Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/cb4ea264-833c-3d82-b006-2be7ddb42fe6.roa
File: cb4ea264-833c-3d82-b006-2be7ddb42fe6.roa (raw, json)
Hash identifier: ZBBcwCjmLpB9EaUwgnYTtIdZftRGJAIpeu3h+WSFXUk=
Subject key identifier: F7:76:DA:FF:18:8B:D4:FA:D8:10:E7:B9:89:F0:ED:E1:58:B8:1A:0C
Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial: 010D0C9F43285848DEA11FA75C9FBE482472D800
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/cb4ea264-833c-3d82-b006-2be7ddb42fe6.roa
Signing time: Thu 13 Feb 2025 14:00:50 +0000
ROA not before: Thu 13 Feb 2025 14:00:50 +0000
ROA not after: Wed 14 May 2025 13:00:50 +0000
asID: 203724
IP address blocks: 161.69.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:de:a1:1f:a7:5c:9f:be:48:24:72:d8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Validity
Not Before: Feb 13 14:00:50 2025 GMT
Not After : May 14 13:00:50 2025 GMT
Subject: CN=e5d43ae9-48dd-4299-831f-71e4d23b5b99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:3e:e3:65:d5:83:ee:60:09:67:e9:9e:bf:16:
3d:f0:5f:2a:e1:e1:eb:78:92:86:79:32:4e:db:8d:
7b:51:6a:e0:e9:bc:2b:b0:5e:2f:b0:59:ff:a8:23:
df:92:69:b6:c4:fe:f7:f8:4b:f1:85:08:43:c3:0e:
6c:f3:cf:66:b5:66:ec:43:55:76:4a:90:1e:11:9d:
68:9e:86:1d:34:73:cd:6c:1a:07:94:75:65:bb:db:
4b:de:79:f6:57:ee:3c:fe:93:c4:57:16:33:35:98:
c2:9c:0b:ff:4b:e7:ed:8f:ff:aa:67:5f:1c:38:28:
9e:03:63:fd:cd:9f:87:23:bd:3c:77:d1:d3:06:99:
1e:df:ec:df:ed:26:f8:e5:97:6f:b6:b1:1d:d4:94:
bb:eb:9d:05:60:eb:d1:37:37:3c:14:16:63:1e:ef:
16:b8:9f:25:6d:b7:09:9b:7d:84:47:7d:83:89:65:
31:30:5b:74:aa:5f:57:c0:96:06:54:8e:c8:29:00:
bf:da:20:ae:21:1f:ea:b5:b7:21:d4:ff:d4:ef:91:
51:50:c7:78:f1:55:0e:7d:fc:88:1c:ad:d1:74:0a:
5f:99:7e:bf:c6:22:1f:07:1e:3c:2c:62:9c:04:66:
11:2b:a3:c1:ad:80:d7:56:4e:24:b5:0d:80:7c:3a:
26:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:76:DA:FF:18:8B:D4:FA:D8:10:E7:B9:89:F0:ED:E1:58:B8:1A:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/cb4ea264-833c-3d82-b006-2be7ddb42fe6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
X509v3 Authority Key Identifier:
keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
sbgp-ipAddrBlock: critical
IPv4:
161.69.91.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:78:34:27:20:32:d3:a9:d3:5f:31:b3:85:d9:e9:27:de:a9:
62:8a:cb:94:94:53:10:03:6b:1d:3b:3a:c7:6f:ba:39:c6:01:
ad:93:c4:ed:11:66:f4:76:34:3d:db:43:15:f3:69:3e:c5:98:
ea:4d:c4:58:87:20:37:d0:53:bf:ac:94:73:39:e1:fd:8a:10:
d3:bc:de:55:08:64:65:65:68:f8:49:5c:41:c3:15:ab:20:8a:
a6:f8:3e:a7:27:5d:55:fb:4a:a3:7a:09:d2:5a:97:b6:f4:b1:
39:40:3f:0f:4f:5b:cc:ba:8d:4c:ef:f8:53:b9:ea:d5:90:5a:
9f:a5:8d:78:5b:9f:35:07:c9:93:0a:8d:e1:8a:a6:90:16:8f:
25:cb:17:35:f6:7b:17:94:63:94:97:27:28:99:80:b1:6a:65:
4d:b7:09:ce:29:aa:25:3d:69:80:5d:31:ad:62:6e:0d:8f:35:
e5:cb:f3:dd:ae:8b:07:3b:9f:d5:db:51:87:c6:cd:ad:b4:8d:
89:f7:aa:1e:ea:a5:ac:8b:d0:2f:84:0f:f8:b9:6f:df:ba:3b:
c0:fe:a5:ca:75:99:5e:df:67:b7:16:81:58:a1:e2:a8:58:39:
c7:31:96:bf:b6:48:ab:35:ea:77:c9:7d:66:3b:57:ca:b1:0b:
4c:53:7e:fd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoR+nXJ++SCRy2AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi
M2I3MB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk
ZTVkNDNhZTktNDhkZC00Mjk5LTgzMWYtNzFlNGQyM2I1Yjk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgz7jZdWD7mAJZ+mevxY98F8q4eHreJKGeTJO
2417UWrg6bwrsF4vsFn/qCPfkmm2xP73+EvxhQhDww5s889mtWbsQ1V2SpAeEZ1o
noYdNHPNbBoHlHVlu9tL3nn2V+48/pPEVxYzNZjCnAv/S+ftj/+qZ18cOCieA2P9
zZ+HI708d9HTBpke3+zf7Sb45ZdvtrEd1JS7650FYOvRNzc8FBZjHu8WuJ8lbbcJ
m32ER32DiWUxMFt0ql9XwJYGVI7IKQC/2iCuIR/qtbch1P/U75FRUMd48VUOffyI
HK3RdApfmX6/xiIfBx48LGKcBGYRK6PBrYDXVk4ktQ2AfDomCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPd22v8Yi9T62BDnuYnw7eFYuBoMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj
N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvY2I0ZWEyNjQtODMzYy0z
ZDgyLWIwMDYtMmJlN2RkYjQyZmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3
MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2
YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk
Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVbMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFp4NCcgMtOp018xs4XZ6SfeqWKKy5SUUxADax07OsdvujnGAa2TxO0R
ZvR2ND3bQxXzaT7FmOpNxFiHIDfQU7+slHM54f2KENO83lUIZGVlaPhJXEHDFasg
iqb4PqcnXVX7SqN6CdJal7b0sTlAPw9PW8y6jUzv+FO56tWQWp+ljXhbnzUHyZMK
jeGKppAWjyXLFzX2exeUY5SXJyiZgLFqZU23Cc4pqiU9aYBdMa1ibg2PNeXL892u
iwc7n9XbUYfGza20jYn3qh7qpayL0C+ED/i5b9+6O8D+pcp1mV7fZ7cWgVih4qhY
Occxlr+2SKs16nfJfWY7V8qxC0xTfv0=
-----END CERTIFICATE-----
Generated at Wed Apr 9 00:12:22 2025 by rpki-client