Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/52c20db3-0425-3b35-8740-4041fe5bbe70.roa
File: 52c20db3-0425-3b35-8740-4041fe5bbe70.roa (raw, json)
Hash identifier: v99+YcNxUtEvK/vzt7UrSHWx5hd/SiV0fMF2j04fsCk=
Subject key identifier: 97:AC:8C:ED:C3:00:9B:EE:86:06:CA:C8:E2:11:4A:E2:00:75:2B:D2
Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial: 010D0C9F432858489E6CD998959371ADCA24DA00
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/52c20db3-0425-3b35-8740-4041fe5bbe70.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 54113
IP address blocks: 140.248.210.192/27 maxlen: 27
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 04 Apr 2025 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6c:d9:98:95:93:71:ad:ca:24:da:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=98f8636c-bf26-44b4-9656-dbb70546a151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a8:d5:0e:ad:35:a8:22:09:cc:2b:81:db:1e:
94:ee:be:43:31:02:7f:e8:5b:65:3f:04:2f:7e:9d:
48:86:99:7d:e0:d2:b7:f8:f5:a0:15:fc:a9:62:17:
87:86:65:b5:2b:81:ab:ec:09:71:a1:9d:9e:21:57:
50:1d:49:9c:0c:2a:6e:e1:03:66:a5:ac:bd:fc:1f:
06:0f:72:cb:f6:f6:ea:e0:b8:c9:c7:aa:cf:87:8e:
4a:1d:89:07:1b:58:26:44:bb:41:84:7e:aa:6e:d9:
d6:57:c0:46:08:f0:6f:92:5a:01:0a:d4:f0:f5:f7:
bc:fd:8c:58:fc:ed:ab:74:76:c2:fb:b4:39:78:21:
5e:c2:ab:cd:8e:76:3b:30:8b:b9:46:5f:3c:7d:50:
95:64:7a:cd:75:47:45:2d:78:67:13:2b:0e:40:ea:
0c:db:cd:2f:d6:18:eb:2a:dd:a7:60:49:7c:4a:b2:
e1:21:ef:97:66:c8:5e:0b:23:1c:95:d0:c2:23:cb:
d5:63:26:5a:61:d9:53:ae:cf:fa:5d:92:28:a8:17:
d6:67:41:7e:e3:e2:75:e5:f5:d2:d5:44:82:68:54:
d4:e5:36:32:51:a3:14:1c:00:4f:a2:c8:7a:44:56:
06:00:3b:06:8e:fa:57:0d:2f:4b:db:5a:c5:05:96:
18:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:AC:8C:ED:C3:00:9B:EE:86:06:CA:C8:E2:11:4A:E2:00:75:2B:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/52c20db3-0425-3b35-8740-4041fe5bbe70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
X509v3 Authority Key Identifier:
keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
sbgp-ipAddrBlock: critical
IPv4:
140.248.210.192/27
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:f3:9a:75:c9:9b:57:25:56:77:ac:d2:c7:89:cb:72:e1:75:
3b:c9:f8:7c:a8:8c:17:db:7b:57:0f:4f:e4:8c:a2:f0:8a:49:
57:9d:c5:fe:6d:ae:2b:94:ab:92:a5:ce:88:e1:37:9c:8b:47:
b0:8a:c8:8e:3b:e0:38:89:b5:dd:51:63:1e:d5:3c:2e:e7:d6:
66:d2:58:4f:2f:63:30:36:69:d0:fe:c6:a3:41:4a:05:6f:a5:
68:d6:83:f1:65:98:39:7c:43:d7:fa:05:51:82:a2:53:b5:26:
56:a8:3a:88:5f:1a:64:cb:8b:5a:ad:e1:4e:7f:b1:1a:29:2b:
fc:09:73:12:3a:d8:8c:75:04:17:fe:a0:55:42:09:7c:ec:3c:
0a:02:29:ac:4d:be:4e:81:ca:6e:f3:4d:19:16:07:68:6d:a5:
12:1e:b3:f9:da:39:d7:d4:0a:05:4c:b8:4a:3e:ee:be:79:a8:
e4:2f:5e:4b:29:8c:39:c6:f4:92:1e:23:dd:22:86:b6:4e:79:
08:00:2b:bd:f5:c1:17:cb:39:15:0a:53:12:e8:2d:a6:fb:13:
fa:9f:5c:a5:f6:4e:dd:0f:ba:4c:8a:d0:2e:8f:27:cb:c0:ff:
72:35:12:6b:7d:fa:a5:fa:89:31:26:ec:f4:22:c7:a8:e6:e6:
e6:27:4b:59
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEiebNmYlZNxrcok2gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz
YTYzMB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk
OThmODYzNmMtYmYyNi00NGI0LTk2NTYtZGJiNzA1NDZhMTUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KjVDq01qCIJzCuB2x6U7r5DMQJ/6FtlPwQv
fp1Ihpl94NK3+PWgFfypYheHhmW1K4Gr7AlxoZ2eIVdQHUmcDCpu4QNmpay9/B8G
D3LL9vbq4LjJx6rPh45KHYkHG1gmRLtBhH6qbtnWV8BGCPBvkloBCtTw9fe8/YxY
/O2rdHbC+7Q5eCFewqvNjnY7MIu5Rl88fVCVZHrNdUdFLXhnEysOQOoM280v1hjr
Kt2nYEl8SrLhIe+XZsheCyMcldDCI8vVYyZaYdlTrs/6XZIoqBfWZ0F+4+J15fXS
1USCaFTU5TYyUaMUHABPosh6RFYGADsGjvpXDS9L21rFBZYYKQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFJesjO3DAJvuhgbKyOIRSuIAdSvSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1
ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvNTJjMjBkYjMtMDQyNS0z
YjM1LTg3NDAtNDA0MWZlNWJiZTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh
MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3
M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1
YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUFjPjSwDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAi85p1yZtXJVZ3rNLHicty4XU7yfh8qIwX23tXD0/kjKLwiklXncX+
ba4rlKuSpc6I4Teci0ewisiOO+A4ibXdUWMe1Twu59Zm0lhPL2MwNmnQ/sajQUoF
b6Vo1oPxZZg5fEPX+gVRgqJTtSZWqDqIXxpky4tareFOf7EaKSv8CXMSOtiMdQQX
/qBVQgl87DwKAimsTb5Ogcpu800ZFgdobaUSHrP52jnX1AoFTLhKPu6+eajkL15L
KYw5xvSSHiPdIoa2TnkIACu99cEXyzkVClMS6C2m+xP6n1yl9k7dD7pMitAujyfL
wP9yNRJrffql+okxJuz0Iseo5ubmJ0tZ
-----END CERTIFICATE-----
Generated at Thu Apr 3 20:03:41 2025 by rpki-client