Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/b09245bf-b3ad-356b-81f0-f0f8bf033b0c.roa
File: b09245bf-b3ad-356b-81f0-f0f8bf033b0c.roa (raw, json)
Hash identifier: 9GRQLUMbu2MQ7Lmw9rnFAt/QSC6BggUc16Y9tXt8tJs=
Subject key identifier: BA:3F:58:1A:11:B9:8D:A7:41:B8:B9:79:5E:74:73:5D:8D:34:48:DA
Certificate issuer: /CN=7e4fb68f-edad-45a2-98d4-e937526bfa31
Certificate serial: 010D0C9F43285848DA70FAFB2D9A08BC2ADD1740
Authority key identifier: 43:79:8E:C3:30:41:09:01:3D:81:6A:0F:39:2B:8F:AB:7E:9B:B8:38
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/b09245bf-b3ad-356b-81f0-f0f8bf033b0c.roa
Signing time: Wed 12 Feb 2025 02:00:39 +0000
ROA not before: Wed 12 Feb 2025 02:00:39 +0000
ROA not after: Tue 13 May 2025 01:00:39 +0000
asID: 958
IP address blocks: 2605:ac40:20::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/7e4fb68f-edad-45a2-98d4-e937526bfa31.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/7e4fb68f-edad-45a2-98d4-e937526bfa31.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:da:70:fa:fb:2d:9a:08:bc:2a:dd:17:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e4fb68f-edad-45a2-98d4-e937526bfa31
Validity
Not Before: Feb 12 02:00:39 2025 GMT
Not After : May 13 01:00:39 2025 GMT
Subject: CN=12ad02da-53b3-48d8-98c7-0b1264067af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:96:a4:29:66:8d:69:38:7b:48:68:65:91:c8:
67:01:25:01:ee:ea:0b:5f:60:ca:2e:0f:eb:19:ae:
23:46:0e:12:9a:e7:6f:54:1d:1a:6d:45:a2:eb:06:
ec:15:a4:aa:41:8f:87:2b:75:41:e0:50:72:d5:14:
3a:c7:2c:d7:c3:5c:15:84:90:71:9a:4b:f4:61:db:
2c:af:48:38:9b:84:af:a0:49:03:14:06:df:b5:c9:
b8:17:e2:5b:28:c1:b0:8c:bb:83:be:1a:20:b5:42:
90:13:f6:c0:08:53:d9:b7:66:4e:40:43:0d:5d:b4:
fc:e9:92:c6:e8:b5:c1:c4:a4:61:98:c5:8a:e9:da:
69:92:83:41:74:a8:79:bb:55:7d:c0:92:7b:f7:88:
7b:02:b7:bf:6b:ce:b9:43:11:80:28:59:96:12:9e:
5b:59:6d:4b:b3:ad:1c:d2:39:d1:54:93:f5:df:27:
0a:08:fe:d7:5c:33:37:67:97:33:6d:93:15:64:fc:
07:9a:42:ef:f1:47:cf:ee:59:bd:c2:4a:3f:11:34:
96:f6:19:02:92:73:5f:f7:8d:c6:30:59:ff:b4:d0:
20:59:df:f7:f8:e6:53:3a:39:af:5d:87:20:b3:10:
b7:3b:ab:a9:44:3f:4b:dd:0a:02:61:f8:e5:7d:39:
c1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:3F:58:1A:11:B9:8D:A7:41:B8:B9:79:5E:74:73:5D:8D:34:48:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/b09245bf-b3ad-356b-81f0-f0f8bf033b0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/7e4fb68f-edad-45a2-98d4-e937526bfa31.crl
X509v3 Authority Key Identifier:
keyid:43:79:8E:C3:30:41:09:01:3D:81:6A:0F:39:2B:8F:AB:7E:9B:B8:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:ac40:20::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:44:2b:d8:8e:92:9b:f6:d2:20:a3:94:20:eb:bb:81:5f:d8:
ce:95:eb:ba:60:5e:48:d7:65:22:60:9d:87:12:f4:a6:cf:e7:
aa:f1:ea:63:07:b4:2f:81:76:dd:08:97:c9:9c:f5:ae:4d:f7:
96:9e:68:17:45:9d:bb:a6:87:1a:b8:2f:6f:c9:3f:bc:4f:1c:
1d:af:99:89:f8:67:68:71:d3:7e:b6:22:a2:b4:f0:72:33:24:
bb:fc:6c:04:41:be:b2:fa:4d:26:3f:75:0e:93:41:b8:b0:bc:
31:69:c6:8e:09:67:7a:99:9f:62:15:c9:cd:8e:39:4c:ff:0a:
b2:88:72:e9:b8:cb:69:cb:10:a8:75:0d:17:be:7c:85:00:ee:
3e:cb:e9:cd:cf:6d:c1:6f:89:b7:78:ce:60:9b:b7:b0:f9:ee:
dc:d5:20:f3:55:43:76:88:3e:1b:39:fe:52:42:88:36:a6:54:
7b:5d:f1:a3:d1:47:d8:a2:6d:53:d1:1b:d7:77:d9:47:67:41:
b7:ea:7c:b6:6e:13:82:53:b3:95:37:12:67:80:d5:7f:f0:75:
dd:03:19:a6:90:41:fd:94:ad:c5:5e:49:a9:10:4d:28:cc:e5:
66:fa:6a:81:11:27:bc:f3:b3:e7:8b:bb:cf:db:d2:98:55:74:
9d:fa:24:58
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjacPr7LZoIvCrdF0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0ZmI2OGYtZWRhZC00NWEyLTk4ZDQtZTkzNzUyNmJm
YTMxMB4XDTI1MDIxMjAyMDAzOVoXDTI1MDUxMzAxMDAzOVowLzEtMCsGA1UEAxMk
MTJhZDAyZGEtNTNiMy00OGQ4LTk4YzctMGIxMjY0MDY3YWY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspakKWaNaTh7SGhlkchnASUB7uoLX2DKLg/r
Ga4jRg4SmudvVB0abUWi6wbsFaSqQY+HK3VB4FBy1RQ6xyzXw1wVhJBxmkv0Ydss
r0g4m4SvoEkDFAbftcm4F+JbKMGwjLuDvhogtUKQE/bACFPZt2ZOQEMNXbT86ZLG
6LXBxKRhmMWK6dppkoNBdKh5u1V9wJJ794h7Are/a865QxGAKFmWEp5bWW1Ls60c
0jnRVJP13ycKCP7XXDM3Z5czbZMVZPwHmkLv8UfP7lm9wko/ETSW9hkCknNf943G
MFn/tNAgWd/3+OZTOjmvXYcgsxC3O6upRD9L3QoCYfjlfTnBjQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLo/WBoRuY2nQbi5eV50c12NNEjaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTRm
YjY4Zi1lZGFkLTQ1YTItOThkNC1lOTM3NTI2YmZhMzEvYjA5MjQ1YmYtYjNhZC0z
NTZiLTgxZjAtZjBmOGJmMDMzYjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0ZmI2OGYtZWRhZC00NWEyLTk4
ZDQtZTkzNzUyNmJmYTMxLzdlNGZiNjhmLWVkYWQtNDVhMi05OGQ0LWU5Mzc1MjZi
ZmEzMS5jcmwwHwYDVR0jBBgwFoAUQ3mOwzBBCQE9gWoPOSuPq36buDgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTRmYjY4Zi1lZGFkLTQ1YTItOThkNC1lOTM3
NTI2YmZhMzEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgWsQAAg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAItEK9iOkpv20iCjlCDru4Ff2M6V67pgXkjXZSJgnYcS9KbP56rx
6mMHtC+Bdt0Il8mc9a5N95aeaBdFnbumhxq4L2/JP7xPHB2vmYn4Z2hx0362IqK0
8HIzJLv8bARBvrL6TSY/dQ6TQbiwvDFpxo4JZ3qZn2IVyc2OOUz/CrKIcum4y2nL
EKh1DRe+fIUA7j7L6c3PbcFvibd4zmCbt7D57tzVIPNVQ3aIPhs5/lJCiDamVHtd
8aPRR9iibVPRG9d32UdnQbfqfLZuE4JTs5U3EmeA1X/wdd0DGaaQQf2UrcVeSakQ
TSjM5Wb6aoERJ7zzs+eLu8/b0phVdJ36JFg=
-----END CERTIFICATE-----
Generated at Sat Apr 5 20:57:27 2025 by rpki-client