Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f1b2177a-7d04-3646-bbe2-c3ac2ad1fb4c.roa
File: f1b2177a-7d04-3646-bbe2-c3ac2ad1fb4c.roa (raw, json)
Hash identifier: +CJinWJ3IXslznC+uh3f4Wg7NKmR2Y/JILcnF3gLjCQ=
Subject key identifier: 0A:D9:F6:BA:11:D2:84:06:99:E2:11:2F:52:81:7C:38:D9:AE:EB:5E
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C84BC8A01E459472025A1210
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f1b2177a-7d04-3646-bbe2-c3ac2ad1fb4c.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 396982
IP address blocks: 34.148.224.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:c8:a0:1e:45:94:72:02:5a:12:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=ac4ce405-6dd3-4bef-884b-b5c02a81a669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:8b:61:b9:7d:c1:7e:ea:9d:58:2c:2d:54:0b:
83:2c:a7:fe:40:bf:b3:c4:81:8d:b4:de:9a:f2:fb:
4a:0b:e9:42:6e:e1:e7:56:bb:80:f0:6a:cc:21:11:
52:95:91:0e:a1:f4:90:5b:64:68:bb:3a:94:ea:65:
23:c8:f9:40:07:c1:db:64:51:43:b9:4d:1d:1e:c4:
ac:33:63:6d:ae:87:9c:99:ac:ce:9e:13:34:90:07:
4d:16:80:f2:cf:fb:e7:03:3a:5e:78:4a:1e:be:ad:
b8:0b:75:9f:94:cc:04:a7:0d:34:49:4b:fa:b1:0d:
b6:c1:83:3d:1d:04:95:79:27:82:53:c3:4d:13:66:
cd:8c:56:1f:7e:d6:94:26:b6:24:14:04:98:47:5f:
2a:c5:2d:08:bd:3a:b3:10:29:6b:b9:e2:a3:5f:1c:
24:cd:d5:d0:0e:a8:0b:bd:d2:eb:a6:92:c1:b1:77:
3f:82:5b:b1:b1:91:66:fd:20:a2:65:6d:75:ff:f3:
40:fc:93:8c:f1:de:23:d4:9f:c2:01:85:31:8f:2d:
26:62:bf:25:3b:d2:f5:e6:c5:58:90:d5:be:6f:7b:
ef:d8:6d:66:0b:6b:02:30:01:ee:b0:9c:23:69:eb:
40:ee:d3:7b:f9:bf:3b:17:e9:30:ad:04:8b:52:b2:
ea:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:D9:F6:BA:11:D2:84:06:99:E2:11:2F:52:81:7C:38:D9:AE:EB:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f1b2177a-7d04-3646-bbe2-c3ac2ad1fb4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.148.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:8f:4a:84:d5:ab:aa:f6:2d:6b:99:0e:b4:64:69:b7:1f:09:
98:d2:bd:eb:ff:17:58:35:71:bb:47:c3:d8:76:95:a4:a4:ec:
e7:2c:09:a9:34:5b:59:1d:de:66:c5:39:68:84:d8:32:80:b8:
b1:9a:c6:67:4f:e2:72:75:dd:83:aa:a3:49:05:7b:93:4a:7c:
a0:22:06:a2:8d:4b:17:08:b8:8a:2a:33:c0:92:c9:78:6d:bf:
a9:8a:5f:c9:2f:4f:38:5e:f8:79:9a:cd:67:c6:fe:dc:06:23:
45:97:c5:bf:37:b4:52:03:6d:9d:b8:f6:16:2e:a6:e3:00:53:
80:53:8f:fd:38:e5:e3:95:20:05:a9:aa:63:30:26:2d:0a:f7:
e5:cb:d9:88:f7:9d:91:a9:d4:4a:55:b0:a6:93:56:eb:ce:1b:
b9:a2:32:3d:ad:5b:b7:5a:f6:1a:f1:1d:d4:be:99:23:3d:5a:
64:23:27:92:ee:2d:f8:65:cb:9f:d0:90:12:8a:95:29:7e:20:
b5:98:b0:7c:f4:48:7c:cd:fc:c1:6d:28:dc:69:db:87:21:6f:
4c:00:e0:fe:e1:b9:c3:99:c8:49:6c:c0:fd:ea:5d:c6:ce:0f:
4e:be:b3:fb:15:a0:75:3a:32:51:eb:69:ba:5e:00:a9:5e:85:
f5:8b:4d:f5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS8igHkWUcgJaEhAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk
YWM0Y2U0MDUtNmRkMy00YmVmLTg4NGItYjVjMDJhODFhNjY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4thuX3BfuqdWCwtVAuDLKf+QL+zxIGNtN6a
8vtKC+lCbuHnVruA8GrMIRFSlZEOofSQW2RouzqU6mUjyPlAB8HbZFFDuU0dHsSs
M2NtroecmazOnhM0kAdNFoDyz/vnAzpeeEoevq24C3WflMwEpw00SUv6sQ22wYM9
HQSVeSeCU8NNE2bNjFYfftaUJrYkFASYR18qxS0IvTqzEClrueKjXxwkzdXQDqgL
vdLrppLBsXc/gluxsZFm/SCiZW11//NA/JOM8d4j1J/CAYUxjy0mYr8lO9L15sVY
kNW+b3vv2G1mC2sCMAHusJwjaetA7tN7+b87F+kwrQSLUrLq5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFArZ9roR0oQGmeIRL1KBfDjZruteMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjFiMjE3N2EtN2QwNC0z
NjQ2LWJiZTItYzNhYzJhZDFmYjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpTgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADePSoTVq6r2LWuZDrRkabcfCZjSvev/F1g1cbtHw9h2laSk7OcsCak0
W1kd3mbFOWiE2DKAuLGaxmdP4nJ13YOqo0kFe5NKfKAiBqKNSxcIuIoqM8CSyXht
v6mKX8kvTzhe+HmazWfG/twGI0WXxb83tFIDbZ249hYupuMAU4BTj/045eOVIAWp
qmMwJi0K9+XL2Yj3nZGp1EpVsKaTVuvOG7miMj2tW7da9hrxHdS+mSM9WmQjJ5Lu
Lfhly5/QkBKKlSl+ILWYsHz0SHzN/MFtKNxp24chb0wA4P7hucOZyElswP3qXcbO
D06+s/sVoHU6MlHrabpeAKlehfWLTfU=
-----END CERTIFICATE-----
Generated at Wed Apr 9 12:01:30 2025 by rpki-client