9b99-3974-b7ef-b5904b816789.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
71.42.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:c0:ff:f8:80:14:b3:6e:85:38:95:59:0c:54:62:8e:a4:f8:
6e:39:91:e7:1d:b8:6d:46:b5:92:4e:7f:7e:62:9e:a4:4e:3a:
d9:67:89:9f:ee:f3:0b:d5:85:49:6c:de:b8:71:15:39:de:36:
39:97:c9:ad:9c:0c:0c:43:a5:4d:12:9a:18:4f:18:30:e6:1c:
d5:33:ac:70:77:5e:7c:00:ec:84:b3:2b:bd:e7:ab:ee:6d:ad:
22:46:8d:6b:b9:dd:25:2a:4e:a3:a5:5c:82:34:7e:5b:20:29:
97:94:eb:e0:19:3b:49:d3:ba:4b:fc:b5:09:2f:d5:a0:e9:6d:
9a:bd:33:e4:fa:93:d9:74:a8:a6:c6:b4:e3:48:98:9d:e3:a9:
1e:14:bd:02:07:50:e8:72:4b:31:22:84:1f:d4:dc:92:f8:06:
10:d8:60:82:f5:51:c6:9e:b1:ae:9e:74:ca:ee:68:7e:81:66:
46:ae:50:dd:ce:1b:61:e7:70:1d:12:6f:43:89:dd:09:1d:0a:
0b:d4:f2:23:56:d3:cf:96:ab:c6:23:e8:87:8b:7c:89:45:22:
f8:ee:b9:ae:29:35:f3:51:54:a1:c9:44:04:b5:5c:2d:56:f8:
ff:5e:3c:c3:3c:56:54:a8:cc:fd:81:2f:e0:00:d6:fc:c5:c3:
57:f9:eb:12
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0VsdngPVBaUPDogwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk
YTBjZGRkODktNDNhMi00ZWZkLTliZGUtNWU1OWIzYTZhZWMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jKRFd6atRQm0IORYDz0OsUTvAWIbeg3YHiP
76PRZi0bDfq3/1VO4+nrs2gfvlLnlNxlYnlA6GV1Wn14oiILvdDTHQwKqL2rKya0
++cTC0zpmOL5lSDx2UOsaToA+TGVMaOm/yLKn2VIQ2zv5epRIEvA0PI2r1CR3jQn
X6QvGG/GKeqvFX10FpOwSbvmrwC0iCPaTXRFsMfQa+hTF0jus1leY5E7yJSkgBkh
RECtZPrlWZqJZJJ0MSeqiW94eqH6wkpMNGSmgB1HjPkAo+Pd3FTFSFC8+bEFBRAG
Eq2qNxtsEMCeAmGTwbNkGrmRwFhjj+CD0qVLRCNkFUQ+I/apRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO7fu5Ap8OFwFeRgiKZ3kQHoGnRFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvNDM2YjU1ZWUtOWI5OS0z
OTc0LWI3ZWYtYjU5MDRiODE2Nzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGRyoAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAvA//iAFLNuhTiVWQxUYo6k+G45kecduG1GtZJOf35inqROOtlniZ/u
8wvVhUls3rhxFTneNjmXya2cDAxDpU0SmhhPGDDmHNUzrHB3XnwA7ISzK73nq+5t
rSJGjWu53SUqTqOlXII0flsgKZeU6+AZO0nTukv8tQkv1aDpbZq9M+T6k9l0qKbG
tONImJ3jqR4UvQIHUOhySzEihB/U3JL4BhDYYIL1Ucaesa6edMruaH6BZkauUN3O
G2HncB0Sb0OJ3QkdCgvU8iNW08+Wq8Yj6IeLfIlFIvjuua4pNfNRVKHJRAS1XC1W
+P9ePMM8VlSozP2BL+AA1vzFw1f56xI=
-----END CERTIFICATE-----
Generated at Thu Apr 10 15:21:37 2025 by rpki-client