Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9/04820b76-4425-3cac-b7e3-17376625637b.roa
File: 04820b76-4425-3cac-b7e3-17376625637b.roa (raw, json)
Hash identifier: hjW8iSb2/Hhir75CByxjKRG4qdgY6BQLznm/4ChB7pY=
Subject key identifier: C8:71:84:48:7A:58:BF:77:56:26:88:FD:FC:90:B5:D9:6B:F9:DD:00
Certificate issuer: /CN=260cabab-b89d-4556-b9b1-e5a87b9523b9
Certificate serial: 010D0C9F4328584973DEE7AD371475D5E1818140
Authority key identifier: 80:87:C3:C4:10:0E:F3:6D:64:9B:3F:AC:82:67:48:43:74:E5:EE:EE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9/04820b76-4425-3cac-b7e3-17376625637b.roa
Signing time: Tue 08 Apr 2025 01:00:47 +0000
ROA not before: Tue 08 Apr 2025 01:00:47 +0000
ROA not after: Mon 07 Jul 2025 01:00:47 +0000
asID: 12119
IP address blocks: 23.249.32.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9/260cabab-b89d-4556-b9b1-e5a87b9523b9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9/260cabab-b89d-4556-b9b1-e5a87b9523b9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:73:de:e7:ad:37:14:75:d5:e1:81:81:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=260cabab-b89d-4556-b9b1-e5a87b9523b9
Validity
Not Before: Apr 8 01:00:47 2025 GMT
Not After : Jul 7 01:00:47 2025 GMT
Subject: CN=c9449577-5f7b-473e-b327-afc64fe4192c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7f:f3:49:70:6c:71:6f:38:8b:6f:8c:96:c7:
13:45:1b:88:ee:70:da:12:cb:99:eb:1c:0c:a5:28:
86:96:5a:db:60:75:66:57:88:56:1a:e6:eb:c5:17:
57:24:6d:e3:a8:85:b6:13:fd:0d:52:30:ef:c7:07:
3e:eb:f6:a0:eb:c7:7b:3c:55:2a:3c:5a:a2:31:48:
52:1c:c6:23:19:8e:91:c0:95:eb:7b:bb:32:2d:4d:
eb:51:e7:ea:8b:a9:46:15:9a:e6:95:58:b6:4b:9d:
6d:43:be:b6:62:e2:e4:eb:ec:04:cb:fc:9f:a1:c1:
11:38:29:60:2f:a7:44:fa:3d:62:2a:81:af:fd:2e:
6d:9b:5e:b7:e0:9e:4e:59:71:46:40:98:e8:f9:4f:
bd:90:40:e7:c4:24:b4:04:1f:e2:41:0f:e0:d6:c0:
fe:13:ef:db:a9:e1:71:ca:ff:30:c9:12:e1:34:55:
3b:d1:45:28:d9:c5:25:0d:17:66:34:0c:a8:56:ff:
01:1d:07:be:00:a1:12:a2:a2:79:43:91:1f:b9:d2:
67:23:da:43:c3:50:3a:1a:18:49:94:df:5a:09:40:
65:86:a7:47:fc:a8:da:71:7c:8b:36:1b:32:8c:da:
86:d7:ee:64:ad:42:be:03:48:8b:96:bc:8e:93:cd:
49:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:71:84:48:7A:58:BF:77:56:26:88:FD:FC:90:B5:D9:6B:F9:DD:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9/04820b76-4425-3cac-b7e3-17376625637b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9/260cabab-b89d-4556-b9b1-e5a87b9523b9.crl
X509v3 Authority Key Identifier:
keyid:80:87:C3:C4:10:0E:F3:6D:64:9B:3F:AC:82:67:48:43:74:E5:EE:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9.cer
sbgp-ipAddrBlock: critical
IPv4:
23.249.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:aa:d2:2b:f5:3d:37:d0:05:9d:48:64:74:38:5d:93:03:4c:
be:4d:57:d1:1f:c2:31:dc:64:4c:7d:11:1b:34:f4:31:2e:94:
b4:75:44:0c:d4:2f:43:9d:de:d3:c8:83:c4:42:98:ad:a4:11:
8b:ad:87:30:38:96:30:35:23:8d:05:55:32:8c:aa:95:f3:f0:
7a:23:dc:62:f2:0e:99:79:a7:b0:ec:86:b8:10:f5:81:52:1c:
d2:af:dd:5d:65:f2:72:6a:6b:e0:3d:4d:56:a8:34:a9:69:c2:
75:68:34:64:ce:8a:ba:f1:e0:3a:e0:46:d9:3d:d8:94:b5:ad:
4d:02:d5:f1:ff:40:3e:74:2e:8b:f6:43:3c:39:1d:bf:e3:53:
c7:02:42:ae:be:a2:c7:da:57:17:ca:95:46:d5:ea:59:c3:90:
a4:22:b6:50:7b:d7:89:a8:ad:a2:bd:43:67:c8:92:2e:4f:71:
c1:01:0e:e0:fa:1a:fc:61:4c:fb:86:76:20:6b:79:5e:44:99:
2f:27:d0:4c:6c:6e:ac:27:00:56:23:dd:d7:50:8e:c7:0a:14:
7a:25:08:e2:d2:db:fa:d3:5a:74:e6:c2:1d:6d:c8:16:7e:48:
eb:d9:6a:b1:dd:d7:fd:49:1b:fd:8b:1f:0a:7f:d8:5c:01:b0:
21:d1:2e:75
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElz3uetNxR11eGBgUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjYwY2FiYWItYjg5ZC00NTU2LWI5YjEtZTVhODdiOTUy
M2I5MB4XDTI1MDQwODAxMDA0N1oXDTI1MDcwNzAxMDA0N1owLzEtMCsGA1UEAxMk
Yzk0NDk1NzctNWY3Yi00NzNlLWIzMjctYWZjNjRmZTQxOTJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApn/zSXBscW84i2+MlscTRRuI7nDaEsuZ6xwM
pSiGllrbYHVmV4hWGubrxRdXJG3jqIW2E/0NUjDvxwc+6/ag68d7PFUqPFqiMUhS
HMYjGY6RwJXre7syLU3rUefqi6lGFZrmlVi2S51tQ762YuLk6+wEy/yfocEROClg
L6dE+j1iKoGv/S5tm1634J5OWXFGQJjo+U+9kEDnxCS0BB/iQQ/g1sD+E+/bqeFx
yv8wyRLhNFU70UUo2cUlDRdmNAyoVv8BHQe+AKESoqJ5Q5EfudJnI9pDw1A6GhhJ
lN9aCUBlhqdH/KjacXyLNhsyjNqG1+5krUK+A0iLlryOk81JXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMhxhEh6WL93ViaI/fyQtdlr+d0AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yNjBj
YWJhYi1iODlkLTQ1NTYtYjliMS1lNWE4N2I5NTIzYjkvMDQ4MjBiNzYtNDQyNS0z
Y2FjLWI3ZTMtMTczNzY2MjU2MzdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjYwY2FiYWItYjg5ZC00NTU2LWI5
YjEtZTVhODdiOTUyM2I5LzI2MGNhYmFiLWI4OWQtNDU1Ni1iOWIxLWU1YTg3Yjk1
MjNiOS5jcmwwHwYDVR0jBBgwFoAUgIfDxBAO821kmz+sgmdIQ3Tl7u4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8yNjBjYWJhYi1iODlkLTQ1NTYtYjliMS1lNWE4
N2I5NTIzYjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF/kgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJOq0iv1PTfQBZ1IZHQ4XZMDTL5NV9EfwjHcZEx9ERs09DEulLR1RAzU
L0Od3tPIg8RCmK2kEYuthzA4ljA1I40FVTKMqpXz8Hoj3GLyDpl5p7DshrgQ9YFS
HNKv3V1l8nJqa+A9TVaoNKlpwnVoNGTOirrx4DrgRtk92JS1rU0C1fH/QD50Lov2
Qzw5Hb/jU8cCQq6+osfaVxfKlUbV6lnDkKQitlB714moraK9Q2fIki5PccEBDuD6
GvxhTPuGdiBreV5EmS8n0ExsbqwnAFYj3ddQjscKFHolCOLS2/rTWnTmwh1tyBZ+
SOvZarHd1/1JG/2LHwp/2FwBsCHRLnU=
-----END CERTIFICATE-----
Generated at Thu Apr 10 17:26:21 2025 by rpki-client