Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341/6861e73e-e2e8-37e1-b70b-ce93935e9526.roa
File: 6861e73e-e2e8-37e1-b70b-ce93935e9526.roa (raw, json)
Hash identifier: 4Dx/aPf90UV85PdKewTHaAk5bhETPV9Ejovit+BSHDE=
Subject key identifier: D3:10:4D:0E:E2:5E:89:CC:BF:6E:E5:2C:98:12:BF:F2:9D:1E:05:95
Certificate issuer: /CN=b8a0e292-3e8f-447b-81c6-cedef4747341
Certificate serial: 010D0C9F4328584921840C89D6213484797A2A56
Authority key identifier: 83:A3:6C:9B:30:E5:DE:80:EC:B3:A4:FC:42:E5:52:72:23:88:DA:0F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341/6861e73e-e2e8-37e1-b70b-ce93935e9526.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 398274
IP address blocks: 64.202.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341/b8a0e292-3e8f-447b-81c6-cedef4747341.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341/b8a0e292-3e8f-447b-81c6-cedef4747341.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:84:0c:89:d6:21:34:84:79:7a:2a:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8a0e292-3e8f-447b-81c6-cedef4747341
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=ac02bd6d-a4a9-4956-96b9-1f6470bd306c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:ac:7a:c4:b1:48:86:46:5c:91:88:64:de:2c:
a5:f2:7b:ab:08:ad:22:c6:63:b3:d0:fd:3d:f9:96:
e7:85:80:39:71:ad:36:70:a8:3d:63:c6:36:1e:5e:
40:9c:0c:3d:6e:4d:38:bb:9e:a8:43:19:31:13:20:
f8:1a:f5:66:4c:94:ab:7d:da:37:c6:46:39:03:33:
ba:51:97:3b:35:90:88:8f:21:39:e7:71:ca:92:dd:
1f:2f:2c:2c:ee:11:76:3d:fd:99:49:90:09:ea:d6:
ef:62:7e:a0:0f:1f:69:07:7b:25:d0:0a:32:13:75:
9e:da:ec:2d:de:05:84:71:bf:45:36:f0:19:5e:b6:
31:35:9e:6c:b6:8a:04:9c:29:6c:fc:aa:74:b3:db:
c9:06:7c:05:ed:7c:eb:e6:9e:68:42:13:73:4e:eb:
47:6f:de:cf:48:19:b4:85:72:29:39:ee:0f:80:b7:
ca:97:29:53:39:49:28:7a:15:27:27:52:1d:32:61:
cf:cc:eb:1f:a9:77:2c:3e:63:c0:94:69:6a:ab:40:
9c:7e:b1:90:eb:77:66:9a:27:aa:a4:9f:49:9e:fc:
73:55:13:78:df:27:d5:7b:c6:b9:19:85:88:de:9e:
e0:50:1b:43:be:b9:15:02:ff:c7:d5:51:d7:44:6c:
ad:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:10:4D:0E:E2:5E:89:CC:BF:6E:E5:2C:98:12:BF:F2:9D:1E:05:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341/6861e73e-e2e8-37e1-b70b-ce93935e9526.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341/b8a0e292-3e8f-447b-81c6-cedef4747341.crl
X509v3 Authority Key Identifier:
keyid:83:A3:6C:9B:30:E5:DE:80:EC:B3:A4:FC:42:E5:52:72:23:88:DA:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341.cer
sbgp-ipAddrBlock: critical
IPv4:
64.202.217.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:72:41:e2:14:4f:a5:0c:4b:2f:59:e0:b3:a6:a9:4b:3f:c6:
9d:c1:3b:07:4b:55:9d:a2:82:38:f5:14:bd:38:64:41:38:e2:
2a:1a:7f:d8:d3:18:3f:c3:fe:c0:dd:2d:55:28:ec:6d:90:59:
96:df:6b:6a:4a:de:c5:1d:70:13:3f:17:ce:48:44:f1:66:dc:
fb:fc:1f:94:40:06:37:45:ee:d8:c7:2f:01:35:d3:00:04:e9:
14:b9:a2:5b:f2:14:46:69:56:82:7e:9a:ec:e1:66:b7:71:f9:
1e:b4:37:8a:f8:73:a6:fb:28:73:ef:17:bf:e3:de:36:fa:9a:
ff:a2:2f:12:5f:03:99:c7:66:89:51:52:5f:6b:6a:8c:de:10:
c5:c6:bd:36:21:b0:7e:3a:48:3c:a0:10:91:81:d3:2e:14:24:
bc:0c:fc:a8:b4:dd:02:4a:37:c0:9c:d9:62:23:8c:1f:f9:ba:
eb:51:06:00:fb:8a:ed:35:29:0d:69:fd:e4:cc:7e:b7:74:b3:
6c:2b:1c:90:5d:b3:2b:19:d7:4d:e4:14:56:f8:a5:3e:c8:4c:
e7:ad:04:4b:1a:9a:a8:70:aa:97:74:2b:c7:05:4d:2d:23:58:
dd:87:1d:93:5e:29:cd:40:a0:59:12:69:dc:7c:be:a0:a3:08:
c6:52:16:f2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhhAyJ1iE0hHl6KlYwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhhMGUyOTItM2U4Zi00NDdiLTgxYzYtY2VkZWY0NzQ3
MzQxMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk
YWMwMmJkNmQtYTRhOS00OTU2LTk2YjktMWY2NDcwYmQzMDZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+qx6xLFIhkZckYhk3iyl8nurCK0ixmOz0P09
+ZbnhYA5ca02cKg9Y8Y2Hl5AnAw9bk04u56oQxkxEyD4GvVmTJSrfdo3xkY5AzO6
UZc7NZCIjyE553HKkt0fLyws7hF2Pf2ZSZAJ6tbvYn6gDx9pB3sl0AoyE3We2uwt
3gWEcb9FNvAZXrYxNZ5stooEnCls/Kp0s9vJBnwF7Xzr5p5oQhNzTutHb97PSBm0
hXIpOe4PgLfKlylTOUkoehUnJ1IdMmHPzOsfqXcsPmPAlGlqq0CcfrGQ63dmmieq
pJ9JnvxzVRN43yfVe8a5GYWI3p7gUBtDvrkVAv/H1VHXRGytfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNMQTQ7iXonMv27lLJgSv/KdHgWVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iOGEw
ZTI5Mi0zZThmLTQ0N2ItODFjNi1jZWRlZjQ3NDczNDEvNjg2MWU3M2UtZTJlOC0z
N2UxLWI3MGItY2U5MzkzNWU5NTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjhhMGUyOTItM2U4Zi00NDdiLTgx
YzYtY2VkZWY0NzQ3MzQxL2I4YTBlMjkyLTNlOGYtNDQ3Yi04MWM2LWNlZGVmNDc0
NzM0MS5jcmwwHwYDVR0jBBgwFoAUg6NsmzDl3oDss6T8QuVSciOI2g8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9iOGEwZTI5Mi0zZThmLTQ0N2ItODFjNi1jZWRl
ZjQ3NDczNDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMrZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAVyQeIUT6UMSy9Z4LOmqUs/xp3BOwdLVZ2igjj1FL04ZEE44ioaf9jT
GD/D/sDdLVUo7G2QWZbfa2pK3sUdcBM/F85IRPFm3Pv8H5RABjdF7tjHLwE10wAE
6RS5olvyFEZpVoJ+muzhZrdx+R60N4r4c6b7KHPvF7/j3jb6mv+iLxJfA5nHZolR
Ul9raozeEMXGvTYhsH46SDygEJGB0y4UJLwM/Ki03QJKN8Cc2WIjjB/5uutRBgD7
iu01KQ1p/eTMfrd0s2wrHJBdsysZ103kFFb4pT7ITOetBEsamqhwqpd0K8cFTS0j
WN2HHZNeKc1AoFkSadx8vqCjCMZSFvI=
-----END CERTIFICATE-----
Generated at Wed Apr 9 12:58:35 2025 by rpki-client