Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b1d68d0c-7c7f-3f84-aad3-385f26fcafc3.roa
File: b1d68d0c-7c7f-3f84-aad3-385f26fcafc3.roa (raw, json)
Hash identifier: zLwDVxtLj06BDPPnqjyrSjkBhX6ECi04DcxSj8tFB2Y=
Subject key identifier: 06:0E:43:95:E5:5E:02:A6:F2:AE:E7:99:E3:79:A3:15:2E:8D:91:54
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D14264100737096DF7BB00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b1d68d0c-7c7f-3f84-aad3-385f26fcafc3.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 11427
IP address blocks: 72.135.96.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:42:64:10:07:37:09:6d:f7:bb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=57645965-79e2-4bbf-8966-18f53f71c140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e6:d1:45:30:40:75:cd:3b:6f:0e:36:af:50:
83:c0:5e:e4:17:fc:85:c4:58:ee:46:1a:95:a1:1b:
1b:62:00:26:ce:72:97:7d:87:a3:29:2f:79:3a:96:
78:00:15:51:08:05:f5:cb:df:ef:68:ad:97:23:e7:
eb:e7:c2:31:b8:51:7e:8e:24:58:32:84:37:13:b0:
2c:b6:de:37:14:d3:8a:5d:7f:38:a7:5f:35:ba:c5:
62:70:49:65:92:a2:a0:25:14:a5:ef:ea:d0:9a:6a:
6b:9c:d1:91:b2:66:e1:9d:b1:06:f1:fa:93:0c:92:
48:a9:43:f8:1c:fe:2d:46:5b:3c:95:0f:f8:f8:55:
79:17:21:c4:1f:92:fa:1e:90:44:bb:e8:ed:76:25:
aa:9e:dd:fd:95:5b:85:af:00:f9:35:54:ad:88:9f:
bd:40:bd:5c:5f:df:04:33:39:2c:9c:36:11:fc:63:
f6:5d:61:5f:ee:27:a7:65:78:02:1a:0d:0a:1b:a7:
f9:6b:9a:43:62:db:d9:35:9a:64:5d:3b:71:34:c9:
8d:bb:cf:e6:24:95:8a:92:ad:a0:48:bd:4d:88:38:
1e:fe:a6:06:53:98:7c:2c:cc:b2:00:18:e6:2e:e2:
5e:1d:47:a9:ee:8b:74:91:50:55:39:c5:0e:4d:04:
74:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:0E:43:95:E5:5E:02:A6:F2:AE:E7:99:E3:79:A3:15:2E:8D:91:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b1d68d0c-7c7f-3f84-aad3-385f26fcafc3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
72.135.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:8f:45:79:99:25:14:9c:40:9c:01:7f:ba:5e:0f:d2:5b:8a:
a2:ee:2a:9e:9c:9c:ed:5d:b0:61:7a:49:ef:79:b9:0a:bc:3f:
84:33:9c:2b:01:9e:c8:c0:66:69:d9:ed:8f:aa:ea:a8:cc:12:
58:20:4d:7e:62:c0:78:97:49:38:ee:4b:74:51:e7:91:6c:5b:
39:54:1a:17:a7:7c:41:27:2c:9e:50:a1:cd:18:cf:2e:55:1a:
55:d2:4f:b7:19:5f:d3:82:cc:92:8a:f9:ab:e6:2a:d0:72:cd:
f2:6a:cd:33:65:21:e3:12:f4:af:71:91:ac:68:9f:7c:b3:e1:
78:b0:1f:35:cd:eb:c6:69:1d:a0:b2:fa:17:fa:3f:f6:d8:16:
d6:1f:f5:9a:b6:65:12:f9:9e:db:f1:72:48:6c:37:e0:27:21:
94:88:d3:d0:be:89:93:2d:18:b5:cd:66:5b:66:97:cf:14:87:
fe:a3:a5:be:9b:42:8f:0c:03:bf:0e:1e:e1:1f:94:3b:1e:a8:
d1:9e:ab:1f:60:d8:2d:ed:f5:61:4a:6e:63:a5:73:91:4f:1b:
84:b5:7b:6d:60:5b:fd:f7:82:08:03:9d:07:3c:27:3f:88:fc:
09:c1:20:07:31:1c:ad:63:3a:75:89:3b:65:2e:e5:c4:65:5b:
5c:33:73:70
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0UJkEAc3CW33uwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk
NTc2NDU5NjUtNzllMi00YmJmLTg5NjYtMThmNTNmNzFjMTQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhubRRTBAdc07bw42r1CDwF7kF/yFxFjuRhqV
oRsbYgAmznKXfYejKS95OpZ4ABVRCAX1y9/vaK2XI+fr58IxuFF+jiRYMoQ3E7As
tt43FNOKXX84p181usVicEllkqKgJRSl7+rQmmprnNGRsmbhnbEG8fqTDJJIqUP4
HP4tRls8lQ/4+FV5FyHEH5L6HpBEu+jtdiWqnt39lVuFrwD5NVStiJ+9QL1cX98E
MzksnDYR/GP2XWFf7ienZXgCGg0KG6f5a5pDYtvZNZpkXTtxNMmNu8/mJJWKkq2g
SL1NiDge/qYGU5h8LMyyABjmLuJeHUep7ot0kVBVOcUOTQR0GQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAYOQ5XlXgKm8q7nmeN5oxUujZFUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvYjFkNjhkMGMtN2M3Zi0z
Zjg0LWFhZDMtMzg1ZjI2ZmNhZmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESIdgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFaPRXmZJRScQJwBf7peD9JbiqLuKp6cnO1dsGF6Se95uQq8P4QznCsB
nsjAZmnZ7Y+q6qjMElggTX5iwHiXSTjuS3RR55FsWzlUGhenfEEnLJ5Qoc0Yzy5V
GlXST7cZX9OCzJKK+avmKtByzfJqzTNlIeMS9K9xkaxon3yz4XiwHzXN68ZpHaCy
+hf6P/bYFtYf9Zq2ZRL5ntvxckhsN+AnIZSI09C+iZMtGLXNZltml88Uh/6jpb6b
Qo8MA78OHuEflDseqNGeqx9g2C3t9WFKbmOlc5FPG4S1e21gW/33gggDnQc8Jz+I
/AnBIAcxHK1jOnWJO2Uu5cRlW1wzc3A=
-----END CERTIFICATE-----
Generated at Wed Apr 9 10:23:23 2025 by rpki-client