Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/164684e1-9b37-4d55-af01-f21223eda67a/f86bd629-8bd6-32d1-88e5-4970f8fd1dc6.roa
File: f86bd629-8bd6-32d1-88e5-4970f8fd1dc6.roa (raw, json)
Hash identifier: wZDPytARdxKrkXBKAZSxdqFx5mwbQC+2LoM+O1o9Tno=
Subject key identifier: EA:CB:FC:02:63:0C:5A:1C:26:C0:0A:7C:C6:7D:5F:21:0B:C0:30:3E
Certificate issuer: /CN=164684e1-9b37-4d55-af01-f21223eda67a
Certificate serial: 010D0C9F432858495F564A6A896F3F1465309C80
Authority key identifier: E7:22:F6:58:1E:4D:B7:C2:FC:8E:1F:33:C2:5C:F2:A8:29:AF:C7:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/164684e1-9b37-4d55-af01-f21223eda67a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/164684e1-9b37-4d55-af01-f21223eda67a/f86bd629-8bd6-32d1-88e5-4970f8fd1dc6.roa
Signing time: Mon 31 Mar 2025 16:29:29 +0000
ROA not before: Mon 31 Mar 2025 16:29:29 +0000
ROA not after: Sun 29 Jun 2025 16:29:29 +0000
asID: 55168
IP address blocks: 2604:a20::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/164684e1-9b37-4d55-af01-f21223eda67a/164684e1-9b37-4d55-af01-f21223eda67a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/164684e1-9b37-4d55-af01-f21223eda67a/164684e1-9b37-4d55-af01-f21223eda67a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/164684e1-9b37-4d55-af01-f21223eda67a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 18 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5f:56:4a:6a:89:6f:3f:14:65:30:9c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=164684e1-9b37-4d55-af01-f21223eda67a
Validity
Not Before: Mar 31 16:29:29 2025 GMT
Not After : Jun 29 16:29:29 2025 GMT
Subject: CN=2018c985-a652-4170-b715-327b6a4bc9ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d9:25:1b:2d:ae:22:fe:90:fa:1a:85:52:bc:
92:5f:9e:ac:86:c4:37:f1:f3:56:25:1d:5f:e5:e1:
32:a4:b3:15:2a:32:a7:01:35:79:dd:dd:6e:26:16:
2a:f9:1e:25:d4:10:62:3e:e3:a5:2c:94:ce:26:b8:
4d:6d:31:9f:a8:ed:f1:4d:5e:3d:00:9f:6d:00:93:
6d:a5:7f:d1:97:09:43:43:45:c1:24:db:10:57:cc:
51:58:e3:d1:f6:de:8f:b1:40:9c:3c:22:0b:2f:af:
b7:47:90:65:9e:71:de:a0:cd:60:20:5f:42:d7:0b:
2e:0a:ae:16:14:c4:b2:27:7f:8c:a5:12:1b:b9:32:
c9:90:c5:2d:da:45:fa:e6:17:34:8a:0a:bd:6e:e3:
28:c4:76:d2:c8:06:0d:22:28:c8:7c:26:f4:95:88:
5b:a4:89:50:4f:80:91:3d:9b:b4:55:2b:32:ec:b8:
29:a9:7a:4e:59:2f:96:66:8f:8f:da:9c:7e:2a:24:
b3:40:e3:4a:41:e2:32:d8:c3:01:55:35:60:55:a6:
85:3b:10:d5:67:98:c3:8d:d7:e9:6b:e9:8c:00:7c:
bc:1e:2e:5d:c1:e1:40:53:73:84:0d:99:11:66:23:
65:4d:75:87:6c:89:6e:17:a8:fe:bc:71:a2:7c:f5:
ea:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:CB:FC:02:63:0C:5A:1C:26:C0:0A:7C:C6:7D:5F:21:0B:C0:30:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/164684e1-9b37-4d55-af01-f21223eda67a/f86bd629-8bd6-32d1-88e5-4970f8fd1dc6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/164684e1-9b37-4d55-af01-f21223eda67a/164684e1-9b37-4d55-af01-f21223eda67a.crl
X509v3 Authority Key Identifier:
keyid:E7:22:F6:58:1E:4D:B7:C2:FC:8E:1F:33:C2:5C:F2:A8:29:AF:C7:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/164684e1-9b37-4d55-af01-f21223eda67a.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:a20::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:00:1f:d3:79:10:48:46:cd:97:7c:21:d2:06:22:af:13:87:
58:37:c6:ae:e0:bf:1c:f3:96:8e:5c:31:d1:f5:22:c5:d7:11:
c0:a7:0e:27:28:03:2c:cb:e0:c2:de:14:1e:b5:54:72:0c:b6:
bd:4b:6a:b1:9e:41:39:cc:b5:bb:2d:b3:4d:60:74:da:7e:20:
b4:0f:ba:5a:ab:f0:7e:04:fb:c9:fe:ca:ed:46:3a:60:b9:33:
da:08:ac:3e:6f:19:fd:a4:43:8c:53:73:fe:ad:a5:70:5a:bf:
1e:f8:eb:2d:0e:6e:f6:b3:89:7f:1c:fe:d1:ef:4e:ae:00:13:
c3:ce:b2:1b:68:b7:b4:bb:87:58:47:aa:74:17:57:05:5d:d1:
bf:5c:32:39:a8:12:32:72:d2:35:1a:4a:bb:07:21:b0:f9:a4:
13:e5:2c:1f:eb:cf:50:d3:bd:5f:0f:7a:92:57:41:b0:d6:a2:
cf:0c:61:55:33:70:ba:da:04:8c:ce:5e:8c:26:f4:b4:cb:49:
c9:80:4b:1b:54:d6:17:3b:a0:de:20:88:c6:3d:12:b6:d0:6c:
ad:d9:47:ed:9f:d4:a7:f4:7e:e6:86:d1:8f:aa:2d:bf:e8:d1:
ad:b4:e2:0b:b4:8d:0e:b0:fc:10:4c:06:f4:4c:1c:3d:ca:11:
84:82:ac:6f
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElfVkpqiW8/FGUwnIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTY0Njg0ZTEtOWIzNy00ZDU1LWFmMDEtZjIxMjIzZWRh
NjdhMB4XDTI1MDMzMTE2MjkyOVoXDTI1MDYyOTE2MjkyOVowLzEtMCsGA1UEAxMk
MjAxOGM5ODUtYTY1Mi00MTcwLWI3MTUtMzI3YjZhNGJjOWVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tklGy2uIv6Q+hqFUrySX56shsQ38fNWJR1f
5eEypLMVKjKnATV53d1uJhYq+R4l1BBiPuOlLJTOJrhNbTGfqO3xTV49AJ9tAJNt
pX/RlwlDQ0XBJNsQV8xRWOPR9t6PsUCcPCILL6+3R5BlnnHeoM1gIF9C1wsuCq4W
FMSyJ3+MpRIbuTLJkMUt2kX65hc0igq9buMoxHbSyAYNIijIfCb0lYhbpIlQT4CR
PZu0VSsy7LgpqXpOWS+WZo+P2px+KiSzQONKQeIy2MMBVTVgVaaFOxDVZ5jDjdfp
a+mMAHy8Hi5dweFAU3OEDZkRZiNlTXWHbIluF6j+vHGifPXqcQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFOrL/AJjDFocJsAKfMZ9XyELwDA+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8xNjQ2
ODRlMS05YjM3LTRkNTUtYWYwMS1mMjEyMjNlZGE2N2EvZjg2YmQ2MjktOGJkNi0z
MmQxLTg4ZTUtNDk3MGY4ZmQxZGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMTY0Njg0ZTEtOWIzNy00ZDU1LWFm
MDEtZjIxMjIzZWRhNjdhLzE2NDY4NGUxLTliMzctNGQ1NS1hZjAxLWYyMTIyM2Vk
YTY3YS5jcmwwHwYDVR0jBBgwFoAU5yL2WB5Nt8L8jh8zwlzyqCmvx0UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8xNjQ2ODRlMS05YjM3LTRkNTUtYWYwMS1mMjEy
MjNlZGE2N2EuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQKIDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAWAB/TeRBIRs2XfCHSBiKvE4dYN8au4L8c85aOXDHR9SLF1xHApw4n
KAMsy+DC3hQetVRyDLa9S2qxnkE5zLW7LbNNYHTafiC0D7paq/B+BPvJ/srtRjpg
uTPaCKw+bxn9pEOMU3P+raVwWr8e+OstDm72s4l/HP7R706uABPDzrIbaLe0u4dY
R6p0F1cFXdG/XDI5qBIyctI1Gkq7ByGw+aQT5Swf689Q071fD3qSV0Gw1qLPDGFV
M3C62gSMzl6MJvS0y0nJgEsbVNYXO6DeIIjGPRK20Gyt2Uftn9Sn9H7mhtGPqi2/
6NGttOILtI0OsPwQTAb0TBw9yhGEgqxv
-----END CERTIFICATE-----
Generated at Thu Apr 17 05:10:18 2025 by rpki-client