Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b07ca14-14aa-4b56-b9ce-46c9768a8f93/2c12ffd9-14c8-3a70-a515-2859b7b8f808.roa
File: 2c12ffd9-14c8-3a70-a515-2859b7b8f808.roa (raw, json)
Hash identifier: Fq9sV+SqIRfzg31EUOaIYlV/KVOJ++74PVIxEFsJruE=
Subject key identifier: 6D:B4:11:24:B0:A7:0F:63:DB:72:4E:9B:FB:4C:43:74:DE:25:B2:39
Certificate issuer: /CN=6b07ca14-14aa-4b56-b9ce-46c9768a8f93
Certificate serial: 010D0C9F4328584943E5F32BC7AB95DC3BAD8210
Authority key identifier: 05:DB:A8:45:3C:01:3F:61:68:0D:6E:53:31:03:A9:80:95:7E:5E:D3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b07ca14-14aa-4b56-b9ce-46c9768a8f93.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b07ca14-14aa-4b56-b9ce-46c9768a8f93/2c12ffd9-14c8-3a70-a515-2859b7b8f808.roa
Signing time: Fri 21 Mar 2025 20:36:18 +0000
ROA not before: Fri 21 Mar 2025 20:36:18 +0000
ROA not after: Thu 19 Jun 2025 20:36:18 +0000
asID: 17223
IP address blocks: 199.244.32.0/24 maxlen: 24
199.244.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b07ca14-14aa-4b56-b9ce-46c9768a8f93/6b07ca14-14aa-4b56-b9ce-46c9768a8f93.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b07ca14-14aa-4b56-b9ce-46c9768a8f93/6b07ca14-14aa-4b56-b9ce-46c9768a8f93.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b07ca14-14aa-4b56-b9ce-46c9768a8f93.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:43:e5:f3:2b:c7:ab:95:dc:3b:ad:82:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b07ca14-14aa-4b56-b9ce-46c9768a8f93
Validity
Not Before: Mar 21 20:36:18 2025 GMT
Not After : Jun 19 20:36:18 2025 GMT
Subject: CN=25d8e1ee-391a-49b7-913e-6a511f35a7f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c5:5c:9e:04:0f:66:ed:9d:0a:1e:45:be:85:
80:0f:50:63:b8:66:28:6f:d5:7c:5a:b9:0c:83:af:
85:0d:c7:db:29:c9:ff:10:c8:04:d0:38:bf:e8:f3:
e7:6c:19:61:7f:84:df:df:c5:18:69:d0:31:0e:41:
15:97:5c:1b:53:c3:b6:e2:91:fd:92:cb:73:4c:31:
1c:80:1d:7d:1d:bf:0b:2d:ad:59:02:d5:2c:07:6c:
a4:0c:06:f6:66:5b:7e:8b:91:5a:4e:a0:f5:36:88:
34:b7:97:4d:bd:f0:6c:24:47:53:14:60:a2:29:bc:
e3:0d:cb:22:2b:4a:43:bd:d5:9b:28:7e:ee:94:39:
e3:c2:60:58:11:49:24:1e:12:bf:c6:e6:2c:b2:f3:
0c:82:49:d1:80:c4:8b:9d:53:bb:c7:f0:87:e7:7c:
d9:e5:41:a3:88:7c:05:74:46:fb:69:99:df:09:6f:
9f:b3:a9:c1:65:5b:28:9c:69:7a:d3:11:de:7a:40:
ec:67:c8:94:8d:2e:2b:e1:56:17:e1:b3:07:5a:c6:
e1:3d:5e:71:1f:1d:f3:35:1d:84:d7:23:70:fd:a9:
b9:93:7c:cb:c7:6e:62:6b:a1:dd:ea:f0:34:12:20:
ba:bd:35:33:c0:50:fd:41:0e:d9:9a:0a:9f:d8:59:
46:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:B4:11:24:B0:A7:0F:63:DB:72:4E:9B:FB:4C:43:74:DE:25:B2:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b07ca14-14aa-4b56-b9ce-46c9768a8f93/2c12ffd9-14c8-3a70-a515-2859b7b8f808.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b07ca14-14aa-4b56-b9ce-46c9768a8f93/6b07ca14-14aa-4b56-b9ce-46c9768a8f93.crl
X509v3 Authority Key Identifier:
keyid:05:DB:A8:45:3C:01:3F:61:68:0D:6E:53:31:03:A9:80:95:7E:5E:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b07ca14-14aa-4b56-b9ce-46c9768a8f93.cer
sbgp-ipAddrBlock: critical
IPv4:
199.244.32.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:02:af:0a:48:e2:40:95:c1:8b:bb:6d:a5:63:bd:f1:8f:9e:
28:45:07:54:87:fe:7b:b7:ed:5c:64:3c:9a:67:dd:7e:4f:31:
a5:a2:87:64:91:df:4e:98:3f:6e:27:40:a3:43:3d:b7:78:4e:
b8:db:77:8f:ee:41:7b:a6:b5:53:15:43:ee:7a:3d:ef:c3:2a:
3f:4d:8f:ea:df:0f:fc:f0:e2:df:7f:dc:79:92:d6:77:da:73:
b3:36:27:ae:5b:34:2e:ce:1f:ef:34:83:7b:7f:9c:ab:98:43:
25:46:fc:d6:7b:e7:f2:5d:88:09:ae:32:e9:7e:15:48:32:c1:
70:7e:99:82:1d:33:62:66:d8:27:b6:df:a0:1b:7b:c6:db:af:
71:99:4f:db:c8:07:98:a7:29:5e:85:27:44:d3:a9:84:2f:c8:
c4:37:b5:92:b5:67:3e:86:8e:60:56:0a:bb:f0:0b:2b:c5:ac:
3f:62:25:a4:e5:78:a4:7d:d6:4b:92:7c:36:0e:42:2b:41:41:
ab:a1:3a:dd:5e:a9:c1:48:5e:59:a5:f9:7a:ab:95:0b:86:8d:
ea:a2:b1:e5:61:8b:e0:04:55:f0:c2:10:38:99:54:82:fd:b4:
5e:db:3d:5a:a6:b8:f7:85:fc:9c:35:54:6c:d5:29:e8:97:e8:
3f:55:35:86
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElD5fMrx6uV3DutghAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmIwN2NhMTQtMTRhYS00YjU2LWI5Y2UtNDZjOTc2OGE4
ZjkzMB4XDTI1MDMyMTIwMzYxOFoXDTI1MDYxOTIwMzYxOFowLzEtMCsGA1UEAxMk
MjVkOGUxZWUtMzkxYS00OWI3LTkxM2UtNmE1MTFmMzVhN2Y0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MVcngQPZu2dCh5FvoWAD1BjuGYob9V8WrkM
g6+FDcfbKcn/EMgE0Di/6PPnbBlhf4Tf38UYadAxDkEVl1wbU8O24pH9kstzTDEc
gB19Hb8LLa1ZAtUsB2ykDAb2Zlt+i5FaTqD1Nog0t5dNvfBsJEdTFGCiKbzjDcsi
K0pDvdWbKH7ulDnjwmBYEUkkHhK/xuYssvMMgknRgMSLnVO7x/CH53zZ5UGjiHwF
dEb7aZnfCW+fs6nBZVsonGl60xHeekDsZ8iUjS4r4VYX4bMHWsbhPV5xHx3zNR2E
1yNw/am5k3zLx25ia6Hd6vA0EiC6vTUzwFD9QQ7Zmgqf2FlGGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG20ESSwpw9j23JOm/tMQ3TeJbI5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82YjA3
Y2ExNC0xNGFhLTRiNTYtYjljZS00NmM5NzY4YThmOTMvMmMxMmZmZDktMTRjOC0z
YTcwLWE1MTUtMjg1OWI3YjhmODA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNmIwN2NhMTQtMTRhYS00YjU2LWI5
Y2UtNDZjOTc2OGE4ZjkzLzZiMDdjYTE0LTE0YWEtNGI1Ni1iOWNlLTQ2Yzk3Njhh
OGY5My5jcmwwHwYDVR0jBBgwFoAUBduoRTwBP2FoDW5TMQOpgJV+XtMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy82YjA3Y2ExNC0xNGFhLTRiNTYtYjljZS00NmM5
NzY4YThmOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx/QgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAUCrwpI4kCVwYu7baVjvfGPnihFB1SH/nu37VxkPJpn3X5PMaWih2SR
306YP24nQKNDPbd4Trjbd4/uQXumtVMVQ+56Pe/DKj9Nj+rfD/zw4t9/3HmS1nfa
c7M2J65bNC7OH+80g3t/nKuYQyVG/NZ75/JdiAmuMul+FUgywXB+mYIdM2Jm2Ce2
36Abe8bbr3GZT9vIB5inKV6FJ0TTqYQvyMQ3tZK1Zz6GjmBWCrvwCyvFrD9iJaTl
eKR91kuSfDYOQitBQauhOt1eqcFIXlml+XqrlQuGjeqiseVhi+AEVfDCEDiZVIL9
tF7bPVqmuPeF/Jw1VGzVKeiX6D9VNYY=
-----END CERTIFICATE-----
Generated at Wed Apr 9 14:49:48 2025 by rpki-client