Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8b49ade0-7e7a-3fe9-a8f6-6ee7f304e743.roa
File: 8b49ade0-7e7a-3fe9-a8f6-6ee7f304e743.roa (raw, json)
Hash identifier: 34S8Hp0hXZPVFbC2IVpr1nr+gqwSvbtT5wuYkcPKuCU=
Subject key identifier: 18:20:5B:AB:1E:39:09:F6:6C:7F:86:C8:F0:F1:AB:A3:D6:C8:8D:33
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285848BE862B667ACE6A11851CEA80
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8b49ade0-7e7a-3fe9-a8f6-6ee7f304e743.roa
Signing time: Sun 02 Feb 2025 02:00:39 +0000
ROA not before: Sun 02 Feb 2025 02:00:39 +0000
ROA not after: Sat 03 May 2025 01:00:39 +0000
asID: 852
IP address blocks: 2001:56b:800b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:be:86:2b:66:7a:ce:6a:11:85:1c:ea:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Feb 2 02:00:39 2025 GMT
Not After : May 3 01:00:39 2025 GMT
Subject: CN=226a5a6c-071a-48e1-af80-12f480909de7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a3:71:bc:fd:50:f0:ff:2f:fa:35:5f:62:e8:
cf:4c:72:f8:75:70:9b:a0:f3:42:91:de:8d:ea:5a:
48:65:e8:6d:52:47:9d:14:6f:e7:a1:65:ae:56:1d:
dc:33:5b:53:53:74:33:5d:5f:a3:57:b0:f0:e1:90:
35:51:75:8a:66:fd:41:3d:bb:79:71:bd:e2:cc:13:
0a:35:4e:e5:32:e0:07:b8:9d:5d:92:09:d6:33:c7:
64:90:1a:7b:52:8d:06:2d:0b:1e:45:b2:8b:43:0a:
df:8c:0f:de:6c:09:cb:ed:28:60:71:7c:74:4f:b9:
3c:a6:70:97:7b:fd:17:1c:0e:08:3c:e0:f3:83:f2:
a9:f8:65:85:64:37:68:df:58:c5:ab:7f:43:bf:05:
ef:85:3a:5d:86:2c:c7:1e:d6:e5:0d:a7:17:67:e7:
af:4e:d0:fc:56:b6:70:a1:d2:61:03:55:42:63:2b:
5b:ac:76:0d:87:14:09:99:9e:ad:34:ff:0e:47:cb:
c3:ed:23:c0:9a:95:b4:bc:01:b4:22:51:48:27:b5:
7d:94:9f:11:52:05:8c:d0:c4:99:a4:13:0d:79:21:
55:63:dc:59:9b:cb:da:e1:66:29:d5:a3:eb:f2:21:
61:ce:c0:2a:d8:36:a8:fa:6b:82:f4:fd:d7:f0:8c:
13:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:20:5B:AB:1E:39:09:F6:6C:7F:86:C8:F0:F1:AB:A3:D6:C8:8D:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8b49ade0-7e7a-3fe9-a8f6-6ee7f304e743.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:56b:800b::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d3:aa:29:73:e6:73:2e:46:49:46:fd:be:7d:f9:90:6a:ba:e7:
1e:93:e7:25:da:69:66:03:26:eb:e1:2c:c9:24:c4:15:3e:ce:
b8:3b:de:1c:5e:03:1d:40:82:32:ed:86:3c:06:63:00:88:9d:
5f:df:d7:39:08:bb:d6:d0:d3:09:b7:fe:ac:30:ba:93:a4:df:
3d:92:a9:ec:3c:57:75:0f:33:93:e0:b6:c3:16:81:e5:c2:8e:
6d:7a:67:0a:6f:47:d7:3a:5b:ca:69:7b:62:e9:5e:d8:78:ef:
3e:5f:7a:44:23:c0:e6:84:5e:f5:6d:03:41:8e:b1:77:02:15:
11:55:e0:c8:c8:cd:0c:05:8f:92:69:08:3c:04:11:83:1a:57:
98:f3:45:bd:ff:fc:f1:94:ba:45:8e:ab:7d:28:a0:34:a9:72:
f3:52:4e:47:e9:d7:8d:f1:82:19:0a:54:99:4a:f1:14:61:1e:
13:95:95:22:ef:04:10:fe:79:25:36:3a:18:5f:22:74:76:5b:
b2:3e:5d:14:8f:04:da:55:b8:46:4d:a4:ae:08:ea:05:e2:2c:
46:f8:cd:fc:35:07:ed:c4:46:78:63:a2:f5:2c:65:a0:0e:67:
5c:ca:c2:c3:e4:c8:64:42:de:ad:8f:ad:e7:b7:68:e8:90:0b:
a7:70:26:8a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEi+hitmes5qEYUc6oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI1MDIwMjAyMDAzOVoXDTI1MDUwMzAxMDAzOVowLzEtMCsGA1UEAxMk
MjI2YTVhNmMtMDcxYS00OGUxLWFmODAtMTJmNDgwOTA5ZGU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKNxvP1Q8P8v+jVfYujPTHL4dXCboPNCkd6N
6lpIZehtUkedFG/noWWuVh3cM1tTU3QzXV+jV7Dw4ZA1UXWKZv1BPbt5cb3izBMK
NU7lMuAHuJ1dkgnWM8dkkBp7Uo0GLQseRbKLQwrfjA/ebAnL7ShgcXx0T7k8pnCX
e/0XHA4IPODzg/Kp+GWFZDdo31jFq39DvwXvhTpdhizHHtblDacXZ+evTtD8VrZw
odJhA1VCYytbrHYNhxQJmZ6tNP8OR8vD7SPAmpW0vAG0IlFIJ7V9lJ8RUgWM0MSZ
pBMNeSFVY9xZm8va4WYp1aPr8iFhzsAq2Dao+muC9P3X8IwTzwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBggW6seOQn2bH+GyPDxq6PWyI0zMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvOGI0OWFkZTAtN2U3YS0z
ZmU5LWE4ZjYtNmVlN2YzMDRlNzQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFa4AL
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBANOqKXPmcy5GSUb9vn35kGq65x6T5yXaaWYDJuvhLMkkxBU+zrg7
3hxeAx1AgjLthjwGYwCInV/f1zkIu9bQ0wm3/qwwupOk3z2Sqew8V3UPM5PgtsMW
geXCjm16ZwpvR9c6W8ppe2LpXth47z5fekQjwOaEXvVtA0GOsXcCFRFV4MjIzQwF
j5JpCDwEEYMaV5jzRb3//PGUukWOq30ooDSpcvNSTkfp143xghkKVJlK8RRhHhOV
lSLvBBD+eSU2OhhfInR2W7I+XRSPBNpVuEZNpK4I6gXiLEb4zfw1B+3ERnhjovUs
ZaAOZ1zKwsPkyGRC3q2Pree3aOiQC6dwJoo=
-----END CERTIFICATE-----
Generated at Wed Apr 9 14:13:23 2025 by rpki-client