Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/a4715222-51fd-3cc6-b174-0aa94bf55e04.roa
File: a4715222-51fd-3cc6-b174-0aa94bf55e04.roa (raw, json)
Hash identifier: zvPR6M0i62E9BNsfZwe/91uq4apyYqkWnGf4YY6/6NY=
Subject key identifier: 53:54:1A:A7:56:81:50:6F:74:F0:48:A3:26:73:7B:53:B3:96:E9:AD
Certificate issuer: /CN=71e68809-5436-4288-ad80-0df35fa0b945
Certificate serial: 010D0C9F432858492CAE9A48544E2495A8E4C660
Authority key identifier: 10:50:00:5F:86:30:2A:B9:1E:85:F6:50:F6:72:D3:32:A5:BB:54:4E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/a4715222-51fd-3cc6-b174-0aa94bf55e04.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 8075
IP address blocks: 192.28.24.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:ae:9a:48:54:4e:24:95:a8:e4:c6:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71e68809-5436-4288-ad80-0df35fa0b945
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=4cf55723-f845-4903-91dd-2e6368310a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:78:a6:35:a3:f0:3b:24:36:a0:bb:47:8d:23:
3a:31:25:10:72:ff:7f:d6:dd:67:ee:c3:62:25:56:
63:92:15:5c:20:1d:0b:32:b2:d9:16:d6:bb:8c:f5:
6c:4e:28:6b:8a:ba:09:0c:73:cd:db:35:60:68:de:
73:59:84:ff:30:f8:a0:d8:e5:9e:35:fa:af:3d:4f:
ee:37:ec:ed:6f:13:bf:e3:34:5b:24:59:f4:0c:46:
f8:b7:5e:9d:c9:a2:af:77:82:8e:d3:db:83:a4:5a:
07:ab:20:5a:64:e7:21:a5:55:1d:8e:9f:36:d3:50:
3b:43:47:5e:2f:ad:11:49:96:63:58:b6:4d:44:d8:
f5:5b:2a:3f:3a:29:5a:ab:98:4b:ee:f0:7b:1d:68:
21:39:4a:c6:a5:4f:b8:fd:c0:37:f3:79:3f:9f:d5:
08:69:9f:65:4d:b6:f9:09:b6:15:82:e7:6b:87:42:
9f:d2:9d:0d:15:ac:d7:c0:9e:3e:c1:54:00:e1:cf:
f1:eb:19:79:97:7f:b7:ed:3a:23:cf:f8:04:aa:4a:
8b:cb:90:3d:9f:54:f4:1e:6e:d9:4e:5a:7e:ea:1f:
20:0d:02:c2:36:0b:05:41:bd:df:11:44:dd:76:de:
80:ff:b2:ce:93:f0:61:fb:dd:ae:8f:ec:54:bd:11:
aa:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:54:1A:A7:56:81:50:6F:74:F0:48:A3:26:73:7B:53:B3:96:E9:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/a4715222-51fd-3cc6-b174-0aa94bf55e04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.crl
X509v3 Authority Key Identifier:
keyid:10:50:00:5F:86:30:2A:B9:1E:85:F6:50:F6:72:D3:32:A5:BB:54:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer
sbgp-ipAddrBlock: critical
IPv4:
192.28.24.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:9a:68:25:94:8d:e2:62:b7:86:98:af:a2:32:12:69:e4:fc:
14:4b:d6:42:2a:23:1b:6f:eb:36:47:cd:76:99:cf:03:78:fc:
13:48:75:aa:64:12:18:85:4d:18:67:73:8b:86:a4:bf:89:89:
d6:e2:79:4a:7d:8c:e5:dc:90:af:4e:3e:e0:e2:a8:b1:89:15:
2f:b7:bb:a1:9b:e1:95:6a:04:ec:3b:23:57:55:f0:9b:9d:c7:
ee:8a:0b:27:53:60:ab:34:a2:9f:2b:42:d2:2b:23:19:fc:3f:
75:09:21:ff:23:b3:9e:1a:c5:a5:b8:ca:4a:84:80:a1:71:39:
2c:af:4d:1a:41:e8:f8:68:ed:e2:f1:4b:5b:63:b1:51:ba:b0:
71:61:e2:34:4a:9c:ee:72:46:37:ac:26:e7:2b:a1:0c:66:72:
38:ef:47:22:e7:6a:c9:b5:9b:e4:c7:ea:5c:60:ab:22:43:7f:
ba:87:7e:54:1b:a8:7f:72:10:e7:14:0b:93:39:92:50:0b:09:
7b:df:2b:f9:f3:3d:2e:65:5f:6b:f8:f1:e6:dc:fa:ce:29:1a:
3f:be:23:4d:f3:2f:20:9a:ca:97:7d:87:6b:0c:47:db:f0:f7:
23:c8:58:14:3e:7e:b5:88:9e:e4:7d:74:e2:f4:50:db:76:9f:
ed:8c:e0:3d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrppIVE4klajkxmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzFlNjg4MDktNTQzNi00Mjg4LWFkODAtMGRmMzVmYTBi
OTQ1MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
NGNmNTU3MjMtZjg0NS00OTAzLTkxZGQtMmU2MzY4MzEwYTM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3imNaPwOyQ2oLtHjSM6MSUQcv9/1t1n7sNi
JVZjkhVcIB0LMrLZFta7jPVsTihriroJDHPN2zVgaN5zWYT/MPig2OWeNfqvPU/u
N+ztbxO/4zRbJFn0DEb4t16dyaKvd4KO09uDpFoHqyBaZOchpVUdjp8201A7Q0de
L60RSZZjWLZNRNj1Wyo/Oilaq5hL7vB7HWghOUrGpU+4/cA383k/n9UIaZ9lTbb5
CbYVgudrh0Kf0p0NFazXwJ4+wVQA4c/x6xl5l3+37Tojz/gEqkqLy5A9n1T0Hm7Z
Tlp+6h8gDQLCNgsFQb3fEUTddt6A/7LOk/Bh+92uj+xUvRGqEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFNUGqdWgVBvdPBIoyZze1OzlumtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83MWU2
ODgwOS01NDM2LTQyODgtYWQ4MC0wZGYzNWZhMGI5NDUvYTQ3MTUyMjItNTFmZC0z
Y2M2LWIxNzQtMGFhOTRiZjU1ZTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzFlNjg4MDktNTQzNi00Mjg4LWFk
ODAtMGRmMzVmYTBiOTQ1LzcxZTY4ODA5LTU0MzYtNDI4OC1hZDgwLTBkZjM1ZmEw
Yjk0NS5jcmwwHwYDVR0jBBgwFoAUEFAAX4YwKrkehfZQ9nLTMqW7VE4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83MWU2ODgwOS01NDM2LTQyODgtYWQ4MC0wZGYz
NWZhMGI5NDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwBwYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFSaaCWUjeJit4aYr6IyEmnk/BRL1kIqIxtv6zZHzXaZzwN4/BNIdapk
EhiFTRhnc4uGpL+JidbieUp9jOXckK9OPuDiqLGJFS+3u6Gb4ZVqBOw7I1dV8Jud
x+6KCydTYKs0op8rQtIrIxn8P3UJIf8js54axaW4ykqEgKFxOSyvTRpB6Pho7eLx
S1tjsVG6sHFh4jRKnO5yRjesJucroQxmcjjvRyLnasm1m+TH6lxgqyJDf7qHflQb
qH9yEOcUC5M5klALCXvfK/nzPS5lX2v48ebc+s4pGj++I03zLyCaypd9h2sMR9vw
9yPIWBQ+frWInuR9dOL0UNt2n+2M4D0=
-----END CERTIFICATE-----
Generated at Thu Apr 10 08:22:53 2025 by rpki-client