Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/87788a6e-89ab-30a1-bd47-5093d64aec94.roa
File: 87788a6e-89ab-30a1-bd47-5093d64aec94.roa (raw, json)
Hash identifier: O/FNNVP/BEGayC+gPngeTzxJRnpIZoQ7IR0EtnVXZSA=
Subject key identifier: D0:75:AB:86:A0:F8:11:41:D9:6A:27:B9:71:6C:B8:91:34:40:49:63
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F43285848BFEB94C9EBF29AE98299DC00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/87788a6e-89ab-30a1-bd47-5093d64aec94.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 3257
IP address blocks: 172.121.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:94:c9:eb:f2:9a:e9:82:99:dc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=14609acf-b171-4b8e-92c0-af583acd4059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:2d:b2:b6:fb:b2:94:eb:e6:a2:f0:cf:63:7d:
7b:82:8f:67:68:21:5f:5f:86:b6:89:93:86:89:ed:
75:3a:e6:5a:ea:74:29:2e:b6:c3:cb:38:67:a4:92:
ea:29:10:6b:91:90:8a:4e:59:b8:1e:26:da:7e:51:
f7:6e:e7:66:88:51:2b:34:d2:83:08:91:9c:56:b7:
45:1b:4b:95:cc:1d:c8:f8:5d:26:08:05:e3:8d:54:
d2:df:9f:d6:a4:80:1d:71:83:ba:27:d6:95:22:6a:
28:02:22:5b:0a:2c:20:dd:ce:ea:30:b9:16:3b:ad:
c1:c7:7d:18:9d:d5:a9:ed:29:eb:7c:1c:d2:36:ee:
7e:c0:84:3a:bb:83:ce:12:95:e0:7e:ed:5a:08:ee:
f8:4d:aa:51:82:96:48:1c:77:50:04:00:62:8e:37:
e0:ef:7f:01:5e:86:4a:31:b2:91:24:66:5e:80:28:
a4:02:38:64:0d:f3:4d:ce:29:bf:0f:6f:0d:05:47:
95:eb:71:46:67:f7:94:d8:0d:1a:7f:b3:8a:af:89:
8a:cc:c4:55:5e:29:02:3d:d2:34:b3:c7:62:aa:3c:
c5:e6:ac:6d:05:7f:f3:73:a7:a6:1a:93:8e:94:ee:
eb:a0:5f:51:d4:54:13:04:73:9a:4b:28:84:e8:a8:
64:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:75:AB:86:A0:F8:11:41:D9:6A:27:B9:71:6C:B8:91:34:40:49:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/87788a6e-89ab-30a1-bd47-5093d64aec94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
172.121.167.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:b7:59:53:38:19:19:79:ac:97:33:d2:7c:35:ba:d3:d5:fe:
0a:5a:8b:af:65:75:50:fd:bf:ae:2b:73:a3:b2:07:83:24:4d:
2a:54:4f:29:b5:a7:48:f2:b0:ce:03:6b:20:7f:9e:53:30:e7:
58:5b:e0:cd:62:88:85:32:d8:97:71:fd:8a:44:ea:07:31:86:
ba:31:cc:83:8c:c1:e1:8b:e4:c1:b8:13:32:58:23:52:01:d3:
50:8e:3f:60:8d:f6:8e:16:82:48:11:bd:d3:ca:e1:2b:cb:52:
bf:bf:35:1d:d9:cb:fc:c2:29:56:81:56:94:a3:f2:62:25:06:
8a:79:e1:48:88:18:6a:2b:b5:a7:87:87:ea:5a:78:6f:e4:77:
55:17:b1:c5:8f:1f:ec:9e:cf:2d:e6:d1:ff:41:a4:96:15:c8:
cf:3b:64:5e:77:88:d6:a8:2f:e3:2a:d6:0f:46:69:16:3c:09:
4a:da:f8:5f:12:6f:55:55:42:17:5c:21:ea:2c:3a:09:80:07:
1b:d4:bf:67:98:a2:78:50:61:27:a1:1e:f6:e4:c3:6f:a8:b5:
36:d5:f9:25:55:a2:a7:01:7e:f4:b9:39:1f:f4:58:ed:46:f6:
a6:f8:a9:46:be:cf:ca:85:71:55:69:f7:73:a8:10:3d:9a:cb:
44:f3:73:f5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/65TJ6/Ka6YKZ3AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk
MTQ2MDlhY2YtYjE3MS00YjhlLTkyYzAtYWY1ODNhY2Q0MDU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhS2ytvuylOvmovDPY317go9naCFfX4a2iZOG
ie11OuZa6nQpLrbDyzhnpJLqKRBrkZCKTlm4HibaflH3budmiFErNNKDCJGcVrdF
G0uVzB3I+F0mCAXjjVTS35/WpIAdcYO6J9aVImooAiJbCiwg3c7qMLkWO63Bx30Y
ndWp7SnrfBzSNu5+wIQ6u4POEpXgfu1aCO74TapRgpZIHHdQBABijjfg738BXoZK
MbKRJGZegCikAjhkDfNNzim/D28NBUeV63FGZ/eU2A0af7OKr4mKzMRVXikCPdI0
s8diqjzF5qxtBX/zc6emGpOOlO7roF9R1FQTBHOaSyiE6KhkjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNB1q4ag+BFB2WonuXFsuJE0QEljMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvODc3ODhhNmUtODlhYi0z
MGExLWJkNDctNTA5M2Q2NGFlYzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHmnMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADa3WVM4GRl5rJcz0nw1utPV/gpai69ldVD9v64rc6OyB4MkTSpUTym1
p0jysM4DayB/nlMw51hb4M1iiIUy2Jdx/YpE6gcxhroxzIOMweGL5MG4EzJYI1IB
01COP2CN9o4WgkgRvdPK4SvLUr+/NR3Zy/zCKVaBVpSj8mIlBop54UiIGGortaeH
h+paeG/kd1UXscWPH+yezy3m0f9BpJYVyM87ZF53iNaoL+Mq1g9GaRY8CUra+F8S
b1VVQhdcIeosOgmABxvUv2eYonhQYSehHvbkw2+otTbV+SVVoqcBfvS5OR/0WO1G
9qb4qUa+z8qFcVVp93OoED2ay0Tzc/U=
-----END CERTIFICATE-----
Generated at Thu Apr 10 06:59:59 2025 by rpki-client