Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/b8e04097-9cf9-319f-b848-5e2a18e47e51.roa
File: b8e04097-9cf9-319f-b848-5e2a18e47e51.roa (raw, json)
Hash identifier: BnzMk9gCPKWiSq7ATF26ZG18CfrSJVNsFvmzNb4rD1c=
Subject key identifier: 0B:98:03:7E:33:9C:94:19:74:8F:AB:0B:24:6B:78:FF:DA:BD:2E:A5
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F43285848D7A65515A7D8B0A81A00C380
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/b8e04097-9cf9-319f-b848-5e2a18e47e51.roa
Signing time: Tue 11 Feb 2025 02:00:39 +0000
ROA not before: Tue 11 Feb 2025 02:00:39 +0000
ROA not after: Mon 12 May 2025 01:00:39 +0000
asID: 7018
IP address blocks: 158.62.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Apr 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d7:a6:55:15:a7:d8:b0:a8:1a:00:c3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Feb 11 02:00:39 2025 GMT
Not After : May 12 01:00:39 2025 GMT
Subject: CN=15424556-c1c4-4a07-aa77-f4399858489d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:cc:a7:36:42:60:8b:90:35:24:73:23:7c:14:
2c:a7:03:dc:53:c9:0e:44:1e:bd:1f:2d:62:8a:12:
38:65:ee:c9:11:94:e1:20:08:92:97:a2:db:f2:ea:
f9:20:4f:1d:a9:62:3e:6f:1e:0a:20:cb:eb:f3:46:
78:bb:22:71:1f:87:f5:d1:9b:7d:5a:b2:98:6e:4a:
a4:49:56:d4:fa:b0:8e:09:af:c3:a3:56:97:92:d8:
d1:af:04:cd:4d:26:01:fb:89:ee:03:33:3e:d2:f7:
77:f6:c3:07:5d:3c:c8:33:b7:7f:79:ee:de:80:27:
5e:59:d3:3b:90:bb:d8:3c:cb:21:41:04:51:3e:69:
87:3c:5f:0b:b1:2d:ac:63:a9:d1:d1:22:61:79:4b:
2e:50:18:50:0c:1e:73:a6:af:94:a7:a6:02:0d:ca:
3b:2a:4b:41:81:13:07:69:c3:aa:9e:65:df:3e:44:
ff:27:bb:18:1f:36:11:a6:c3:a9:e2:c9:f7:dd:0d:
b5:f3:39:2e:1e:01:34:77:65:5c:fc:0f:43:52:e6:
45:d8:29:c9:2b:70:f9:c3:00:0a:53:d2:42:d9:d2:
f5:85:54:0c:55:9f:b7:b5:e7:9a:5f:d6:e2:93:c9:
08:1b:2c:c4:2a:5a:2d:83:f8:6a:29:c3:96:88:8a:
ff:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:98:03:7E:33:9C:94:19:74:8F:AB:0B:24:6B:78:FF:DA:BD:2E:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/b8e04097-9cf9-319f-b848-5e2a18e47e51.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
158.62.211.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
e0:1d:c6:b5:df:75:1f:72:f7:ca:28:a3:4f:66:ab:f4:76:31:
94:61:65:95:d5:4c:a1:c4:d0:4c:0a:f9:25:2d:87:9e:21:0f:
32:40:9f:c6:0e:8e:52:dd:4f:98:24:15:4a:4a:c2:b1:9c:36:
f0:b8:3a:6f:53:07:0d:27:85:bc:07:fa:b8:35:d9:ee:5f:65:
0c:6a:65:00:69:be:65:8c:50:b1:9e:d3:c4:cb:50:57:1c:62:
c7:18:55:78:c4:17:b6:30:f3:de:23:2a:76:80:b6:bd:89:ea:
78:19:9c:34:66:2a:7d:74:82:a6:5f:f0:46:35:1b:3d:bc:5a:
88:c8:ac:26:37:02:3a:0c:63:3a:75:76:60:2c:82:cc:4a:2d:
c1:29:e9:04:c3:72:c9:4b:72:ab:c8:e0:31:9a:54:29:50:11:
99:75:11:b0:88:8e:94:78:73:98:7e:8e:1f:e7:3a:15:57:65:
b1:b4:af:27:76:e5:86:bf:7a:e4:47:8f:a5:c9:00:36:4c:31:
52:41:e1:86:d6:4a:99:32:cf:8a:19:ed:42:25:ba:ca:0a:0e:
b6:0f:01:f3:45:b4:f9:8f:22:d8:72:58:be:bb:c0:02:7d:7f:
1a:79:28:68:7a:eb:ca:49:42:47:2b:38:ed:c0:94:b0:81:6e:
a9:07:88:c1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjXplUVp9iwqBoAw4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI1MDIxMTAyMDAzOVoXDTI1MDUxMjAxMDAzOVowLzEtMCsGA1UEAxMk
MTU0MjQ1NTYtYzFjNC00YTA3LWFhNzctZjQzOTk4NTg0ODlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsynNkJgi5A1JHMjfBQspwPcU8kORB69Hy1i
ihI4Ze7JEZThIAiSl6Lb8ur5IE8dqWI+bx4KIMvr80Z4uyJxH4f10Zt9WrKYbkqk
SVbU+rCOCa/Do1aXktjRrwTNTSYB+4nuAzM+0vd39sMHXTzIM7d/ee7egCdeWdM7
kLvYPMshQQRRPmmHPF8LsS2sY6nR0SJheUsuUBhQDB5zpq+Up6YCDco7KktBgRMH
acOqnmXfPkT/J7sYHzYRpsOp4sn33Q218zkuHgE0d2Vc/A9DUuZF2CnJK3D5wwAK
U9JC2dL1hVQMVZ+3teeaX9bik8kIGyzEKlotg/hqKcOWiIr/vQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAuYA34znJQZdI+rCyRreP/avS6lMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvYjhlMDQwOTctOWNmOS0z
MTlmLWI4NDgtNWUyYTE4ZTQ3ZTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnj7TMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAOAdxrXfdR9y98ooo09mq/R2MZRhZZXVTKHE0EwK+SUth54hDzJAn8YO
jlLdT5gkFUpKwrGcNvC4Om9TBw0nhbwH+rg12e5fZQxqZQBpvmWMULGe08TLUFcc
YscYVXjEF7Yw894jKnaAtr2J6ngZnDRmKn10gqZf8EY1Gz28WojIrCY3AjoMYzp1
dmAsgsxKLcEp6QTDcslLcqvI4DGaVClQEZl1EbCIjpR4c5h+jh/nOhVXZbG0ryd2
5Ya/euRHj6XJADZMMVJB4YbWSpkyz4oZ7UIlusoKDrYPAfNFtPmPIthyWL67wAJ9
fxp5KGh668pJQkcrOO3AlLCBbqkHiME=
-----END CERTIFICATE-----
Generated at Thu Apr 10 11:36:30 2025 by rpki-client