Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5765161a-dcc7-3ff2-8359-3048a388a735.roa
File: 5765161a-dcc7-3ff2-8359-3048a388a735.roa (raw, json)
Hash identifier: oP01XaARLoq/8ikFNnJR7jtxfUzJU+JyluXEDSnaxZQ=
Subject key identifier: A3:AD:06:CA:E6:AD:E7:DC:61:44:DC:B7:7D:2F:5E:2C:D8:0C:5F:33
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F43285848EC4866B2DCA120FE9F971AE0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5765161a-dcc7-3ff2-8359-3048a388a735.roa
Signing time: Tue 18 Feb 2025 11:23:32 +0000
ROA not before: Tue 18 Feb 2025 11:23:32 +0000
ROA not after: Mon 19 May 2025 10:23:32 +0000
asID: 7018
IP address blocks: 104.253.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ec:48:66:b2:dc:a1:20:fe:9f:97:1a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Feb 18 11:23:32 2025 GMT
Not After : May 19 10:23:32 2025 GMT
Subject: CN=324c4552-bf9f-41b6-8eb5-db475ee437ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:16:df:95:95:7c:2a:a1:c4:e7:07:9b:b3:76:
5f:eb:f7:79:9c:87:a9:3d:ce:f6:0f:7d:7b:37:fb:
7e:11:58:59:d5:d8:57:0d:38:82:c4:d4:35:36:4a:
1b:a8:26:df:72:0f:06:53:52:2f:1e:f0:37:31:aa:
ec:c3:06:88:1d:9f:09:7e:c8:a9:a5:af:4c:38:b8:
ef:7d:82:72:9e:ad:36:5d:7b:fe:0f:b4:9a:d9:8a:
46:a2:3d:15:7d:95:a7:81:78:11:81:70:91:c9:d7:
b6:7d:e1:11:36:d7:70:6d:97:71:06:73:b7:34:58:
2f:2b:b9:fc:88:35:39:8a:7c:fd:6d:6f:33:03:67:
65:e0:54:66:55:34:25:e8:23:5a:8c:e8:34:12:1d:
31:e9:34:92:08:04:e7:65:c4:04:3b:78:fb:9b:0b:
f6:f1:7a:3e:bd:f8:d5:f4:0f:55:04:45:37:ac:f3:
0d:12:a8:8d:11:fe:0d:5f:29:05:16:da:93:87:3b:
97:43:46:84:3c:d6:39:4d:fe:5e:4f:ca:67:20:ba:
61:da:eb:c1:48:7e:49:cd:39:59:a9:9d:33:0d:2c:
bc:85:cf:6c:56:75:ab:30:06:02:e6:23:85:76:48:
d7:5a:dd:bc:cb:f9:17:fd:0e:1e:1e:b2:77:2f:f2:
cb:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:AD:06:CA:E6:AD:E7:DC:61:44:DC:B7:7D:2F:5E:2C:D8:0C:5F:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5765161a-dcc7-3ff2-8359-3048a388a735.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.253.206.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:3f:ee:2f:83:c6:ad:ab:44:e9:71:e5:92:a2:f4:dd:12:70:
8e:6d:d3:0d:14:13:8c:1f:3e:41:03:98:47:f8:5b:11:c8:20:
fb:cf:c3:d7:65:68:97:17:1b:42:49:19:9d:1d:17:fb:62:98:
d5:66:21:fd:41:d2:41:d9:f7:ed:af:b6:20:37:7c:1b:db:08:
2e:2c:ac:98:6c:b0:9e:ff:f8:d8:e6:b9:a1:09:c2:3c:d9:79:
cf:ed:07:cf:2a:2b:69:f7:90:bf:3a:a4:6c:4c:ed:d6:65:c1:
61:59:64:47:ac:00:1a:85:ed:e4:34:3a:0f:3b:9b:a7:ad:2e:
bc:fb:7f:3f:ae:f9:35:43:0d:ca:74:a0:93:90:a4:f7:6d:b7:
c7:3d:31:17:35:96:87:fe:aa:c3:cb:9d:14:1b:a1:c1:d1:a6:
78:2b:fc:1c:fc:9f:f4:83:0f:b4:87:bc:20:62:85:87:d8:1c:
65:c2:58:9d:66:a2:d6:bd:55:e4:8d:14:01:2f:75:50:fc:a5:
be:5a:7a:52:1a:58:01:1a:e4:27:30:f9:d2:5e:9f:86:41:e6:
65:df:16:bb:90:d0:f2:41:b6:fe:df:63:58:98:d1:4f:e4:29:
3d:62:6a:bd:af:99:e2:02:63:67:fe:86:96:8b:6d:bb:85:30:
83:a7:84:a4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjsSGay3KEg/p+XGuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDIxODExMjMzMloXDTI1MDUxOTEwMjMzMlowLzEtMCsGA1UEAxMk
MzI0YzQ1NTItYmY5Zi00MWI2LThlYjUtZGI0NzVlZTQzN2VjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxbflZV8KqHE5webs3Zf6/d5nIepPc72D317
N/t+EVhZ1dhXDTiCxNQ1NkobqCbfcg8GU1IvHvA3MarswwaIHZ8Jfsippa9MOLjv
fYJynq02XXv+D7Sa2YpGoj0VfZWngXgRgXCRyde2feERNtdwbZdxBnO3NFgvK7n8
iDU5inz9bW8zA2dl4FRmVTQl6CNajOg0Eh0x6TSSCATnZcQEO3j7mwv28Xo+vfjV
9A9VBEU3rPMNEqiNEf4NXykFFtqThzuXQ0aEPNY5Tf5eT8pnILph2uvBSH5JzTlZ
qZ0zDSy8hc9sVnWrMAYC5iOFdkjXWt28y/kX/Q4eHrJ3L/LLVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKOtBsrmrefcYUTct30vXizYDF8zMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNTc2NTE2MWEtZGNjNy0z
ZmYyLTgzNTktMzA0OGEzODhhNzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP3OMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHk/7i+Dxq2rROlx5ZKi9N0ScI5t0w0UE4wfPkEDmEf4WxHIIPvPw9dl
aJcXG0JJGZ0dF/timNVmIf1B0kHZ9+2vtiA3fBvbCC4srJhssJ7/+NjmuaEJwjzZ
ec/tB88qK2n3kL86pGxM7dZlwWFZZEesABqF7eQ0Og87m6etLrz7fz+u+TVDDcp0
oJOQpPdtt8c9MRc1lof+qsPLnRQbocHRpngr/Bz8n/SDD7SHvCBihYfYHGXCWJ1m
ota9VeSNFAEvdVD8pb5aelIaWAEa5Ccw+dJen4ZB5mXfFruQ0PJBtv7fY1iY0U/k
KT1iar2vmeICY2f+hpaLbbuFMIOnhKQ=
-----END CERTIFICATE-----
Generated at Thu Apr 10 12:46:56 2025 by rpki-client