Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c17eacde-68de-455f-97dc-4d67847c03ff/9dc53a9b-384c-3962-a145-367406483154.roa
File: 9dc53a9b-384c-3962-a145-367406483154.roa (raw, json)
Hash identifier: ixRkzo1MfP+oGFwJooNwyceihbHCtp4Mo1G46EVSDDU=
Subject key identifier: 21:74:F1:47:53:2F:ED:A3:15:53:18:14:EF:2D:B2:F6:86:94:0B:E2
Certificate issuer: /CN=c17eacde-68de-455f-97dc-4d67847c03ff
Certificate serial: 010D0C9F43285848E9CBF131C6E0ADBD67143000
Authority key identifier: 34:FA:19:93:2C:BC:98:3C:00:2E:50:7B:F8:9E:BC:72:C9:F3:BC:AF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c17eacde-68de-455f-97dc-4d67847c03ff.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c17eacde-68de-455f-97dc-4d67847c03ff/9dc53a9b-384c-3962-a145-367406483154.roa
Signing time: Mon 17 Feb 2025 14:00:52 +0000
ROA not before: Mon 17 Feb 2025 14:00:52 +0000
ROA not after: Sun 18 May 2025 13:00:52 +0000
asID: 21577
IP address blocks: 173.250.240.0/20 maxlen: 22
199.15.216.0/21 maxlen: 23
208.70.48.0/21 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c17eacde-68de-455f-97dc-4d67847c03ff/c17eacde-68de-455f-97dc-4d67847c03ff.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c17eacde-68de-455f-97dc-4d67847c03ff/c17eacde-68de-455f-97dc-4d67847c03ff.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c17eacde-68de-455f-97dc-4d67847c03ff.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 08 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e9:cb:f1:31:c6:e0:ad:bd:67:14:30:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c17eacde-68de-455f-97dc-4d67847c03ff
Validity
Not Before: Feb 17 14:00:52 2025 GMT
Not After : May 18 13:00:52 2025 GMT
Subject: CN=178b961c-a2f8-42c9-acca-162c6545a980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:62:01:74:da:0a:74:9d:72:ae:c5:fe:66:40:
ac:02:7d:52:4e:5b:7b:77:ac:22:13:d6:6f:cd:7e:
07:bb:ba:de:52:cd:e8:27:e8:71:61:51:3d:cd:97:
91:e0:3d:c7:56:d1:7b:dc:d9:0c:5f:05:21:30:b5:
94:39:8b:1e:25:66:10:35:e9:62:3c:10:20:60:73:
1c:65:ba:3d:6f:9f:ba:07:d5:ec:03:12:c3:a5:2e:
58:6f:e1:47:75:0c:6c:55:15:18:f5:8b:70:c2:5e:
57:40:13:0c:60:ca:3f:30:3a:2c:77:38:8b:a8:de:
8f:4c:a1:49:15:bf:7f:f4:a4:67:05:70:c3:5d:b6:
29:0c:b9:25:3b:9d:3b:9b:60:75:e7:b8:00:50:0d:
eb:df:e8:a0:4a:52:1a:a2:b6:7c:bf:4d:d6:46:16:
11:c0:ef:58:09:85:b3:c8:32:ed:aa:a2:50:79:14:
0a:ba:37:80:02:ea:24:72:65:da:e8:40:a4:76:a6:
2b:f3:ac:58:cf:0c:79:2e:31:d5:4e:fb:d2:fe:2c:
65:3e:24:03:76:0f:92:46:c4:36:d0:42:c7:ce:ee:
14:58:5b:67:80:54:71:03:fc:71:6d:43:be:88:46:
18:d6:de:bb:1b:eb:3c:c9:f2:a5:75:5d:8c:16:5d:
a2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:74:F1:47:53:2F:ED:A3:15:53:18:14:EF:2D:B2:F6:86:94:0B:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c17eacde-68de-455f-97dc-4d67847c03ff/9dc53a9b-384c-3962-a145-367406483154.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c17eacde-68de-455f-97dc-4d67847c03ff/c17eacde-68de-455f-97dc-4d67847c03ff.crl
X509v3 Authority Key Identifier:
keyid:34:FA:19:93:2C:BC:98:3C:00:2E:50:7B:F8:9E:BC:72:C9:F3:BC:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c17eacde-68de-455f-97dc-4d67847c03ff.cer
sbgp-ipAddrBlock: critical
IPv4:
173.250.240.0/20
199.15.216.0/21
208.70.48.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:a7:b4:e6:84:bb:2e:33:2e:09:49:73:71:13:66:1f:d3:a2:
bc:ef:41:e5:93:5a:68:69:26:75:a9:3f:fa:d4:c8:9f:91:8a:
92:c3:71:a0:97:9f:3b:04:34:8a:72:4a:39:b0:dd:95:15:2c:
e6:38:0d:2b:ad:1f:04:51:6c:d4:de:6a:e2:97:67:2f:97:fb:
e5:f0:ac:c3:09:37:e6:b9:ae:c4:ae:13:2e:79:36:dc:9d:c7:
e4:58:8c:45:2e:83:89:92:82:f8:25:fb:26:0f:cf:b9:03:8f:
1e:3e:a3:0c:36:9f:47:ae:2b:d8:d5:96:49:c0:3d:1b:66:db:
ee:51:d3:c6:b0:96:0b:23:ad:23:2c:bd:fb:dc:23:2c:ac:18:
19:72:b5:7f:b2:1d:71:8f:58:f1:da:b9:13:c4:d8:e5:31:3b:
20:b9:43:70:fb:39:55:02:67:a9:40:ea:a3:31:ef:b6:06:7b:
87:eb:dd:8c:37:85:ef:be:11:02:8b:eb:38:a6:8e:47:a0:1c:
74:43:9e:7f:94:3a:89:90:3f:3d:6c:a2:7d:63:f7:5e:65:c4:
08:43:fb:e9:19:72:7f:bd:1f:76:cf:68:28:81:b9:0d:fa:7e:
48:cb:eb:2a:ad:c3:78:ef:ce:ea:b1:9a:be:ef:88:00:71:d9:
1f:35:f2:ef
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEjpy/ExxuCtvWcUMAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzE3ZWFjZGUtNjhkZS00NTVmLTk3ZGMtNGQ2Nzg0N2Mw
M2ZmMB4XDTI1MDIxNzE0MDA1MloXDTI1MDUxODEzMDA1MlowLzEtMCsGA1UEAxMk
MTc4Yjk2MWMtYTJmOC00MmM5LWFjY2EtMTYyYzY1NDVhOTgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGIBdNoKdJ1yrsX+ZkCsAn1STlt7d6wiE9Zv
zX4Hu7reUs3oJ+hxYVE9zZeR4D3HVtF73NkMXwUhMLWUOYseJWYQNeliPBAgYHMc
Zbo9b5+6B9XsAxLDpS5Yb+FHdQxsVRUY9Ytwwl5XQBMMYMo/MDosdziLqN6PTKFJ
Fb9/9KRnBXDDXbYpDLklO507m2B157gAUA3r3+igSlIaorZ8v03WRhYRwO9YCYWz
yDLtqqJQeRQKujeAAuokcmXa6ECkdqYr86xYzwx5LjHVTvvS/ixlPiQDdg+SRsQ2
0ELHzu4UWFtngFRxA/xxbUO+iEYY1t67G+s8yfKldV2MFl2iCQIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFCF08UdTL+2jFVMYFO8tsvaGlAviMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jMTdl
YWNkZS02OGRlLTQ1NWYtOTdkYy00ZDY3ODQ3YzAzZmYvOWRjNTNhOWItMzg0Yy0z
OTYyLWExNDUtMzY3NDA2NDgzMTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzE3ZWFjZGUtNjhkZS00NTVmLTk3
ZGMtNGQ2Nzg0N2MwM2ZmL2MxN2VhY2RlLTY4ZGUtNDU1Zi05N2RjLTRkNjc4NDdj
MDNmZi5jcmwwHwYDVR0jBBgwFoAUNPoZkyy8mDwALlB7+J68csnzvK8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9jMTdlYWNkZS02OGRlLTQ1NWYtOTdkYy00ZDY3
ODQ3YzAzZmYuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQErfrwAwQD
xw/YAwQD0EYwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBABSntOaEuy4zLglJc3ETZh/TorzvQeWTWmhpJnWp
P/rUyJ+RipLDcaCXnzsENIpySjmw3ZUVLOY4DSutHwRRbNTeauKXZy+X++XwrMMJ
N+a5rsSuEy55Ntydx+RYjEUug4mSgvgl+yYPz7kDjx4+oww2n0euK9jVlknAPRtm
2+5R08awlgsjrSMsvfvcIyysGBlytX+yHXGPWPHauRPE2OUxOyC5Q3D7OVUCZ6lA
6qMx77YGe4fr3Yw3he++EQKL6zimjkegHHRDnn+UOomQPz1son1j915lxAhD++kZ
cn+9H3bPaCiBuQ36fkjL6yqtw3jvzuqxmr7viABx2R818u8=
-----END CERTIFICATE-----
Generated at Sun Apr 6 22:00:41 2025 by rpki-client