Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/5ebcd16e-1ba8-3203-84b8-09de0c1f4380.roa
File: 5ebcd16e-1ba8-3203-84b8-09de0c1f4380.roa (raw, json)
Hash identifier: +35SuTs3Wyh25YfhEj6UoVCiSKGz40aYLiJWPSsor4o=
Subject key identifier: CF:24:F5:A7:97:8D:D1:E6:70:F1:EB:99:0D:F8:3A:5A:94:A5:B1:7A
Certificate issuer: /CN=0538ef3c-e342-4e27-a075-8167bc73c054
Certificate serial: 010D0C9F4328584917DC2FF6FB6C5146E44DFAC0
Authority key identifier: 3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/5ebcd16e-1ba8-3203-84b8-09de0c1f4380.roa
Signing time: Thu 06 Mar 2025 02:00:39 +0000
ROA not before: Thu 06 Mar 2025 02:00:39 +0000
ROA not after: Wed 04 Jun 2025 01:00:39 +0000
asID: 11260
IP address blocks: 24.129.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 07 Apr 2025 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:17:dc:2f:f6:fb:6c:51:46:e4:4d:fa:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0538ef3c-e342-4e27-a075-8167bc73c054
Validity
Not Before: Mar 6 02:00:39 2025 GMT
Not After : Jun 4 01:00:39 2025 GMT
Subject: CN=9d9f022c-6578-4f61-947d-afe5a1a215aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:22:e0:c1:30:7e:b3:d3:c8:ea:2f:ac:2e:c1:
ac:75:7f:c6:55:0d:f3:d2:1a:96:05:e1:e4:52:4b:
3e:4d:d0:f5:83:63:6c:86:41:4f:33:57:eb:cb:1c:
52:25:69:a2:63:d5:ba:87:35:ca:78:a7:f3:79:ca:
25:89:41:f3:93:3e:df:58:2e:5c:35:44:fe:24:ee:
f6:96:41:67:d6:f0:9b:11:c3:52:04:14:57:94:a0:
f6:57:55:15:d7:31:cf:46:d5:9a:5b:9f:5c:e0:d8:
f2:73:ba:ee:c7:cc:81:f2:2a:86:62:8f:53:97:7b:
db:61:2a:cf:0a:56:28:8a:1d:8a:64:6b:bf:14:2a:
4d:44:ae:bb:d9:9a:71:f1:82:66:65:39:89:3b:9a:
4c:a5:92:44:03:04:c7:c7:f6:69:18:6c:35:08:04:
d5:f9:6c:47:6d:f0:16:e0:e6:d7:dc:29:7b:62:c3:
c1:cc:08:67:d2:13:41:2d:57:b4:26:67:33:88:90:
3b:07:de:61:08:41:7d:3a:0a:4b:03:e4:2d:37:51:
82:5b:56:f9:d6:57:58:bb:57:bc:90:65:ba:4a:87:
cf:94:5d:48:22:70:04:d3:d1:50:fa:2b:cf:59:5f:
6e:94:2d:64:84:ac:3d:89:9e:86:55:fc:16:b1:51:
83:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:24:F5:A7:97:8D:D1:E6:70:F1:EB:99:0D:F8:3A:5A:94:A5:B1:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/5ebcd16e-1ba8-3203-84b8-09de0c1f4380.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl
X509v3 Authority Key Identifier:
keyid:3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer
sbgp-ipAddrBlock: critical
IPv4:
24.129.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:2a:c8:3a:aa:38:a7:27:cf:61:e9:6f:4c:3c:44:98:5a:5b:
7f:bf:9f:be:e9:86:f2:cd:06:5a:e1:35:f0:e5:c2:32:00:d9:
88:0a:ff:49:7a:4a:19:6b:0b:a2:eb:16:c0:2f:b8:98:2e:d5:
76:4e:ad:2c:81:dc:9a:aa:f4:00:7d:b8:55:96:b4:6d:90:ac:
d0:23:e5:7d:89:d1:d8:49:90:9a:2a:e2:c6:05:c3:ca:17:8b:
72:85:d0:7e:71:7c:41:fe:ad:8f:de:a6:a4:7e:11:2e:65:3f:
10:94:1c:44:d4:9e:0b:ff:23:ad:20:43:8a:33:d0:fe:11:1a:
20:81:e5:2d:8f:21:27:5a:ad:96:7b:a0:64:25:36:ca:8a:20:
b5:17:82:53:0c:8a:1c:0f:33:fc:1e:37:23:f6:dc:1f:36:c1:
76:bd:b1:a8:6a:63:89:74:b0:4a:63:19:ca:ea:3b:8f:4e:63:
26:6b:eb:a2:9f:85:af:7a:5e:88:c6:ae:eb:9a:12:dd:c4:76:
ef:41:16:8d:2d:26:aa:81:a0:01:23:da:80:12:a6:b1:9b:30:
62:49:e2:21:21:a3:cb:8f:cd:3a:c9:76:5b:97:4f:21:87:60:
8a:85:d6:d2:c3:15:0b:16:19:d5:49:ba:3e:ae:03:1c:b3:a9:
fb:a0:5f:7b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3C/2+2xRRuRN+sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDUzOGVmM2MtZTM0Mi00ZTI3LWEwNzUtODE2N2JjNzNj
MDU0MB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk
OWQ5ZjAyMmMtNjU3OC00ZjYxLTk0N2QtYWZlNWExYTIxNWFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiLgwTB+s9PI6i+sLsGsdX/GVQ3z0hqWBeHk
Uks+TdD1g2NshkFPM1fryxxSJWmiY9W6hzXKeKfzecoliUHzkz7fWC5cNUT+JO72
lkFn1vCbEcNSBBRXlKD2V1UV1zHPRtWaW59c4Njyc7rux8yB8iqGYo9Tl3vbYSrP
ClYoih2KZGu/FCpNRK672Zpx8YJmZTmJO5pMpZJEAwTHx/ZpGGw1CATV+WxHbfAW
4ObX3Cl7YsPBzAhn0hNBLVe0JmcziJA7B95hCEF9OgpLA+QtN1GCW1b51ldYu1e8
kGW6SofPlF1IInAE09FQ+ivPWV9ulC1khKw9iZ6GVfwWsVGDZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM8k9aeXjdHmcPHrmQ34OlqUpbF6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNTM4
ZWYzYy1lMzQyLTRlMjctYTA3NS04MTY3YmM3M2MwNTQvNWViY2QxNmUtMWJhOC0z
MjAzLTg0YjgtMDlkZTBjMWY0MzgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDUzOGVmM2MtZTM0Mi00ZTI3LWEw
NzUtODE2N2JjNzNjMDU0LzA1MzhlZjNjLWUzNDItNGUyNy1hMDc1LTgxNjdiYzcz
YzA1NC5jcmwwHwYDVR0jBBgwFoAUPawtOE5IBuFdK6OE1h3WEIXOM4IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wNTM4ZWYzYy1lMzQyLTRlMjctYTA3NS04MTY3
YmM3M2MwNTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGIHgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFEqyDqqOKcnz2Hpb0w8RJhaW3+/n77phvLNBlrhNfDlwjIA2YgK/0l6
ShlrC6LrFsAvuJgu1XZOrSyB3Jqq9AB9uFWWtG2QrNAj5X2J0dhJkJoq4sYFw8oX
i3KF0H5xfEH+rY/epqR+ES5lPxCUHETUngv/I60gQ4oz0P4RGiCB5S2PISdarZZ7
oGQlNsqKILUXglMMihwPM/weNyP23B82wXa9sahqY4l0sEpjGcrqO49OYyZr66Kf
ha96XojGruuaEt3Edu9BFo0tJqqBoAEj2oASprGbMGJJ4iEho8uPzTrJdluXTyGH
YIqF1tLDFQsWGdVJuj6uAxyzqfugX3s=
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:44:34 2025 by rpki-client