Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/0b377f47-e232-3cfb-b574-aed6c56c4a63.roa
File: 0b377f47-e232-3cfb-b574-aed6c56c4a63.roa (raw, json)
Hash identifier: Arp0pvS27/zWY9s6S5ubNWrEG/WfhrOCSo1KZiloFC0=
Subject key identifier: BA:11:F4:A4:D2:38:74:35:EB:9C:FA:A1:78:9F:D0:8F:A0:21:64:E5
Certificate issuer: /CN=dd62a733-0e13-4012-8294-fce655e4a41a
Certificate serial: 010D0C9F43285848A400BB83FAA3C249458E5840
Authority key identifier: 91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/0b377f47-e232-3cfb-b574-aed6c56c4a63.roa
Signing time: Thu 23 Jan 2025 14:00:52 +0000
ROA not before: Thu 23 Jan 2025 14:00:52 +0000
ROA not after: Wed 23 Apr 2025 13:00:52 +0000
asID: 63023
IP address blocks: 2602:fd92:c30::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 08:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:00:bb:83:fa:a3:c2:49:45:8e:58:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd62a733-0e13-4012-8294-fce655e4a41a
Validity
Not Before: Jan 23 14:00:52 2025 GMT
Not After : Apr 23 13:00:52 2025 GMT
Subject: CN=5b08289d-6b0d-4d17-ad9a-b1e9a5c4225a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ab:dd:d6:be:26:44:37:d4:fc:9b:90:88:b0:
b8:62:af:ff:09:a9:f3:b2:d7:20:8b:3d:34:91:86:
64:aa:d8:61:96:05:74:dc:7c:1c:c2:2f:47:e3:c8:
df:d0:cf:0b:19:ce:13:fa:e7:d0:52:cf:6c:a1:8a:
84:f8:28:bc:d7:91:b8:d9:fe:64:2d:06:64:a1:c9:
53:c5:2e:c8:df:ce:d6:69:7a:3c:af:14:e9:32:60:
e8:a9:e5:1f:7e:97:f7:95:33:12:56:7f:51:e1:04:
37:c9:8d:20:b8:7d:40:f9:26:f8:f7:a6:6a:65:34:
9d:1c:88:5d:db:36:73:2e:cc:0d:bb:9c:e3:df:7d:
b0:1a:ad:a5:55:be:dc:36:96:98:76:d8:4a:de:6b:
c4:28:d0:72:fd:ff:96:c1:49:62:0d:80:95:3a:8f:
85:7a:1c:4f:54:66:b7:bd:89:b5:a9:0b:fe:a5:4a:
8f:65:cd:8a:43:ea:92:0b:8d:95:08:b7:08:18:9e:
65:f8:79:68:9e:a1:cd:87:b9:6f:a8:be:de:48:66:
89:3c:17:99:2c:6d:76:a8:0d:3f:6d:ca:1f:f6:c6:
0a:6a:c0:d8:92:cd:71:c3:8e:6f:58:aa:ef:d2:46:
35:6f:1e:fd:d5:7c:d6:c2:30:c8:c9:b8:48:cb:bc:
67:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:11:F4:A4:D2:38:74:35:EB:9C:FA:A1:78:9F:D0:8F:A0:21:64:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/0b377f47-e232-3cfb-b574-aed6c56c4a63.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl
X509v3 Authority Key Identifier:
keyid:91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fd92:c30::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:0a:b0:53:4a:54:d9:24:74:74:35:48:91:a2:54:65:dc:21:
7d:bb:31:a6:01:71:9b:cb:c8:8d:b1:66:d4:8d:52:6c:ba:e0:
4c:75:3b:73:9a:b2:8c:ae:35:19:7b:ab:7a:9d:b5:fc:03:e1:
4f:41:b7:fd:66:56:6e:a4:5e:35:4f:d4:11:4f:b9:e2:bf:fe:
8c:c2:73:52:d0:76:fc:13:30:10:42:f7:49:d7:06:b9:5a:dc:
b3:42:49:f9:a0:b2:6b:90:aa:c1:47:2e:2f:f8:e7:dc:25:2e:
aa:cc:e6:f6:0a:6f:af:e6:59:50:e9:ef:21:c8:11:36:2e:0d:
ad:fb:f2:1c:01:42:ee:6a:61:07:d2:3c:03:de:6d:36:16:38:
c8:53:db:11:0b:63:9b:35:2d:c1:d9:4e:a8:3d:52:15:a6:50:
f1:f4:26:74:40:6a:ae:a2:ba:e1:a7:0f:66:ba:81:74:00:af:
7b:52:ed:2c:a7:a6:d4:2e:e2:7c:b4:ee:7a:e6:65:e0:86:09:
0d:8f:e5:ff:9e:3a:32:ed:8a:96:9b:47:2e:0f:1a:ee:ae:a0:
25:ba:c2:d0:eb:33:ad:f3:6e:ec:06:60:a6:15:4f:31:48:5b:
75:e5:ac:3b:c0:87:a5:6f:e6:ae:38:00:26:9d:70:e7:39:b5:
93:e1:e3:0a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEikALuD+qPCSUWOWEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGQ2MmE3MzMtMGUxMy00MDEyLTgyOTQtZmNlNjU1ZTRh
NDFhMB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk
NWIwODI4OWQtNmIwZC00ZDE3LWFkOWEtYjFlOWE1YzQyMjVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkavd1r4mRDfU/JuQiLC4Yq//Canzstcgiz00
kYZkqthhlgV03Hwcwi9H48jf0M8LGc4T+ufQUs9soYqE+Ci815G42f5kLQZkoclT
xS7I387WaXo8rxTpMmDoqeUffpf3lTMSVn9R4QQ3yY0guH1A+Sb496ZqZTSdHIhd
2zZzLswNu5zj332wGq2lVb7cNpaYdthK3mvEKNBy/f+WwUliDYCVOo+FehxPVGa3
vYm1qQv+pUqPZc2KQ+qSC42VCLcIGJ5l+HlonqHNh7lvqL7eSGaJPBeZLG12qA0/
bcof9sYKasDYks1xw45vWKrv0kY1bx791XzWwjDIybhIy7xn6wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLoR9KTSOHQ165z6oXif0I+gIWTlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZDYy
YTczMy0wZTEzLTQwMTItODI5NC1mY2U2NTVlNGE0MWEvMGIzNzdmNDctZTIzMi0z
Y2ZiLWI1NzQtYWVkNmM1NmM0YTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGQ2MmE3MzMtMGUxMy00MDEyLTgy
OTQtZmNlNjU1ZTRhNDFhL2RkNjJhNzMzLTBlMTMtNDAxMi04Mjk0LWZjZTY1NWU0
YTQxYS5jcmwwHwYDVR0jBBgwFoAUkRNYtHaun6GwfpONvDcsq5c9dt8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kZDYyYTczMy0wZTEzLTQwMTItODI5NC1mY2U2
NTVlNGE0MWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL9kgww
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAB0KsFNKVNkkdHQ1SJGiVGXcIX27MaYBcZvLyI2xZtSNUmy64Ex1
O3OasoyuNRl7q3qdtfwD4U9Bt/1mVm6kXjVP1BFPueK//ozCc1LQdvwTMBBC90nX
Brla3LNCSfmgsmuQqsFHLi/459wlLqrM5vYKb6/mWVDp7yHIETYuDa378hwBQu5q
YQfSPAPebTYWOMhT2xELY5s1LcHZTqg9UhWmUPH0JnRAaq6iuuGnD2a6gXQAr3tS
7SynptQu4ny07nrmZeCGCQ2P5f+eOjLtipabRy4PGu6uoCW6wtDrM63zbuwGYKYV
TzFIW3XlrDvAh6Vv5q44ACadcOc5tZPh4wo=
-----END CERTIFICATE-----
Generated at Wed Apr 9 09:08:42 2025 by rpki-client