Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/2e013c7e-5ebb-3743-ad2b-6bd26f865895.roa
File: 2e013c7e-5ebb-3743-ad2b-6bd26f865895.roa (raw, json)
Hash identifier: AF+pKxTu4Tyf36X5afv3MKEHzsIaS4Y+6Lw7fsitcXg=
Subject key identifier: FD:DA:C4:63:B7:C8:B7:C1:96:1C:7D:D6:49:47:E8:2B:B4:C5:BF:84
Certificate issuer: /CN=80e43277-4490-4cc9-99ec-5726af08c8ab
Certificate serial: 010D0C9F43285848E2D11AB5195CD4ED153C6700
Authority key identifier: F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/2e013c7e-5ebb-3743-ad2b-6bd26f865895.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 23520
IP address blocks: 63.245.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:1a:b5:19:5c:d4:ed:15:3c:67:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80e43277-4490-4cc9-99ec-5726af08c8ab
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=284b2cba-15bf-4c0b-8c53-bf6671195fad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9c:da:b5:f4:87:71:50:3a:1d:90:65:d6:94:
1d:ea:cb:b7:10:7b:05:e7:9e:e4:e7:4a:81:45:01:
17:f0:7e:8a:85:cd:c4:45:b3:97:18:64:f5:5d:44:
55:80:73:3e:6d:79:57:31:dc:95:b8:db:4b:bf:a9:
94:ea:a7:48:e1:db:ac:a1:81:c7:31:34:0d:63:8e:
bc:43:6b:42:48:0b:61:b1:64:95:08:c5:48:cb:6f:
2d:13:ab:8e:fb:88:9e:6d:91:08:09:43:64:58:ca:
2e:34:3e:f3:d1:62:e9:7b:7c:20:77:27:ed:8b:c0:
54:42:f7:c2:e1:7b:f9:11:58:bf:2e:16:46:2e:e2:
d4:a2:c7:ad:59:2e:90:1d:f9:47:ea:a0:58:93:8b:
41:08:1a:0a:60:8d:6b:84:b6:59:93:e5:f9:7a:fd:
be:31:e6:0a:85:2d:e8:3d:62:7a:14:b9:17:aa:b0:
f2:b7:0b:c5:4e:95:93:83:54:5b:af:04:c0:51:04:
6d:d1:91:1c:85:23:ee:87:53:ef:f0:e9:38:ca:86:
55:92:02:e7:20:12:dd:78:ac:05:11:21:71:21:60:
77:84:ee:cd:68:11:40:9e:71:59:d0:8a:82:cc:02:
ee:07:64:8b:7f:a7:80:eb:21:40:2c:b1:70:bb:82:
6c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:DA:C4:63:B7:C8:B7:C1:96:1C:7D:D6:49:47:E8:2B:B4:C5:BF:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/2e013c7e-5ebb-3743-ad2b-6bd26f865895.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.crl
X509v3 Authority Key Identifier:
keyid:F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer
sbgp-ipAddrBlock: critical
IPv4:
63.245.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:cd:1a:fc:ca:ef:0b:ec:d9:23:e6:cc:62:a2:10:30:c4:0f:
7e:fe:4a:bd:46:14:55:42:7c:23:a6:e4:c1:ba:d3:90:ba:db:
52:2d:49:b1:9b:e7:64:f6:2b:33:99:e5:45:33:50:27:37:26:
18:d4:6c:1b:07:80:b5:37:de:9e:43:7e:df:ba:17:66:0e:64:
07:b2:ad:17:f7:12:91:94:8e:fd:84:7a:27:b2:30:59:15:55:
03:7d:99:7d:2d:49:ff:7d:8f:97:da:81:6b:01:c3:4c:95:0a:
f1:76:a0:81:fd:e8:54:f6:10:c7:b9:6a:5a:74:1b:47:34:ec:
37:0e:5f:17:fa:91:0f:20:e9:d9:14:a4:4d:d2:72:a9:78:4b:
3c:9f:3e:ee:45:11:7e:75:88:9b:86:36:c1:d5:b6:69:df:5d:
47:06:f9:22:db:25:3a:cd:09:1e:c1:ed:18:5b:28:a2:d7:db:
b7:3f:bd:ff:76:72:63:2b:b6:20:21:ea:57:6d:ff:60:ff:fb:
71:a5:a8:a7:66:ec:84:85:ee:d8:35:90:91:78:3a:ec:f1:10:
11:14:7e:64:8a:6a:a8:81:0b:db:97:c3:d0:13:25:2f:5e:16:
66:a5:79:59:05:90:db:a1:47:b0:73:e9:57:a3:4b:bf:86:85:
fb:ba:18:1b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0Rq1GVzU7RU8ZwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODBlNDMyNzctNDQ5MC00Y2M5LTk5ZWMtNTcyNmFmMDhj
OGFiMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk
Mjg0YjJjYmEtMTViZi00YzBiLThjNTMtYmY2NjcxMTk1ZmFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5zatfSHcVA6HZBl1pQd6su3EHsF557k50qB
RQEX8H6Khc3ERbOXGGT1XURVgHM+bXlXMdyVuNtLv6mU6qdI4dusoYHHMTQNY468
Q2tCSAthsWSVCMVIy28tE6uO+4iebZEICUNkWMouND7z0WLpe3wgdyfti8BUQvfC
4Xv5EVi/LhZGLuLUosetWS6QHflH6qBYk4tBCBoKYI1rhLZZk+X5ev2+MeYKhS3o
PWJ6FLkXqrDytwvFTpWTg1RbrwTAUQRt0ZEchSPuh1Pv8Ok4yoZVkgLnIBLdeKwF
ESFxIWB3hO7NaBFAnnFZ0IqCzALuB2SLf6eA6yFALLFwu4Js6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP3axGO3yLfBlhx91klH6Cu0xb+EMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MGU0
MzI3Ny00NDkwLTRjYzktOTllYy01NzI2YWYwOGM4YWIvMmUwMTNjN2UtNWViYi0z
NzQzLWFkMmItNmJkMjZmODY1ODk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODBlNDMyNzctNDQ5MC00Y2M5LTk5
ZWMtNTcyNmFmMDhjOGFiLzgwZTQzMjc3LTQ0OTAtNGNjOS05OWVjLTU3MjZhZjA4
YzhhYi5jcmwwHwYDVR0jBBgwFoAU9W5QKXAQrkNBl+H/jCjkkjkd3fAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS84MGU0MzI3Ny00NDkwLTRjYzktOTllYy01NzI2
YWYwOGM4YWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP/UCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIbNGvzK7wvs2SPmzGKiEDDED37+Sr1GFFVCfCOm5MG605C621ItSbGb
52T2KzOZ5UUzUCc3JhjUbBsHgLU33p5Dft+6F2YOZAeyrRf3EpGUjv2EeieyMFkV
VQN9mX0tSf99j5fagWsBw0yVCvF2oIH96FT2EMe5alp0G0c07DcOXxf6kQ8g6dkU
pE3Scql4SzyfPu5FEX51iJuGNsHVtmnfXUcG+SLbJTrNCR7B7RhbKKLX27c/vf92
cmMrtiAh6ldt/2D/+3GlqKdm7ISF7tg1kJF4OuzxEBEUfmSKaqiBC9uXw9ATJS9e
FmaleVkFkNuhR7Bz6VejS7+Ghfu6GBs=
-----END CERTIFICATE-----
Generated at Thu Apr 10 06:59:50 2025 by rpki-client