Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b1072af-9cbd-4f62-8155-d5c95177bece/be82587f-cf04-363b-b564-e821619c20b4.roa
File: be82587f-cf04-363b-b564-e821619c20b4.roa (raw, json)
Hash identifier: vbyTl3ylr9a7LZ0WCTlMHren5/UhhDA/auqRJJPJQBU=
Subject key identifier: 41:C2:A4:66:74:AA:BB:0C:03:D7:37:C8:26:20:2A:24:FF:94:57:32
Certificate issuer: /CN=5b1072af-9cbd-4f62-8155-d5c95177bece
Certificate serial: 010D0C9F43285849059BB78C631F0ABE67337D00
Authority key identifier: 91:50:88:CD:04:0D:5F:38:E5:11:C0:82:96:C8:4D:22:6F:B3:42:FA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b1072af-9cbd-4f62-8155-d5c95177bece.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b1072af-9cbd-4f62-8155-d5c95177bece/be82587f-cf04-363b-b564-e821619c20b4.roa
Signing time: Thu 27 Feb 2025 13:06:37 +0000
ROA not before: Thu 27 Feb 2025 13:06:37 +0000
ROA not after: Wed 28 May 2025 12:06:37 +0000
asID: 63023
IP address blocks: 2605:e240:fe00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b1072af-9cbd-4f62-8155-d5c95177bece/5b1072af-9cbd-4f62-8155-d5c95177bece.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b1072af-9cbd-4f62-8155-d5c95177bece/5b1072af-9cbd-4f62-8155-d5c95177bece.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b1072af-9cbd-4f62-8155-d5c95177bece.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 17 Mar 2025 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:05:9b:b7:8c:63:1f:0a:be:67:33:7d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1072af-9cbd-4f62-8155-d5c95177bece
Validity
Not Before: Feb 27 13:06:37 2025 GMT
Not After : May 28 12:06:37 2025 GMT
Subject: CN=c6c98677-595d-4c7d-97ab-01ee1a6e7684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:8b:80:64:31:c3:fd:05:fc:a8:66:1f:16:c6:
d3:13:4a:95:e6:d8:cf:eb:22:7c:d6:de:19:80:a3:
a6:a0:68:93:78:1f:f2:f1:58:3e:5c:3b:fa:e1:63:
e2:e1:5b:25:22:8d:c9:7b:39:82:22:13:c3:32:4e:
f4:90:dd:34:9f:57:35:95:a4:b3:f8:e2:36:dd:6f:
33:45:ee:8e:a9:c8:f9:f1:7b:2f:36:2b:d6:f3:b9:
20:95:e6:2e:c8:3f:b0:14:a8:93:09:eb:6a:a1:14:
9f:0e:1e:e1:96:51:7e:b4:8b:9b:83:2a:93:15:9f:
0a:76:69:18:6d:a4:a8:f1:e0:73:a5:e5:ee:56:6a:
0e:cf:e1:21:5e:bf:1f:5f:fd:35:27:8f:33:f3:d3:
97:b6:c5:38:f7:76:99:53:df:78:f9:29:78:0c:ef:
50:7f:2a:2b:02:4f:2f:61:6b:01:fe:f5:8d:31:23:
02:33:c4:8a:37:b2:6e:f8:a7:99:3a:31:a6:b4:50:
8d:48:34:30:28:dc:95:48:6c:f7:ad:21:71:4d:e0:
d3:3c:d6:f3:0a:c3:71:85:f0:2a:57:cc:2f:2c:a9:
ec:fd:96:84:56:77:6d:f5:a3:75:9d:61:72:cf:05:
e0:0e:fd:a7:d7:96:e3:62:de:be:34:6a:65:14:0d:
36:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C2:A4:66:74:AA:BB:0C:03:D7:37:C8:26:20:2A:24:FF:94:57:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b1072af-9cbd-4f62-8155-d5c95177bece/be82587f-cf04-363b-b564-e821619c20b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b1072af-9cbd-4f62-8155-d5c95177bece/5b1072af-9cbd-4f62-8155-d5c95177bece.crl
X509v3 Authority Key Identifier:
keyid:91:50:88:CD:04:0D:5F:38:E5:11:C0:82:96:C8:4D:22:6F:B3:42:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b1072af-9cbd-4f62-8155-d5c95177bece.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:e240:fe00::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:ff:7f:17:cf:11:cc:a3:cb:37:cc:1f:0a:eb:84:5a:6c:2f:
4b:56:5a:5c:a2:44:df:a2:ff:e3:1b:44:fb:16:da:13:36:bb:
7e:6e:3a:2d:20:a0:5c:dd:a0:a3:55:a5:1e:42:f2:17:f9:b3:
33:46:3c:f7:d6:0c:31:ea:fd:21:82:1f:e1:60:9b:c2:d8:7b:
47:78:2d:f7:96:20:06:51:96:4b:f5:90:db:97:87:78:04:fa:
13:8b:ea:7f:41:80:23:29:0d:79:8f:d8:21:e2:14:71:8f:b2:
b1:74:57:6f:ab:0e:6a:3b:c9:84:a8:67:7a:1d:11:d7:e6:17:
55:3d:bf:b0:44:a6:79:c0:70:76:4f:60:7f:5f:8a:2d:02:99:
14:b3:1e:90:0e:40:f5:8e:9e:27:3e:02:55:2b:94:68:88:7f:
a0:db:66:58:8a:22:b3:8e:48:05:9f:02:dd:4e:64:61:27:71:
be:f8:7f:54:03:2a:d1:60:8f:89:28:a5:5b:bd:25:6b:3d:4a:
57:7f:f3:c8:47:13:4a:38:dd:ca:39:fa:fe:e1:bd:4b:5c:7e:
38:a1:97:9d:01:02:04:78:3b:5c:e1:78:e5:b7:b5:dd:e6:d1:
3c:50:41:dd:ca:7e:64:4e:e0:02:34:ab:ac:d4:58:06:3d:0c:
41:af:b8:05
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEkFm7eMYx8KvmczfQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWIxMDcyYWYtOWNiZC00ZjYyLTgxNTUtZDVjOTUxNzdi
ZWNlMB4XDTI1MDIyNzEzMDYzN1oXDTI1MDUyODEyMDYzN1owLzEtMCsGA1UEAxMk
YzZjOTg2NzctNTk1ZC00YzdkLTk3YWItMDFlZTFhNmU3Njg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIuAZDHD/QX8qGYfFsbTE0qV5tjP6yJ81t4Z
gKOmoGiTeB/y8Vg+XDv64WPi4VslIo3JezmCIhPDMk70kN00n1c1laSz+OI23W8z
Re6Oqcj58XsvNivW87kgleYuyD+wFKiTCetqoRSfDh7hllF+tIubgyqTFZ8KdmkY
baSo8eBzpeXuVmoOz+EhXr8fX/01J48z89OXtsU493aZU994+Sl4DO9QfyorAk8v
YWsB/vWNMSMCM8SKN7Ju+KeZOjGmtFCNSDQwKNyVSGz3rSFxTeDTPNbzCsNxhfAq
V8wvLKns/ZaEVndt9aN1nWFyzwXgDv2n15bjYt6+NGplFA02AwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFEHCpGZ0qrsMA9c3yCYgKiT/lFcyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81YjEw
NzJhZi05Y2JkLTRmNjItODE1NS1kNWM5NTE3N2JlY2UvYmU4MjU4N2YtY2YwNC0z
NjNiLWI1NjQtZTgyMTYxOWMyMGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWIxMDcyYWYtOWNiZC00ZjYyLTgx
NTUtZDVjOTUxNzdiZWNlLzViMTA3MmFmLTljYmQtNGY2Mi04MTU1LWQ1Yzk1MTc3
YmVjZS5jcmwwHwYDVR0jBBgwFoAUkVCIzQQNXzjlEcCClshNIm+zQvowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81YjEwNzJhZi05Y2JkLTRmNjItODE1NS1kNWM5
NTE3N2JlY2UuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgXiQP4w
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEARv9/F88RzKPLN8wfCuuEWmwvS1ZaXKJE36L/4xtE+xbaEza7fm46
LSCgXN2go1WlHkLyF/mzM0Y899YMMer9IYIf4WCbwth7R3gt95YgBlGWS/WQ25eH
eAT6E4vqf0GAIykNeY/YIeIUcY+ysXRXb6sOajvJhKhneh0R1+YXVT2/sESmecBw
dk9gf1+KLQKZFLMekA5A9Y6eJz4CVSuUaIh/oNtmWIois45IBZ8C3U5kYSdxvvh/
VAMq0WCPiSilW70laz1KV3/zyEcTSjjdyjn6/uG9S1x+OKGXnQECBHg7XOF45be1
3ebRPFBB3cp+ZE7gAjSrrNRYBj0MQa+4BQ==
-----END CERTIFICATE-----
Generated at Sat Mar 15 02:50:01 2025 by rpki-client