Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8f2e0336-5c99-3c6c-a995-8c9b57678f2b.roa
File: 8f2e0336-5c99-3c6c-a995-8c9b57678f2b.roa (raw, json)
Hash identifier: ILyJdKD9GgEZmvRYwFfqrS4/ol1E9zC1bI7nWi63chQ=
Subject key identifier: B3:F7:C7:79:A0:47:32:78:32:46:31:3B:54:DF:CD:82:8A:9C:36:A4
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F43285848D7A64FF6D63A6C054742E440
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8f2e0336-5c99-3c6c-a995-8c9b57678f2b.roa
Signing time: Tue 11 Feb 2025 02:00:39 +0000
ROA not before: Tue 11 Feb 2025 02:00:39 +0000
ROA not after: Mon 12 May 2025 01:00:39 +0000
asID: 397630
IP address blocks: 130.254.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Apr 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d7:a6:4f:f6:d6:3a:6c:05:47:42:e4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Feb 11 02:00:39 2025 GMT
Not After : May 12 01:00:39 2025 GMT
Subject: CN=475a365f-6013-4c83-bcc3-bc86c02b7d15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4e:9a:c2:0d:99:d1:f2:fd:a2:66:56:30:72:
71:8a:48:55:7d:09:59:ef:5f:0d:d1:f3:9a:ed:22:
8e:ed:67:9e:65:1c:0b:d1:04:19:9c:09:c4:03:c7:
ab:86:43:c4:c4:a4:df:1d:ff:5d:7b:e7:cf:f7:31:
95:c1:4c:c1:d2:4c:cf:a3:f6:83:95:2c:6f:d3:7c:
fa:fb:30:f6:0f:9f:f3:33:c8:af:9e:1e:1c:c5:5f:
43:a1:df:d7:9d:a8:19:65:f2:50:58:9f:33:28:57:
2b:37:61:29:0f:f3:9b:99:a3:70:27:57:33:b3:44:
fb:fa:73:fb:0e:68:e8:1a:f3:4d:e5:ee:dd:19:e0:
22:4f:01:2d:4b:67:79:02:e8:c5:ba:83:4d:64:d9:
30:56:57:8f:11:b2:bd:6f:a9:f9:8e:d6:dd:aa:7f:
00:d0:b1:d3:94:07:e8:73:9b:62:4c:44:c5:8a:fb:
92:dd:e7:0f:fd:6b:4f:75:79:13:75:02:06:20:95:
af:a5:77:db:7a:e8:3b:40:d8:2b:b1:a3:5d:60:0e:
3f:24:e1:da:ff:21:25:59:01:0c:33:4a:09:d7:42:
95:2f:4a:39:30:6f:bc:88:c2:25:fd:57:52:2d:20:
ae:de:d6:61:28:cf:49:4c:0e:f1:e0:f9:cc:7f:73:
fe:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F7:C7:79:A0:47:32:78:32:46:31:3B:54:DF:CD:82:8A:9C:36:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8f2e0336-5c99-3c6c-a995-8c9b57678f2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
130.254.106.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:73:32:89:4b:69:bb:8c:f0:95:a9:a2:bd:90:ad:c4:96:ca:
02:b8:85:48:5d:13:fa:4e:86:c6:4f:81:f5:78:b9:1c:a9:56:
b4:08:a9:76:3a:da:72:f8:11:fe:18:fe:72:05:6d:91:a5:7a:
ef:c3:3b:95:39:f1:20:ea:19:ea:96:19:f8:2e:ea:85:9f:67:
86:38:0a:f7:1b:b7:90:12:c0:29:75:5f:05:5a:04:f0:1b:73:
ac:fc:d0:5f:ea:04:a3:52:1d:9a:24:33:51:d1:51:37:5c:07:
54:34:71:a0:2d:24:a3:f7:c5:4b:e4:35:ae:fb:10:23:11:85:
38:a4:5d:2a:36:2b:9e:7d:9e:58:72:62:d2:43:eb:e1:5c:5d:
21:01:2d:29:97:7b:e5:bf:ee:f0:ed:c3:b5:8b:c7:78:fd:ed:
72:ad:b4:80:2c:64:5e:74:38:c5:be:b0:1e:1d:13:4f:e0:03:
83:60:91:52:d8:f0:2b:19:30:76:f4:12:37:89:dd:cf:a9:0c:
33:68:e3:89:70:1e:ef:1d:7b:2b:c5:d2:55:f9:a6:d6:4e:2c:
3a:24:50:74:02:d7:31:58:c3:a6:d7:3f:c2:6c:89:50:01:14:
8d:cb:f9:4d:bf:e3:f0:0d:f0:6a:5a:8c:a6:1d:db:5e:87:47:
98:7c:ac:1b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjXpk/21jpsBUdC5EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI1MDIxMTAyMDAzOVoXDTI1MDUxMjAxMDAzOVowLzEtMCsGA1UEAxMk
NDc1YTM2NWYtNjAxMy00YzgzLWJjYzMtYmM4NmMwMmI3ZDE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjk6awg2Z0fL9omZWMHJxikhVfQlZ718N0fOa
7SKO7WeeZRwL0QQZnAnEA8erhkPExKTfHf9de+fP9zGVwUzB0kzPo/aDlSxv03z6
+zD2D5/zM8ivnh4cxV9Dod/XnagZZfJQWJ8zKFcrN2EpD/ObmaNwJ1czs0T7+nP7
DmjoGvNN5e7dGeAiTwEtS2d5AujFuoNNZNkwVlePEbK9b6n5jtbdqn8A0LHTlAfo
c5tiTETFivuS3ecP/WtPdXkTdQIGIJWvpXfbeug7QNgrsaNdYA4/JOHa/yElWQEM
M0oJ10KVL0o5MG+8iMIl/VdSLSCu3tZhKM9JTA7x4PnMf3P+XwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLP3x3mgRzJ4MkYxO1TfzYKKnDakMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvOGYyZTAzMzYtNWM5OS0z
YzZjLWE5OTUtOGM5YjU3Njc4ZjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgv5qMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFxzMolLabuM8JWpor2QrcSWygK4hUhdE/pOhsZPgfV4uRypVrQIqXY6
2nL4Ef4Y/nIFbZGleu/DO5U58SDqGeqWGfgu6oWfZ4Y4Cvcbt5ASwCl1XwVaBPAb
c6z80F/qBKNSHZokM1HRUTdcB1Q0caAtJKP3xUvkNa77ECMRhTikXSo2K559nlhy
YtJD6+FcXSEBLSmXe+W/7vDtw7WLx3j97XKttIAsZF50OMW+sB4dE0/gA4NgkVLY
8CsZMHb0EjeJ3c+pDDNo44lwHu8deyvF0lX5ptZOLDokUHQC1zFYw6bXP8JsiVAB
FI3L+U2/4/AN8GpajKYd216HR5h8rBs=
-----END CERTIFICATE-----
Generated at Thu Apr 10 11:36:51 2025 by rpki-client