Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/308feeb8-70f9-3009-aff2-80c008242007.roa
File: 308feeb8-70f9-3009-aff2-80c008242007.roa (raw, json)
Hash identifier: HBJRMvWU21wIThq8JKMR5hKb74OZYQWdJuorGWXS1rM=
Subject key identifier: 1D:E2:CA:4D:70:F0:8F:89:36:C7:AD:33:9B:D8:AC:BD:46:C6:26:5B
Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial: 010D0C9F43285848D641101FFF073A74D1C023C0
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/308feeb8-70f9-3009-aff2-80c008242007.roa
Signing time: Mon 10 Feb 2025 14:00:52 +0000
ROA not before: Mon 10 Feb 2025 14:00:52 +0000
ROA not after: Sun 11 May 2025 13:00:52 +0000
asID: 28753
IP address blocks: 141.193.99.0/24 maxlen: 24
172.98.168.0/24 maxlen: 24
172.98.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d6:41:10:1f:ff:07:3a:74:d1:c0:23:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Validity
Not Before: Feb 10 14:00:52 2025 GMT
Not After : May 11 13:00:52 2025 GMT
Subject: CN=c4a090c6-2570-4d6c-b683-3aa482a2866f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d0:19:ca:4b:63:5d:00:d5:06:00:9e:cc:98:
b8:6d:8b:eb:d4:18:b0:82:52:2a:00:b1:5c:75:91:
2d:89:ac:fd:54:6c:86:15:30:1c:16:3e:fd:03:5f:
76:1d:f9:83:65:04:76:7c:c2:4c:b5:87:cd:65:1a:
13:1a:6a:a8:19:0e:99:a9:d6:a3:b0:bb:93:2d:b6:
53:f0:58:cd:84:d5:03:5f:f9:ef:96:69:ad:84:73:
0d:d5:38:e5:8f:f6:5f:7a:3a:5c:aa:31:27:4f:fb:
88:ef:d0:85:21:ef:8d:83:64:31:36:82:11:39:cf:
42:c2:d8:24:d1:23:0c:cf:dd:46:92:97:62:b0:0b:
b3:c4:4e:76:70:d2:e7:09:4c:a1:ba:d9:69:88:09:
8a:ec:f2:7e:ae:28:04:4f:6c:6a:d4:ca:a6:86:70:
4f:de:00:61:77:d0:e8:f0:0e:be:fa:37:ff:9f:6b:
9f:d7:8a:7f:b1:88:75:22:09:67:18:a1:a1:a6:1b:
1a:87:73:b2:cf:18:f2:6f:e0:55:26:ce:43:3f:3d:
47:bb:41:23:5e:24:a3:56:7d:33:de:9b:56:7e:f9:
b7:be:e4:21:08:8d:7b:34:a6:a7:8b:d9:8a:d8:c2:
5e:00:4a:05:50:c8:c6:02:a3:b1:6e:a5:a7:3d:a9:
a3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:E2:CA:4D:70:F0:8F:89:36:C7:AD:33:9B:D8:AC:BD:46:C6:26:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/308feeb8-70f9-3009-aff2-80c008242007.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
X509v3 Authority Key Identifier:
keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
sbgp-ipAddrBlock: critical
IPv4:
141.193.99.0/24
172.98.168.0/24
172.98.180.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:c4:3f:dd:6f:cc:77:0b:fb:ed:cd:62:3b:d1:5a:fa:72:be:
22:52:bf:24:2d:1e:4a:61:ac:f9:4d:9c:e8:79:18:d7:df:73:
0f:e6:5d:0f:7d:ce:f5:bb:50:1a:e0:57:97:c5:c6:22:ea:53:
ab:02:43:1f:cb:72:13:1c:73:2c:f7:20:53:60:65:54:af:da:
54:04:6b:45:29:8e:36:da:dd:b0:d9:92:47:fc:32:bd:16:b1:
8b:af:b9:7b:91:1b:36:87:bc:a2:e7:bd:48:d8:c7:f6:81:f7:
07:ed:4e:5a:3e:c4:9e:aa:c8:6a:f4:60:c7:8b:36:5b:b5:6c:
5a:64:2e:09:26:3a:b9:ff:ec:53:eb:a0:64:5e:56:93:60:68:
da:21:4f:f1:fb:6a:5d:05:0e:d7:e4:a9:bb:1a:18:74:05:35:
5e:2c:e3:ec:96:f3:45:f9:15:fe:f2:b1:56:aa:8f:fa:ed:79:
81:f5:c0:68:7c:b2:52:4b:c5:dd:21:df:f3:b8:ad:ac:d1:40:
73:ea:8b:67:3c:ad:19:13:4c:18:d7:01:0a:a2:36:d2:79:82:
8a:4f:8d:95:c4:e1:0b:b5:15:d5:44:77:fd:3b:c7:00:22:f8:
30:09:3f:0b:f9:32:9a:6b:18:20:9b:82:bb:99:2e:32:4a:27:
d0:ea:28:cd
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEjWQRAf/wc6dNHAI8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi
NWVlMB4XDTI1MDIxMDE0MDA1MloXDTI1MDUxMTEzMDA1MlowLzEtMCsGA1UEAxMk
YzRhMDkwYzYtMjU3MC00ZDZjLWI2ODMtM2FhNDgyYTI4NjZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NAZyktjXQDVBgCezJi4bYvr1BiwglIqALFc
dZEtiaz9VGyGFTAcFj79A192HfmDZQR2fMJMtYfNZRoTGmqoGQ6ZqdajsLuTLbZT
8FjNhNUDX/nvlmmthHMN1Tjlj/ZfejpcqjEnT/uI79CFIe+Ng2QxNoIROc9Cwtgk
0SMMz91GkpdisAuzxE52cNLnCUyhutlpiAmK7PJ+rigET2xq1MqmhnBP3gBhd9Do
8A6++jf/n2uf14p/sYh1IglnGKGhphsah3Oyzxjyb+BVJs5DPz1Hu0EjXiSjVn0z
3ptWfvm3vuQhCI17NKani9mK2MJeAEoFUMjGAqOxbqWnPamjzQIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFB3iyk1w8I+JNsetM5vYrL1GxiZbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2
ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvMzA4ZmVlYjgtNzBmOS0z
MDA5LWFmZjItODBjMDA4MjQyMDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3
ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz
YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm
ODljM2I1ZWUuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAjcFjAwQA
rGKoAwQArGK0MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBACLEP91vzHcL++3NYjvRWvpyviJSvyQtHkphrPlN
nOh5GNffcw/mXQ99zvW7UBrgV5fFxiLqU6sCQx/LchMccyz3IFNgZVSv2lQEa0Up
jjba3bDZkkf8Mr0WsYuvuXuRGzaHvKLnvUjYx/aB9wftTlo+xJ6qyGr0YMeLNlu1
bFpkLgkmOrn/7FProGReVpNgaNohT/H7al0FDtfkqbsaGHQFNV4s4+yW80X5Ff7y
sVaqj/rteYH1wGh8slJLxd0h3/O4razRQHPqi2c8rRkTTBjXAQqiNtJ5gopPjZXE
4Qu1FdVEd/07xwAi+DAJPwv5MpprGCCbgruZLjJKJ9DqKM0=
-----END CERTIFICATE-----
Generated at Wed Apr 9 10:23:40 2025 by rpki-client