Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/7a045404-fbd7-385d-b1fe-81719971bd82.roa
File: 7a045404-fbd7-385d-b1fe-81719971bd82.roa (raw, json)
Hash identifier: ADJJ2HpB9PYVrQM6X5/IEj1ImaWfub4+EEih+gi4i2s=
Subject key identifier: 4D:07:E3:3B:8E:63:C0:45:E9:D3:B0:1F:DB:2F:F8:4A:8D:75:36:BF
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F43285848CF4639D8F9BEA4A3DC15C400
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/7a045404-fbd7-385d-b1fe-81719971bd82.roa
Signing time: Sat 08 Feb 2025 02:00:38 +0000
ROA not before: Sat 08 Feb 2025 02:00:38 +0000
ROA not after: Fri 09 May 2025 01:00:38 +0000
asID: 397630
IP address blocks: 172.96.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Apr 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cf:46:39:d8:f9:be:a4:a3:dc:15:c4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Feb 8 02:00:38 2025 GMT
Not After : May 9 01:00:38 2025 GMT
Subject: CN=2225a0f2-1bca-4785-81e5-fc1c828aa5f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:53:a3:75:2e:30:7b:3e:6e:57:6a:dd:4f:02:
28:97:10:eb:91:87:a9:39:09:6c:b1:49:fc:b1:f8:
e5:dd:e3:05:6d:f2:61:6d:40:8f:b8:3b:55:99:f0:
48:44:86:d8:51:e4:80:53:37:77:29:fb:22:4a:d3:
dd:50:a3:f2:5b:69:8d:b4:1c:f4:6e:0a:c3:34:c3:
15:8d:e9:59:b9:dc:61:48:90:83:76:96:97:67:a6:
1c:49:4a:70:45:4c:e9:ad:ad:f3:19:62:bb:ab:8a:
75:14:4b:d0:d9:fc:a2:ff:9a:e4:f8:f8:8f:1c:94:
ef:76:35:85:cc:e1:40:cf:f4:20:48:02:a0:33:d2:
20:ad:aa:bb:ce:59:6d:ca:19:e6:57:c5:2d:cf:cb:
0f:0d:c0:54:a4:0c:f6:02:02:7d:d2:05:0c:d3:1f:
01:13:15:46:09:cd:3c:a1:53:9e:26:f4:4f:a3:d9:
5a:10:41:2a:89:d5:53:2b:ef:a9:86:2d:89:c7:40:
0a:43:fa:34:31:43:8e:6b:1c:1b:c9:8a:4d:88:95:
90:1a:88:8b:f6:e5:f3:14:7a:cb:e4:75:27:70:d2:
90:c7:68:69:2c:47:c1:c8:5c:4c:1a:ed:68:a7:18:
5c:0a:6b:f4:1d:df:38:96:c4:c3:8e:c8:a5:c8:f7:
28:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:07:E3:3B:8E:63:C0:45:E9:D3:B0:1F:DB:2F:F8:4A:8D:75:36:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/7a045404-fbd7-385d-b1fe-81719971bd82.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
172.96.90.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:36:67:7a:d3:6b:93:09:bf:3a:50:40:6e:83:e8:57:e8:c1:
e8:2d:9a:69:fa:93:19:6e:63:c8:f9:7e:0d:dd:c6:e6:a2:34:
c7:14:e8:38:2b:c3:d5:b5:d4:2c:d6:4c:d7:8f:a6:9a:b6:3e:
8c:22:64:26:27:27:76:77:21:99:c9:3e:06:a5:fe:8d:0d:d8:
db:a7:be:47:62:6e:8a:c5:84:56:8b:15:be:a6:6d:67:cc:83:
4e:65:74:06:d6:25:f1:04:51:08:0b:86:73:a6:8b:f2:5f:d0:
25:5c:bb:cf:45:3b:c7:3f:7c:26:15:be:f7:ce:55:88:e4:a9:
c4:f4:6e:d5:87:ed:ee:29:c8:2e:7f:0c:f0:c1:a3:61:7b:7d:
d0:e7:23:da:56:77:99:45:8b:85:23:42:a8:4b:c3:01:03:3b:
89:15:66:12:6b:f4:71:bc:85:84:1f:c0:bb:ff:08:39:a7:33:
21:a5:92:44:5e:f1:a0:c9:23:58:f2:0a:7b:37:4e:45:42:13:
e0:39:ed:54:31:e1:33:4d:1b:62:78:c8:8c:d2:77:fe:f9:97:
3d:55:ec:9e:22:70:f6:23:84:42:ce:35:eb:86:1a:28:96:dd:
7b:02:08:3f:ee:e0:99:8f:d3:ae:71:73:5a:93:83:b7:e7:e4:
bb:8d:1e:d4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjPRjnY+b6ko9wVxAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI1MDIwODAyMDAzOFoXDTI1MDUwOTAxMDAzOFowLzEtMCsGA1UEAxMk
MjIyNWEwZjItMWJjYS00Nzg1LTgxZTUtZmMxYzgyOGFhNWY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVOjdS4wez5uV2rdTwIolxDrkYepOQlssUn8
sfjl3eMFbfJhbUCPuDtVmfBIRIbYUeSAUzd3KfsiStPdUKPyW2mNtBz0bgrDNMMV
jelZudxhSJCDdpaXZ6YcSUpwRUzpra3zGWK7q4p1FEvQ2fyi/5rk+PiPHJTvdjWF
zOFAz/QgSAKgM9Igraq7zlltyhnmV8Utz8sPDcBUpAz2AgJ90gUM0x8BExVGCc08
oVOeJvRPo9laEEEqidVTK++phi2Jx0AKQ/o0MUOOaxwbyYpNiJWQGoiL9uXzFHrL
5HUncNKQx2hpLEfByFxMGu1opxhcCmv0Hd84lsTDjsilyPcokwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE0H4zuOY8BF6dOwH9sv+EqNdTa/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvN2EwNDU0MDQtZmJkNy0z
ODVkLWIxZmUtODE3MTk5NzFiZDgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGBaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ82Z3rTa5MJvzpQQG6D6Ffowegtmmn6kxluY8j5fg3dxuaiNMcU6Dgr
w9W11CzWTNePppq2PowiZCYnJ3Z3IZnJPgal/o0N2NunvkdiborFhFaLFb6mbWfM
g05ldAbWJfEEUQgLhnOmi/Jf0CVcu89FO8c/fCYVvvfOVYjkqcT0btWH7e4pyC5/
DPDBo2F7fdDnI9pWd5lFi4UjQqhLwwEDO4kVZhJr9HG8hYQfwLv/CDmnMyGlkkRe
8aDJI1jyCns3TkVCE+A57VQx4TNNG2J4yIzSd/75lz1V7J4icPYjhELONeuGGiiW
3XsCCD/u4JmP065xc1qTg7fn5LuNHtQ=
-----END CERTIFICATE-----
Generated at Thu Apr 10 14:09:07 2025 by rpki-client