Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/b4417de1-ae84-322a-b555-f45428cbdb19.roa
File: b4417de1-ae84-322a-b555-f45428cbdb19.roa (raw, json)
Hash identifier: CobJKKhu3NsHFhLyo+2kunQcMeUykSiWEYpx3UA94nE=
Subject key identifier: D8:DF:B4:6B:9F:D0:4B:B6:57:62:CF:2D:0B:CF:CF:9E:07:E8:36:A2
Certificate issuer: /CN=48f8534f-57cd-45ba-bfa4-ce60842463a4
Certificate serial: 010D0C9F432858492184137F2EDE869C9717BB98
Authority key identifier: E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/b4417de1-ae84-322a-b555-f45428cbdb19.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 3280
IP address blocks: 199.119.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:84:13:7f:2e:de:86:9c:97:17:bb:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48f8534f-57cd-45ba-bfa4-ce60842463a4
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=5a8e56fc-b3e8-4be9-b17c-dc0a6de10c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7c:6d:c3:4e:58:70:87:25:71:b0:56:7f:42:
f7:77:55:f1:56:e2:cf:58:14:4d:73:3e:cc:49:c3:
68:ea:af:04:3d:be:99:4d:94:12:24:2c:5d:3f:35:
57:f2:a5:cc:eb:1b:d9:f5:2d:5b:a7:23:b7:78:77:
01:46:8c:e3:30:b4:4f:e3:c1:9e:2e:7c:28:aa:d7:
0e:1f:7b:1e:88:6b:0d:1f:9c:50:2b:17:1c:c0:fe:
4d:78:43:f4:52:ed:1d:78:0a:08:91:ff:d2:f6:c9:
ae:49:24:84:0d:6a:ef:a3:db:48:0c:f3:a6:c2:01:
48:9e:65:7c:37:d7:3d:c6:ba:20:49:b5:e2:1d:57:
fd:9a:2d:27:2e:fb:5e:bd:6e:0c:81:d2:93:5d:57:
ad:15:6b:3c:7f:6a:86:8b:7e:64:5e:b6:42:f8:9a:
09:cf:9a:bd:0d:e2:21:84:4d:41:c1:80:66:e8:b1:
c7:f9:a7:e3:0d:5a:eb:70:63:72:1e:dd:b8:00:d3:
18:e4:c7:04:86:b1:d3:14:5d:65:c2:6e:19:28:f6:
fb:5d:0a:64:ca:07:cb:77:f5:35:d2:da:36:7e:6c:
31:ce:90:5b:e3:88:1d:3d:3e:09:80:1b:d8:1a:42:
ea:65:b1:de:0c:af:cf:b2:64:f7:9d:80:bd:62:cd:
5d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:DF:B4:6B:9F:D0:4B:B6:57:62:CF:2D:0B:CF:CF:9E:07:E8:36:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/b4417de1-ae84-322a-b555-f45428cbdb19.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.crl
X509v3 Authority Key Identifier:
keyid:E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer
sbgp-ipAddrBlock: critical
IPv4:
199.119.139.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:7f:ec:6c:9f:6f:33:6c:e2:59:38:bd:0c:01:5a:d9:14:c4:
2c:05:7a:5c:00:24:75:a2:73:53:a7:c5:72:ae:06:f1:f8:35:
df:19:bf:90:1e:97:42:24:a8:6f:0e:82:4e:dc:26:11:47:3c:
fb:4b:da:07:7c:e3:8c:2b:7a:f3:97:f4:6b:36:30:f9:10:1b:
cd:1a:2d:12:a9:b0:23:27:86:ed:c0:13:ce:f6:fe:b8:bb:2a:
31:c9:e3:b0:8e:3b:fa:a2:ac:ec:1c:97:65:31:68:fd:d8:e4:
62:13:65:16:65:80:85:b6:70:e1:17:9c:a6:9e:cd:14:2b:da:
8f:7c:18:16:46:b2:da:48:16:40:7d:33:b0:f4:ae:02:48:7f:
91:7a:7d:46:3b:da:4b:45:71:b0:9c:e9:83:4c:a1:79:f1:d1:
8a:1d:93:8e:a9:c1:3e:ec:6b:93:a3:5b:fc:61:cb:b3:b2:01:
3e:9d:f1:c1:d4:95:c9:c9:55:4f:63:cf:19:87:e4:f6:e9:05:
94:d4:5a:06:1c:92:44:06:12:4d:38:9f:cb:9d:1e:82:9d:55:
e7:50:da:bc:a1:a5:ab:8e:90:5f:d0:ef:f8:8a:2c:95:2b:6f:
92:e7:48:37:e9:11:e8:d2:7f:54:f8:8f:93:f2:44:49:07:68:
86:6e:c4:b9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhhBN/Lt6GnJcXu5gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDhmODUzNGYtNTdjZC00NWJhLWJmYTQtY2U2MDg0MjQ2
M2E0MB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk
NWE4ZTU2ZmMtYjNlOC00YmU5LWIxN2MtZGMwYTZkZTEwYzA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnxtw05YcIclcbBWf0L3d1XxVuLPWBRNcz7M
ScNo6q8EPb6ZTZQSJCxdPzVX8qXM6xvZ9S1bpyO3eHcBRozjMLRP48GeLnwoqtcO
H3seiGsNH5xQKxccwP5NeEP0Uu0deAoIkf/S9smuSSSEDWrvo9tIDPOmwgFInmV8
N9c9xrogSbXiHVf9mi0nLvtevW4MgdKTXVetFWs8f2qGi35kXrZC+JoJz5q9DeIh
hE1BwYBm6LHH+afjDVrrcGNyHt24ANMY5McEhrHTFF1lwm4ZKPb7XQpkygfLd/U1
0to2fmwxzpBb44gdPT4JgBvYGkLqZbHeDK/PsmT3nYC9Ys1dbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNjftGuf0Eu2V2LPLQvPz54H6DaiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80OGY4
NTM0Zi01N2NkLTQ1YmEtYmZhNC1jZTYwODQyNDYzYTQvYjQ0MTdkZTEtYWU4NC0z
MjJhLWI1NTUtZjQ1NDI4Y2JkYjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDhmODUzNGYtNTdjZC00NWJhLWJm
YTQtY2U2MDg0MjQ2M2E0LzQ4Zjg1MzRmLTU3Y2QtNDViYS1iZmE0LWNlNjA4NDI0
NjNhNC5jcmwwHwYDVR0jBBgwFoAU6FPdCXJVOiBqm33uUEZSal9iZggwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS80OGY4NTM0Zi01N2NkLTQ1YmEtYmZhNC1jZTYw
ODQyNDYzYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx3eLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIh/7GyfbzNs4lk4vQwBWtkUxCwFelwAJHWic1OnxXKuBvH4Nd8Zv5Ae
l0IkqG8Ogk7cJhFHPPtL2gd844wrevOX9Gs2MPkQG80aLRKpsCMnhu3AE872/ri7
KjHJ47COO/qirOwcl2UxaP3Y5GITZRZlgIW2cOEXnKaezRQr2o98GBZGstpIFkB9
M7D0rgJIf5F6fUY72ktFcbCc6YNMoXnx0Yodk46pwT7sa5OjW/xhy7OyAT6d8cHU
lcnJVU9jzxmH5PbpBZTUWgYckkQGEk04n8udHoKdVedQ2ryhpauOkF/Q7/iKLJUr
b5LnSDfpEejSf1T4j5PyREkHaIZuxLk=
-----END CERTIFICATE-----
Generated at Thu Apr 10 05:38:35 2025 by rpki-client