Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654/df2cf78d-c7b0-3f2e-9c70-fdd8078a3351.roa
File: df2cf78d-c7b0-3f2e-9c70-fdd8078a3351.roa (raw, json)
Hash identifier: 6woKQI3mdV1fiXbNytVvJFcVppV6m+GfEnjmTaqVtzM=
Subject key identifier: 6C:ED:A2:6C:84:71:41:6E:72:64:6F:59:7B:26:17:A5:C5:37:E9:7C
Certificate issuer: /CN=e0647553-32ca-48b6-be58-d6c7f475e654
Certificate serial: 010D0C9F432858495ABECB9DEEB0F3741CFAD650
Authority key identifier: 3D:EA:87:2B:EB:A8:27:88:90:FC:5A:63:64:0F:CA:8F:10:C0:FE:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654/df2cf78d-c7b0-3f2e-9c70-fdd8078a3351.roa
Signing time: Sun 30 Mar 2025 01:00:47 +0000
ROA not before: Sun 30 Mar 2025 01:00:47 +0000
ROA not after: Sat 28 Jun 2025 01:00:47 +0000
asID: 7784
IP address blocks: 65.79.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654/e0647553-32ca-48b6-be58-d6c7f475e654.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654/e0647553-32ca-48b6-be58-d6c7f475e654.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 07 Apr 2025 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5a:be:cb:9d:ee:b0:f3:74:1c:fa:d6:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0647553-32ca-48b6-be58-d6c7f475e654
Validity
Not Before: Mar 30 01:00:47 2025 GMT
Not After : Jun 28 01:00:47 2025 GMT
Subject: CN=ef000cd8-2183-44f1-87bf-e65d8d349527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f2:9d:60:8e:31:67:07:0b:ff:05:c3:aa:96:
30:d3:de:4c:1e:7a:13:38:39:54:c1:94:35:d6:a3:
97:37:d4:9d:72:aa:2d:52:eb:fe:98:03:22:66:1f:
91:f2:0b:dc:30:c4:6d:53:a2:11:f2:d6:f3:c2:52:
c0:4d:23:69:35:96:2f:b6:38:47:ba:bb:e3:18:9e:
d3:c7:54:ba:af:8d:dd:3e:25:7c:eb:f7:53:e6:59:
a1:02:8a:7b:5a:33:25:d2:f0:64:99:fc:ba:f8:2c:
1f:bd:a4:b4:6a:af:09:a1:52:31:8d:e1:e8:9b:fa:
16:ef:21:b0:bd:6f:ba:1e:b6:09:ab:1d:83:84:df:
2e:35:8f:d6:ff:98:40:ea:de:0e:8c:c9:65:b9:db:
25:e6:3e:00:4a:29:6c:bb:97:88:8d:a8:43:44:2d:
80:77:f4:bb:63:32:e7:0b:35:b0:c0:f9:4c:6d:06:
09:64:40:e5:05:f1:1b:f8:e7:f4:ca:86:58:f3:96:
12:bb:f3:f5:06:92:83:33:c9:46:12:9f:1b:37:d6:
80:80:77:57:00:af:e4:ae:44:63:c5:3b:d4:1f:fd:
43:1b:64:b3:c0:63:89:ec:ba:43:8e:ed:33:81:c2:
92:1c:2c:0c:73:42:a6:73:aa:6c:d3:f2:13:8d:05:
ba:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:ED:A2:6C:84:71:41:6E:72:64:6F:59:7B:26:17:A5:C5:37:E9:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654/df2cf78d-c7b0-3f2e-9c70-fdd8078a3351.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654/e0647553-32ca-48b6-be58-d6c7f475e654.crl
X509v3 Authority Key Identifier:
keyid:3D:EA:87:2B:EB:A8:27:88:90:FC:5A:63:64:0F:CA:8F:10:C0:FE:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654.cer
sbgp-ipAddrBlock: critical
IPv4:
65.79.232.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:f4:34:0d:15:db:82:6d:9b:31:b9:f1:62:dd:fb:2c:e2:e0:
b9:2b:e2:06:5d:bb:44:0b:dc:89:2a:b3:00:ff:a7:50:e2:33:
c4:14:70:7a:f8:7f:7e:52:49:bd:6a:b9:1f:f6:aa:1b:09:c7:
3a:ef:94:f1:9e:42:1c:fa:ca:dd:04:e7:58:58:ad:28:01:e8:
3d:77:c8:5c:b0:91:02:a4:e4:f4:51:19:e4:b5:b4:7b:07:76:
04:bc:3f:54:85:e6:d9:46:b6:bb:97:e6:24:1d:29:a2:0b:93:
63:1d:24:a2:65:c9:b0:cf:c0:6a:d1:2c:a3:94:bd:fa:e2:8c:
5f:4d:90:12:63:8d:5c:6c:eb:ba:4f:64:b6:0f:f9:15:58:5a:
ec:cd:f2:6f:b2:f5:8b:18:4e:13:dd:34:bd:1a:59:ab:6b:c4:
ad:81:2c:39:40:59:9e:0b:99:24:24:73:af:b3:5e:e5:81:db:
3e:d8:b8:3d:3d:e2:20:0b:e6:56:bc:b6:9f:64:1a:23:46:41:
02:bc:19:17:13:40:5a:35:5a:0c:8f:54:1a:80:1e:f5:b9:d6:
8a:f2:6a:a9:21:de:92:77:62:a3:1a:4f:08:5b:01:bc:7b:b5:
d7:8c:91:ce:d7:26:8d:84:48:bb:4d:2e:68:a9:0f:00:e7:ff:
3f:5b:5a:9a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavsud7rDzdBz61lAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTA2NDc1NTMtMzJjYS00OGI2LWJlNTgtZDZjN2Y0NzVl
NjU0MB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk
ZWYwMDBjZDgtMjE4My00NGYxLTg3YmYtZTY1ZDhkMzQ5NTI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfKdYI4xZwcL/wXDqpYw095MHnoTODlUwZQ1
1qOXN9SdcqotUuv+mAMiZh+R8gvcMMRtU6IR8tbzwlLATSNpNZYvtjhHurvjGJ7T
x1S6r43dPiV86/dT5lmhAop7WjMl0vBkmfy6+CwfvaS0aq8JoVIxjeHom/oW7yGw
vW+6HrYJqx2DhN8uNY/W/5hA6t4OjMlludsl5j4ASilsu5eIjahDRC2Ad/S7YzLn
CzWwwPlMbQYJZEDlBfEb+Of0yoZY85YSu/P1BpKDM8lGEp8bN9aAgHdXAK/krkRj
xTvUH/1DG2SzwGOJ7LpDju0zgcKSHCwMc0Kmc6ps0/ITjQW6fQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGztomyEcUFucmRvWXsmF6XFN+l8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lMDY0
NzU1My0zMmNhLTQ4YjYtYmU1OC1kNmM3ZjQ3NWU2NTQvZGYyY2Y3OGQtYzdiMC0z
ZjJlLTljNzAtZmRkODA3OGEzMzUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTA2NDc1NTMtMzJjYS00OGI2LWJl
NTgtZDZjN2Y0NzVlNjU0L2UwNjQ3NTUzLTMyY2EtNDhiNi1iZTU4LWQ2YzdmNDc1
ZTY1NC5jcmwwHwYDVR0jBBgwFoAUPeqHK+uoJ4iQ/FpjZA/KjxDA/kcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lMDY0NzU1My0zMmNhLTQ4YjYtYmU1OC1kNmM3
ZjQ3NWU2NTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQU/oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAH0NA0V24JtmzG58WLd+yzi4Lkr4gZdu0QL3IkqswD/p1DiM8QUcHr4
f35SSb1quR/2qhsJxzrvlPGeQhz6yt0E51hYrSgB6D13yFywkQKk5PRRGeS1tHsH
dgS8P1SF5tlGtruX5iQdKaILk2MdJKJlybDPwGrRLKOUvfrijF9NkBJjjVxs67pP
ZLYP+RVYWuzN8m+y9YsYThPdNL0aWatrxK2BLDlAWZ4LmSQkc6+zXuWB2z7YuD09
4iAL5la8tp9kGiNGQQK8GRcTQFo1WgyPVBqAHvW51oryaqkh3pJ3YqMaTwhbAbx7
tdeMkc7XJo2ESLtNLmipDwDn/z9bWpo=
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:04:36 2025 by rpki-client