Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/71b533e2-7f33-3621-b9d4-739786613f23.roa
File: 71b533e2-7f33-3621-b9d4-739786613f23.roa (raw, json)
Hash identifier: Hp+DUNnYgAzZQ1uK2e7cDsxuFkjfVONN2QsoRpLvTKE=
Subject key identifier: B3:BE:E5:2D:4E:5C:18:AA:49:A9:C0:73:A2:BD:5C:CC:A6:32:D8:05
Certificate issuer: /CN=df7ca79a-f8f5-408a-86fb-472d63ed156f
Certificate serial: 010D0C9F43285848F22C665B478EF1EEAE727880
Authority key identifier: CD:25:D2:1D:B4:E5:3B:C2:CE:4F:45:5C:0F:74:36:4D:CA:A2:45:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/71b533e2-7f33-3621-b9d4-739786613f23.roa
Signing time: Thu 20 Feb 2025 14:00:52 +0000
ROA not before: Thu 20 Feb 2025 14:00:52 +0000
ROA not after: Wed 21 May 2025 13:00:52 +0000
asID: 62537
IP address blocks: 66.85.48.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/df7ca79a-f8f5-408a-86fb-472d63ed156f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/df7ca79a-f8f5-408a-86fb-472d63ed156f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 16 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:2c:66:5b:47:8e:f1:ee:ae:72:78:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7ca79a-f8f5-408a-86fb-472d63ed156f
Validity
Not Before: Feb 20 14:00:52 2025 GMT
Not After : May 21 13:00:52 2025 GMT
Subject: CN=9b136ce9-ef56-4361-b32b-2d059028bb7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:98:6d:b4:1e:a4:60:f8:ec:a3:08:6e:0d:a0:
9c:ff:3e:94:31:6d:86:d2:30:9d:c4:df:37:75:af:
ea:d8:03:24:9e:90:a6:57:2c:31:69:9a:42:2c:10:
8a:e3:31:11:0c:32:66:61:47:4a:7b:64:48:5e:5f:
d6:d5:69:04:cf:a8:fc:e9:44:85:eb:fd:f8:98:10:
f9:87:79:b3:80:2a:a1:27:a1:90:cb:61:8e:a4:b3:
23:4f:60:65:f4:82:fe:f3:4b:92:51:60:48:b9:89:
c6:a3:40:8c:4f:04:9c:66:22:7a:71:26:d7:b1:36:
d5:da:b8:d9:56:01:73:b5:b0:7b:ca:27:66:17:ab:
dc:c0:17:3f:d9:b2:ca:bc:d6:ee:9d:30:be:16:b2:
34:94:f7:d4:de:2b:81:bb:8b:16:02:db:88:14:cf:
c2:15:ac:2a:53:63:0d:20:bc:2d:70:77:96:3b:56:
d7:d9:af:ab:5e:e6:8a:e8:79:90:af:ce:08:c6:81:
78:aa:77:34:ea:5a:75:de:57:e4:77:60:c3:67:5b:
7e:24:ef:b7:ff:d0:80:1b:08:4e:d5:70:14:01:2e:
6e:5e:29:66:7d:8a:49:6b:d1:f7:2f:52:b6:b5:af:
75:00:cd:51:50:a9:14:5e:6d:f4:69:23:ec:1f:3f:
69:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:BE:E5:2D:4E:5C:18:AA:49:A9:C0:73:A2:BD:5C:CC:A6:32:D8:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/71b533e2-7f33-3621-b9d4-739786613f23.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/df7ca79a-f8f5-408a-86fb-472d63ed156f.crl
X509v3 Authority Key Identifier:
keyid:CD:25:D2:1D:B4:E5:3B:C2:CE:4F:45:5C:0F:74:36:4D:CA:A2:45:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f.cer
sbgp-ipAddrBlock: critical
IPv4:
66.85.48.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:fb:43:b1:f2:de:c3:f5:b7:7c:97:6d:d7:2d:fa:27:10:9c:
8d:ba:9e:9d:4b:29:f3:8b:76:8c:00:8f:95:bf:5f:37:52:5b:
f0:1a:9a:88:3d:8e:ef:44:62:0f:dd:af:f5:79:4e:86:85:42:
39:bd:67:9d:46:9a:4a:78:a1:73:da:82:43:a2:87:1a:63:56:
cf:b4:af:6e:9a:25:73:e0:f4:f9:89:8f:a6:eb:24:ee:2e:97:
65:26:ff:de:d4:6e:86:77:de:93:fd:11:0b:88:1c:83:16:68:
11:a3:23:e3:74:dc:f7:96:00:37:62:9b:3f:47:d8:d1:c7:c2:
f3:35:76:73:d2:91:a1:21:c2:3a:16:4b:fb:53:54:f9:22:99:
60:98:8b:06:79:4d:45:e4:cc:f8:f6:13:67:9d:a5:c0:bb:f3:
f9:1e:17:8e:52:8f:d9:98:67:63:66:b8:4a:0d:ff:94:c9:41:
30:72:a1:16:59:65:af:17:21:ff:81:73:50:e4:05:9b:03:51:
45:b9:e8:b1:5b:8e:03:6c:72:5e:ac:bf:93:88:c2:66:92:85:
b5:42:c1:60:8c:12:6d:90:6a:69:d5:c4:db:0c:10:cf:06:c1:
d6:52:84:17:52:99:e3:76:30:82:63:3a:d5:6c:8b:d4:93:a8:
67:88:6a:fe
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLGZbR47x7q5yeIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGY3Y2E3OWEtZjhmNS00MDhhLTg2ZmItNDcyZDYzZWQx
NTZmMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk
OWIxMzZjZTktZWY1Ni00MzYxLWIzMmItMmQwNTkwMjhiYjdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApphttB6kYPjsowhuDaCc/z6UMW2G0jCdxN83
da/q2AMknpCmVywxaZpCLBCK4zERDDJmYUdKe2RIXl/W1WkEz6j86USF6/34mBD5
h3mzgCqhJ6GQy2GOpLMjT2Bl9IL+80uSUWBIuYnGo0CMTwScZiJ6cSbXsTbV2rjZ
VgFztbB7yidmF6vcwBc/2bLKvNbunTC+FrI0lPfU3iuBu4sWAtuIFM/CFawqU2MN
ILwtcHeWO1bX2a+rXuaK6HmQr84IxoF4qnc06lp13lfkd2DDZ1t+JO+3/9CAGwhO
1XAUAS5uXilmfYpJa9H3L1K2ta91AM1RUKkUXm30aSPsHz9pJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLO+5S1OXBiqSanAc6K9XMymMtgFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjdj
YTc5YS1mOGY1LTQwOGEtODZmYi00NzJkNjNlZDE1NmYvNzFiNTMzZTItN2YzMy0z
NjIxLWI5ZDQtNzM5Nzg2NjEzZjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGY3Y2E3OWEtZjhmNS00MDhhLTg2
ZmItNDcyZDYzZWQxNTZmL2RmN2NhNzlhLWY4ZjUtNDA4YS04NmZiLTQ3MmQ2M2Vk
MTU2Zi5jcmwwHwYDVR0jBBgwFoAUzSXSHbTlO8LOT0VcD3Q2TcqiRZ4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjdjYTc5YS1mOGY1LTQwOGEtODZmYi00NzJk
NjNlZDE1NmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQlUwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAED7Q7Hy3sP1t3yXbdct+icQnI26np1LKfOLdowAj5W/XzdSW/Aamog9
ju9EYg/dr/V5ToaFQjm9Z51Gmkp4oXPagkOihxpjVs+0r26aJXPg9PmJj6brJO4u
l2Um/97UboZ33pP9EQuIHIMWaBGjI+N03PeWADdimz9H2NHHwvM1dnPSkaEhwjoW
S/tTVPkimWCYiwZ5TUXkzPj2E2edpcC78/keF45Sj9mYZ2NmuEoN/5TJQTByoRZZ
Za8XIf+Bc1DkBZsDUUW56LFbjgNscl6sv5OIwmaShbVCwWCMEm2QamnVxNsMEM8G
wdZShBdSmeN2MIJjOtVsi9STqGeIav4=
-----END CERTIFICATE-----
Generated at Tue Apr 15 12:43:38 2025 by rpki-client