Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8a962e69-e99e-3dcc-986c-baf471ff1500.roa
File: 8a962e69-e99e-3dcc-986c-baf471ff1500.roa (raw, json)
Hash identifier: VP1/zmZhIHHMudRLEzJydTBnTqWrS2FH88cg6v4r/2w=
Subject key identifier: 13:6B:71:B4:1F:C3:15:31:2C:AA:D9:E9:DC:3A:9D:0E:DD:6D:C9:BF
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F432858491246CCAFFF744F9D0268B340
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8a962e69-e99e-3dcc-986c-baf471ff1500.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 3360
IP address blocks: 204.105.144.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:cc:af:ff:74:4f:9d:02:68:b3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=1fc3f164-cb4b-4bdc-93b5-69fc7f26cfaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:73:cd:46:4f:80:3c:06:db:1b:3d:ca:f1:0a:
bb:cd:ca:a0:b5:6c:e5:af:ce:d6:e1:f5:5d:fc:94:
69:72:09:69:34:af:e8:7d:a9:fb:94:5a:b4:f4:e3:
f2:40:df:3e:42:9b:ec:ef:18:ea:b8:66:15:0d:c6:
3e:f7:25:e7:1c:b0:71:76:20:bc:c7:ad:cf:14:53:
b0:56:1d:9f:90:11:01:4d:93:07:e8:2d:b4:54:55:
d6:a7:ed:96:2a:33:c3:b7:58:d0:3e:24:13:f5:76:
a1:aa:fb:82:89:bc:5c:f5:9a:c5:c2:0a:0e:8f:65:
43:4a:b6:fa:81:e1:ff:65:c1:9d:00:b4:db:1e:73:
9f:ed:1e:2d:f7:ba:f9:ca:bf:91:39:3e:24:3a:6f:
54:ed:8a:60:0b:6a:58:97:67:d9:2a:32:d0:8c:7a:
13:dd:ad:ff:8c:38:89:b4:82:a9:a3:57:80:b9:f9:
af:89:5e:7a:a1:01:60:25:26:f3:3a:91:bc:70:8e:
00:3d:66:a3:74:1e:e1:3d:ec:92:f0:5f:86:b7:cf:
fd:15:55:8f:e5:4c:b6:58:ae:e1:b2:20:23:1d:5a:
ea:ca:d9:99:e8:28:06:16:94:0b:5f:b0:ef:11:0b:
94:b6:9e:c8:70:ff:96:24:5b:33:ba:4f:eb:29:be:
f2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:6B:71:B4:1F:C3:15:31:2C:AA:D9:E9:DC:3A:9D:0E:DD:6D:C9:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8a962e69-e99e-3dcc-986c-baf471ff1500.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
204.105.144.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:84:b1:6f:29:1e:a8:7a:22:f3:60:c2:22:6e:91:2b:91:08:
2d:ca:c8:4a:9f:97:6c:a0:47:e8:ad:81:22:c8:da:f4:05:d4:
29:89:2b:29:75:79:a7:7c:49:4a:b8:fd:e4:23:5c:58:71:a8:
c4:1a:a1:44:b6:e0:5a:a1:f7:13:30:6a:fc:32:a3:da:f9:a9:
e4:6f:53:fa:8f:b3:a8:c3:7e:4e:f4:78:1c:4b:01:b8:f4:be:
50:2d:e1:be:65:62:77:bd:cd:cc:5f:b8:87:1c:94:e6:e2:f5:
89:f2:b8:ad:88:df:cd:76:1a:01:55:06:55:01:7b:f6:3e:fe:
19:ce:6a:d3:d7:c9:66:a6:fb:72:4e:dd:42:e7:b1:77:a9:f4:
6b:36:45:ad:b9:6e:f5:1a:fe:2c:d5:a5:28:4e:25:54:11:73:
ce:fe:17:f4:9b:6c:ee:e9:07:c3:98:07:e8:e3:1c:d6:e3:17:
07:70:4d:5a:7c:49:97:a9:bb:8c:ae:40:38:c5:bd:fe:12:2e:
e0:5b:aa:3e:78:c5:02:9e:ed:fd:c2:a1:ac:e7:f0:e5:1f:75:
aa:59:9c:c9:1c:3a:96:de:ce:0f:67:9d:ec:e5:13:3c:88:87:
35:d3:de:6b:fc:ef:2c:6f:40:b6:b8:33:52:66:00:03:42:bd:
89:1e:18:cf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRsyv/3RPnQJos0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk
MWZjM2YxNjQtY2I0Yi00YmRjLTkzYjUtNjlmYzdmMjZjZmFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXPNRk+APAbbGz3K8Qq7zcqgtWzlr87W4fVd
/JRpcglpNK/ofan7lFq09OPyQN8+Qpvs7xjquGYVDcY+9yXnHLBxdiC8x63PFFOw
Vh2fkBEBTZMH6C20VFXWp+2WKjPDt1jQPiQT9XahqvuCibxc9ZrFwgoOj2VDSrb6
geH/ZcGdALTbHnOf7R4t97r5yr+ROT4kOm9U7YpgC2pYl2fZKjLQjHoT3a3/jDiJ
tIKpo1eAufmviV56oQFgJSbzOpG8cI4APWajdB7hPeyS8F+Gt8/9FVWP5Uy2WK7h
siAjHVrqytmZ6CgGFpQLX7DvEQuUtp7IcP+WJFszuk/rKb7yhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBNrcbQfwxUxLKrZ6dw6nQ7dbcm/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOGE5NjJlNjktZTk5ZS0z
ZGNjLTk4NmMtYmFmNDcxZmYxNTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzGmQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACOEsW8pHqh6IvNgwiJukSuRCC3KyEqfl2ygR+itgSLI2vQF1CmJKyl1
ead8SUq4/eQjXFhxqMQaoUS24Fqh9xMwavwyo9r5qeRvU/qPs6jDfk70eBxLAbj0
vlAt4b5lYne9zcxfuIcclObi9YnyuK2I3812GgFVBlUBe/Y+/hnOatPXyWam+3JO
3ULnsXep9Gs2Ra25bvUa/izVpShOJVQRc87+F/SbbO7pB8OYB+jjHNbjFwdwTVp8
SZepu4yuQDjFvf4SLuBbqj54xQKe7f3Coazn8OUfdapZnMkcOpbezg9nnezlEzyI
hzXT3mv87yxvQLa4M1JmAANCvYkeGM8=
-----END CERTIFICATE-----
Generated at Wed Apr 9 12:58:31 2025 by rpki-client