Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2dabe2f7-c824-3ec8-978e-f55b4022901c.roa
File: 2dabe2f7-c824-3ec8-978e-f55b4022901c.roa (raw, json)
Hash identifier: vkbCq/JcXfa7t666LVht/2JxYg9vEN4r4BF2h9EPGA0=
Subject key identifier: F7:8C:9A:A1:97:D1:7E:E1:9B:7D:9D:71:8E:AF:01:C4:52:DF:2B:FA
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F432858491246B2B4FEAF1A8E269DCE00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2dabe2f7-c824-3ec8-978e-f55b4022901c.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 203
IP address blocks: 130.174.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 09 Apr 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:b2:b4:fe:af:1a:8e:26:9d:ce:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=55302ed4-a668-46eb-a68d-632ef5f4d698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2f:a4:8f:1a:0a:6b:b1:2d:39:7a:d7:0c:db:
d2:4f:7b:d1:a2:3d:49:b4:73:9b:d2:2b:fe:05:5b:
5f:7c:c4:24:d7:f4:0d:51:82:3c:9d:24:cb:46:b2:
81:85:26:d5:7a:8c:29:c2:08:f7:af:ad:a4:11:77:
49:f4:90:4f:8f:9c:6d:45:1e:ee:d7:a1:c5:42:2e:
c0:d7:2b:39:e3:73:50:15:53:93:d7:b2:22:7c:82:
c5:4f:2e:d7:5b:12:96:2b:22:2f:92:27:b4:7f:df:
93:f5:ba:38:f1:1b:1c:25:3e:36:b2:1e:b7:fb:3f:
80:61:31:07:d5:1c:55:da:b2:60:d0:c9:45:d8:9d:
df:f2:9c:39:38:3c:f7:b2:ba:83:00:f3:45:f6:60:
f5:92:ea:16:70:10:46:80:78:a3:cb:f6:6b:25:89:
9a:8f:41:c3:7c:b6:e1:07:b8:82:ee:24:f2:0f:08:
9f:87:df:ce:d2:ee:d9:50:ec:ca:d2:6e:2e:ba:d1:
9d:b2:01:b9:3c:89:21:34:81:d7:5f:de:1e:a5:63:
3b:28:61:fc:6a:58:ed:f9:f1:2c:fa:c9:70:2e:0f:
bd:3f:8a:08:af:51:ca:6d:2c:dc:8c:6e:58:cc:15:
ad:12:0b:c7:fc:ab:b6:d9:5e:a4:4b:bc:a0:cf:55:
52:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:8C:9A:A1:97:D1:7E:E1:9B:7D:9D:71:8E:AF:01:C4:52:DF:2B:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2dabe2f7-c824-3ec8-978e-f55b4022901c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
130.174.21.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:36:6e:c8:73:3f:91:fd:8e:a2:c3:9a:2b:f3:b6:32:c3:a0:
4e:20:d0:47:4a:6a:cb:65:ec:29:38:d3:1a:0d:64:d8:3b:16:
6d:71:f6:c1:5e:a3:aa:94:44:20:81:16:6c:07:c5:91:bd:84:
50:ce:8e:e5:f4:28:6f:f9:55:3f:e0:2c:ca:c4:f1:11:4f:ca:
84:7c:56:49:2c:7b:47:bc:15:9c:e5:c4:1a:99:28:9a:60:8c:
f4:b1:fe:9e:52:c4:6e:9e:92:c1:de:18:1c:21:cb:5f:bd:60:
b1:28:31:bd:c8:24:a4:b5:e2:a1:c6:d6:bb:80:04:8c:df:08:
c3:43:29:3c:f0:0b:0a:aa:60:17:a3:7f:4c:16:1a:f5:5e:69:
43:f7:c2:75:60:37:ce:82:d3:9e:39:58:67:09:d7:b5:98:1d:
15:c5:62:7b:65:63:68:39:35:be:82:42:7a:70:8b:98:5b:60:
07:db:88:b6:95:cd:78:a8:e1:e1:4b:72:2e:6d:67:8f:88:87:
0e:e0:c0:47:4a:e9:d0:0d:cc:ad:cc:b8:c7:85:bc:24:99:b2:
03:44:36:cc:0f:b3:63:b2:c8:bf:77:0b:eb:1a:d1:af:b4:9e:
8f:b8:2d:a5:4b:c8:a4:ed:ea:e8:9e:41:a2:84:1f:e2:46:ea:
d0:2a:0b:27
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRrK0/q8ajiadzgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk
NTUzMDJlZDQtYTY2OC00NmViLWE2OGQtNjMyZWY1ZjRkNjk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwC+kjxoKa7EtOXrXDNvST3vRoj1JtHOb0iv+
BVtffMQk1/QNUYI8nSTLRrKBhSbVeowpwgj3r62kEXdJ9JBPj5xtRR7u16HFQi7A
1ys543NQFVOT17IifILFTy7XWxKWKyIvkie0f9+T9bo48RscJT42sh63+z+AYTEH
1RxV2rJg0MlF2J3f8pw5ODz3srqDAPNF9mD1kuoWcBBGgHijy/ZrJYmaj0HDfLbh
B7iC7iTyDwifh9/O0u7ZUOzK0m4uutGdsgG5PIkhNIHXX94epWM7KGH8aljt+fEs
+slwLg+9P4oIr1HKbSzcjG5YzBWtEgvH/Ku22V6kS7ygz1VS+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPeMmqGX0X7hm32dcY6vAcRS3yv6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMmRhYmUyZjctYzgyNC0z
ZWM4LTk3OGUtZjU1YjQwMjI5MDFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4VMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFw2bshzP5H9jqLDmivztjLDoE4g0EdKastl7Ck40xoNZNg7Fm1x9sFe
o6qURCCBFmwHxZG9hFDOjuX0KG/5VT/gLMrE8RFPyoR8Vkkse0e8FZzlxBqZKJpg
jPSx/p5SxG6eksHeGBwhy1+9YLEoMb3IJKS14qHG1ruABIzfCMNDKTzwCwqqYBej
f0wWGvVeaUP3wnVgN86C0545WGcJ17WYHRXFYntlY2g5Nb6CQnpwi5hbYAfbiLaV
zXio4eFLci5tZ4+Ihw7gwEdK6dANzK3MuMeFvCSZsgNENswPs2OyyL93C+sa0a+0
no+4LaVLyKTt6uieQaKEH+JG6tAqCyc=
-----END CERTIFICATE-----
Generated at Tue Apr 8 18:33:42 2025 by rpki-client