Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/fd2978aa-42e9-3187-8f28-c0bbda73c0fb.roa
File: fd2978aa-42e9-3187-8f28-c0bbda73c0fb.roa (raw, json)
Hash identifier: bZPUJp5gSNH3wTgmVdtnUWQPSmfYj+YbF3tEWDyXvkU=
Subject key identifier: 4D:B7:CA:6C:B9:D4:58:8D:2A:A9:E6:33:8E:A3:71:EC:6F:55:10:26
Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial: 010D0C9F4328584953C44113BD69DEE29AA76B40
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/fd2978aa-42e9-3187-8f28-c0bbda73c0fb.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 54113
IP address blocks: 167.82.104.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:41:13:bd:69:de:e2:9a:a7:6b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=383bc3f4-aa41-4907-8ca5-afab58a28685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:0b:8d:4a:9b:d4:b7:07:62:34:44:f5:5f:8f:
83:53:11:f7:9f:a8:2e:c6:c6:04:87:c4:b8:03:63:
d0:ee:aa:af:de:d5:8c:c0:77:c9:a5:82:65:30:fd:
b8:ce:f3:23:a0:4a:a8:ad:12:cd:25:39:f3:bc:9e:
a4:64:7d:76:c3:c8:ae:19:0b:64:02:08:b8:bb:9d:
7f:3e:93:48:03:4d:3c:5f:98:cc:fb:7d:09:65:ca:
4d:84:4d:de:27:a7:b9:e3:ed:9f:7e:86:a9:55:19:
51:e1:10:cb:50:d0:d5:18:60:37:c9:64:a2:45:19:
4c:3b:78:9c:50:31:b3:7d:c3:96:2f:8e:00:b9:2f:
7f:b7:e0:dd:04:e4:59:86:38:e2:f9:42:dc:ff:04:
16:72:c0:2e:3b:17:71:ab:e4:88:92:74:74:1f:75:
e3:d2:b9:00:ce:a7:37:14:7b:33:72:01:77:bd:c1:
66:e4:e2:95:3e:59:6b:37:9b:45:18:48:a5:ea:3e:
cc:a5:88:25:17:a6:a1:62:46:56:7a:7e:eb:57:05:
43:ec:88:59:01:62:54:80:11:ba:e1:cf:f7:03:ea:
56:ce:f9:11:a9:fe:2e:46:8e:74:c0:0b:e2:da:2e:
e7:1e:0e:f5:36:33:c2:99:3c:d5:dc:e7:d6:32:b3:
67:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B7:CA:6C:B9:D4:58:8D:2A:A9:E6:33:8E:A3:71:EC:6F:55:10:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/fd2978aa-42e9-3187-8f28-c0bbda73c0fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
X509v3 Authority Key Identifier:
keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
sbgp-ipAddrBlock: critical
IPv4:
167.82.104.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:1a:b5:92:dd:97:96:3c:f1:56:5f:84:13:66:1c:a7:85:0d:
64:3a:13:90:6c:c7:3d:99:73:ca:29:35:64:50:d0:0f:f7:19:
75:62:3d:5e:18:ac:41:b0:d6:eb:63:b7:61:23:0b:ec:d1:11:
9c:f1:3f:b8:a7:19:4b:6b:a9:49:08:dc:1c:93:41:aa:90:5a:
6c:5c:d1:31:8f:3b:8a:cd:35:ec:5f:04:f5:60:2a:60:a3:08:
a2:ed:a1:c1:c4:04:e1:68:ad:81:24:3c:e3:67:88:88:70:43:
96:55:8f:c8:df:89:b2:21:74:37:17:27:77:64:bc:a6:49:2e:
c9:30:27:2b:17:7a:d2:2c:7d:36:ab:b0:e1:70:89:87:15:06:
5e:df:8c:65:c4:fe:c1:da:76:96:5c:e8:f6:af:25:cb:a8:0a:
e1:bc:e2:4f:4a:91:7d:6f:a4:61:94:31:27:de:db:08:0b:fc:
9d:fe:46:ea:a8:bb:7c:92:64:63:27:e1:cb:e7:0a:93:04:03:
8c:e0:da:46:70:29:e7:83:1c:b7:7e:55:56:7f:49:e7:bb:81:
3f:b2:03:8c:58:d3:8b:76:4b:08:b1:e4:3d:27:ff:d5:9f:24:
de:2b:87:fe:f3:15:89:6d:06:3c:83:4b:eb:8e:79:bd:e7:1d:
0f:be:05:33
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxEETvWne4pqna0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz
YTYzMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk
MzgzYmMzZjQtYWE0MS00OTA3LThjYTUtYWZhYjU4YTI4Njg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5QuNSpvUtwdiNET1X4+DUxH3n6guxsYEh8S4
A2PQ7qqv3tWMwHfJpYJlMP24zvMjoEqorRLNJTnzvJ6kZH12w8iuGQtkAgi4u51/
PpNIA008X5jM+30JZcpNhE3eJ6e54+2ffoapVRlR4RDLUNDVGGA3yWSiRRlMO3ic
UDGzfcOWL44AuS9/t+DdBORZhjji+ULc/wQWcsAuOxdxq+SIknR0H3Xj0rkAzqc3
FHszcgF3vcFm5OKVPllrN5tFGEil6j7MpYglF6ahYkZWen7rVwVD7IhZAWJUgBG6
4c/3A+pWzvkRqf4uRo50wAvi2i7nHg71NjPCmTzV3OfWMrNnKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE23ymy51FiNKqnmM46jcexvVRAmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1
ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvZmQyOTc4YWEtNDJlOS0z
MTg3LThmMjgtYzBiYmRhNzNjMGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh
MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3
M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1
YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCp1JoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACMatZLdl5Y88VZfhBNmHKeFDWQ6E5Bsxz2Zc8opNWRQ0A/3GXViPV4Y
rEGw1utjt2EjC+zREZzxP7inGUtrqUkI3ByTQaqQWmxc0TGPO4rNNexfBPVgKmCj
CKLtocHEBOForYEkPONniIhwQ5ZVj8jfibIhdDcXJ3dkvKZJLskwJysXetIsfTar
sOFwiYcVBl7fjGXE/sHadpZc6PavJcuoCuG84k9KkX1vpGGUMSfe2wgL/J3+Ruqo
u3ySZGMn4cvnCpMEA4zg2kZwKeeDHLd+VVZ/See7gT+yA4xY04t2Swix5D0n/9Wf
JN4rh/7zFYltBjyDS+uOeb3nHQ++BTM=
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:30:34 2025 by rpki-client