Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f88f3a26-3376-4ee5-877c-a0c03c069cb7/6a41be25-ae20-3f2f-99e1-c5dfab3b0524.roa
File: 6a41be25-ae20-3f2f-99e1-c5dfab3b0524.roa (raw, json)
Hash identifier: bBJVPcnPhElaGlNX19gZZ4K5CWHhJEUbYd7a/IXnYwQ=
Subject key identifier: D0:42:B3:40:41:44:E6:18:63:1C:DA:89:0D:A9:87:57:3B:32:DF:9C
Certificate issuer: /CN=f88f3a26-3376-4ee5-877c-a0c03c069cb7
Certificate serial: 010D0C9F432858490E16CA89287257215A803580
Authority key identifier: 1C:35:6E:AC:B3:EB:69:F8:99:14:81:D2:46:85:BC:4D:C7:A9:B0:CC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f88f3a26-3376-4ee5-877c-a0c03c069cb7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f88f3a26-3376-4ee5-877c-a0c03c069cb7/6a41be25-ae20-3f2f-99e1-c5dfab3b0524.roa
Signing time: Sun 02 Mar 2025 14:00:52 +0000
ROA not before: Sun 02 Mar 2025 14:00:52 +0000
ROA not after: Sat 31 May 2025 13:00:52 +0000
asID: 17356
IP address blocks: 66.220.224.0/19 maxlen: 24
173.195.240.0/20 maxlen: 24
209.134.32.0/20 maxlen: 24
216.66.96.0/19 maxlen: 24
2607:ffc8::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f88f3a26-3376-4ee5-877c-a0c03c069cb7/f88f3a26-3376-4ee5-877c-a0c03c069cb7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f88f3a26-3376-4ee5-877c-a0c03c069cb7/f88f3a26-3376-4ee5-877c-a0c03c069cb7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f88f3a26-3376-4ee5-877c-a0c03c069cb7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 07 Apr 2025 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0e:16:ca:89:28:72:57:21:5a:80:35:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f88f3a26-3376-4ee5-877c-a0c03c069cb7
Validity
Not Before: Mar 2 14:00:52 2025 GMT
Not After : May 31 13:00:52 2025 GMT
Subject: CN=49ba33d3-a80d-4468-b597-0bde424091b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5a:5f:57:d3:bd:eb:d5:68:40:01:69:04:dd:
82:9b:94:d0:f0:d3:6e:25:83:0d:5c:e2:78:e2:62:
4d:fc:18:3c:b5:56:e3:eb:f7:d8:3c:e3:b9:9f:67:
17:f9:b7:06:a7:f8:e7:00:ef:a5:4e:59:99:96:80:
9b:c4:1f:e0:9a:95:e3:a1:e4:6e:75:af:85:cb:b1:
33:f9:c2:2d:4e:d5:13:21:40:31:19:af:3a:a2:7a:
bf:17:f8:08:69:40:52:8f:aa:87:8c:7c:e3:d8:28:
ea:11:95:1d:50:d4:fc:f5:8b:b8:ef:4f:10:d0:18:
5c:05:4d:c5:3d:6a:40:71:86:a3:eb:d1:c7:9d:28:
91:93:ea:00:d2:62:d6:0b:0c:99:ea:83:57:e8:b7:
45:2f:54:61:c3:a9:c7:c4:6d:1e:ef:5c:ce:e4:38:
f6:76:7d:e1:69:2e:cc:3c:e0:2a:d8:4d:cf:e0:57:
d7:4b:68:05:01:fb:97:cd:4c:1f:9f:07:5a:54:3d:
e2:49:ee:00:af:d0:a9:a5:fa:1e:7b:05:02:b0:67:
0a:d7:f2:de:22:a1:ee:16:3c:6d:07:1f:4b:bb:5d:
9d:ce:c1:8a:e3:41:73:7d:ca:30:2e:0c:9a:b5:6a:
a1:fe:9b:be:b4:d1:14:05:ae:c6:4b:d4:25:bf:61:
e8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:42:B3:40:41:44:E6:18:63:1C:DA:89:0D:A9:87:57:3B:32:DF:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f88f3a26-3376-4ee5-877c-a0c03c069cb7/6a41be25-ae20-3f2f-99e1-c5dfab3b0524.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f88f3a26-3376-4ee5-877c-a0c03c069cb7/f88f3a26-3376-4ee5-877c-a0c03c069cb7.crl
X509v3 Authority Key Identifier:
keyid:1C:35:6E:AC:B3:EB:69:F8:99:14:81:D2:46:85:BC:4D:C7:A9:B0:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f88f3a26-3376-4ee5-877c-a0c03c069cb7.cer
sbgp-ipAddrBlock: critical
IPv4:
66.220.224.0/19
173.195.240.0/20
209.134.32.0/20
216.66.96.0/19
IPv6:
2607:ffc8::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:71:63:4b:9f:b9:75:8f:2f:ba:a5:14:e6:b9:6d:60:95:38:
fb:fc:05:86:cf:e4:d5:88:02:65:59:9d:72:82:39:c6:fb:60:
a2:7d:07:d1:b4:33:a8:9e:25:55:ea:5b:05:78:c1:af:64:a1:
c4:c9:9d:8e:b9:6f:e6:05:87:7e:13:f9:85:43:12:e6:c1:83:
f1:7d:36:aa:c7:c4:f4:62:8b:f9:8e:1e:21:5b:a8:7a:4c:e2:
be:e5:ac:d3:bb:24:4f:36:09:da:31:a5:a5:39:11:04:7b:ef:
7e:a3:ab:18:8c:3d:f9:df:c0:6e:3c:b1:0b:ad:c9:2f:2d:68:
5c:16:3b:d9:af:53:22:74:f3:67:75:5a:a2:be:5f:73:81:e4:
1e:4b:65:18:8e:62:62:2b:5c:ae:0f:0f:13:d9:87:ee:ec:dd:
6e:cc:35:b1:e0:24:37:f6:67:4b:71:22:66:8e:61:51:56:fa:
64:3a:ac:84:b5:7f:27:31:df:f7:72:6b:0e:4a:94:69:61:2b:
66:f6:2d:56:cb:8c:85:fc:a1:fb:84:25:bb:86:7f:85:a4:3c:
93:9a:c8:e6:72:80:de:f6:56:cd:93:07:bd:db:81:10:41:82:
10:16:a8:f8:16:65:c0:3b:15:40:50:95:6e:89:ef:13:fd:cf:
07:c3:78:2a
-----BEGIN CERTIFICATE-----
MIIGZDCCBUygAwIBAgIUAQ0Mn0MoWEkOFsqJKHJXIVqANYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjg4ZjNhMjYtMzM3Ni00ZWU1LTg3N2MtYTBjMDNjMDY5
Y2I3MB4XDTI1MDMwMjE0MDA1MloXDTI1MDUzMTEzMDA1MlowLzEtMCsGA1UEAxMk
NDliYTMzZDMtYTgwZC00NDY4LWI1OTctMGJkZTQyNDA5MWIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVpfV9O969VoQAFpBN2Cm5TQ8NNuJYMNXOJ4
4mJN/Bg8tVbj6/fYPOO5n2cX+bcGp/jnAO+lTlmZloCbxB/gmpXjoeRuda+Fy7Ez
+cItTtUTIUAxGa86onq/F/gIaUBSj6qHjHzj2CjqEZUdUNT89Yu4708Q0BhcBU3F
PWpAcYaj69HHnSiRk+oA0mLWCwyZ6oNX6LdFL1Rhw6nHxG0e71zO5Dj2dn3haS7M
POAq2E3P4FfXS2gFAfuXzUwfnwdaVD3iSe4Ar9CppfoeewUCsGcK1/LeIqHuFjxt
Bx9Lu12dzsGK40FzfcowLgyatWqh/pu+tNEUBa7GS9Qlv2HovwIDAQABo4IDdjCC
A3IwHQYDVR0OBBYEFNBCs0BBROYYYxzaiQ2ph1c7Mt+cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9mODhm
M2EyNi0zMzc2LTRlZTUtODc3Yy1hMGMwM2MwNjljYjcvNmE0MWJlMjUtYWUyMC0z
ZjJmLTk5ZTEtYzVkZmFiM2IwNTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZjg4ZjNhMjYtMzM3Ni00ZWU1LTg3
N2MtYTBjMDNjMDY5Y2I3L2Y4OGYzYTI2LTMzNzYtNGVlNS04NzdjLWEwYzAzYzA2
OWNiNy5jcmwwHwYDVR0jBBgwFoAUHDVurLPrafiZFIHSRoW8TcepsMwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9mODhmM2EyNi0zMzc2LTRlZTUtODc3Yy1hMGMw
M2MwNjljYjcuY2VyMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQFQtzgAwQE
rcPwAwQE0YYgAwQF2EJgMA0EAgACMAcDBQAmB//IMFQGA1UdIAEB/wRKMEgwRgYI
KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz
b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAItxY0ufuXWP
L7qlFOa5bWCVOPv8BYbP5NWIAmVZnXKCOcb7YKJ9B9G0M6ieJVXqWwV4wa9kocTJ
nY65b+YFh34T+YVDEubBg/F9NqrHxPRii/mOHiFbqHpM4r7lrNO7JE82CdoxpaU5
EQR7736jqxiMPfnfwG48sQutyS8taFwWO9mvUyJ082d1WqK+X3OB5B5LZRiOYmIr
XK4PDxPZh+7s3W7MNbHgJDf2Z0txImaOYVFW+mQ6rIS1fycx3/dyaw5KlGlhK2b2
LVbLjIX8ofuEJbuGf4WkPJOayOZygN72Vs2TB73bgRBBghAWqPgWZcA7FUBQlW6J
7xP9zwfDeCo=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:05:37 2025 by rpki-client