Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/60a02ca3-def9-373c-9cab-e414a3744c3a.roa
File: 60a02ca3-def9-373c-9cab-e414a3744c3a.roa (raw, json)
Hash identifier: NWoE7j+dRz1rcWKXzoGRBeFnt7xVUgoq5+zV1qd/oJA=
Subject key identifier: BF:93:8F:B1:F3:4D:DD:59:F9:DE:81:2B:10:08:EE:2E:DA:78:5C:A1
Certificate issuer: /CN=9eee3662-bee3-410a-9cb1-559a07ce6a9c
Certificate serial: 010D0C9F432858493A8A2609CFC52DBBFD128600
Authority key identifier: 62:5E:5D:D6:AA:8D:AD:0C:90:3F:B0:31:38:6D:1E:33:51:89:D1:FA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/60a02ca3-def9-373c-9cab-e414a3744c3a.roa
Signing time: Tue 18 Mar 2025 12:09:04 +0000
ROA not before: Tue 18 Mar 2025 12:09:04 +0000
ROA not after: Mon 16 Jun 2025 12:09:04 +0000
asID: 29789
IP address blocks: 64.210.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/9eee3662-bee3-410a-9cb1-559a07ce6a9c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/9eee3662-bee3-410a-9cb1-559a07ce6a9c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 17 Apr 2025 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3a:8a:26:09:cf:c5:2d:bb:fd:12:86:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eee3662-bee3-410a-9cb1-559a07ce6a9c
Validity
Not Before: Mar 18 12:09:04 2025 GMT
Not After : Jun 16 12:09:04 2025 GMT
Subject: CN=768e868f-6965-451d-b156-2e7d09253104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e9:22:a4:72:89:a2:f5:a5:14:ef:6f:94:aa:
95:3d:e9:b0:15:bd:7f:58:d7:70:69:18:2e:d0:b0:
a4:d8:77:ab:6d:a5:61:86:1b:81:d6:44:78:3c:8d:
cf:1e:21:da:e6:0a:c9:f8:f1:0e:84:ab:4e:ed:f0:
ab:55:5d:a0:d1:68:73:51:aa:66:59:76:ef:ac:fe:
43:a9:84:04:d1:b8:28:05:9b:c5:af:9e:c1:c1:dd:
6a:ba:d8:8d:e7:e7:17:7f:15:ce:74:06:c9:03:d2:
ba:a1:cc:de:47:a0:32:d4:af:1d:00:b4:5c:3e:42:
1b:9d:52:20:43:57:eb:28:ee:3a:4b:2a:03:cf:e2:
66:22:d0:66:a5:15:39:0c:16:a1:cd:cc:8b:40:7a:
fe:af:65:e3:ca:d2:c3:d4:84:a1:f4:17:4b:cf:3a:
c1:26:05:76:1b:53:03:f3:bd:e3:aa:1d:06:df:e1:
15:d8:23:fa:f5:1b:d2:0d:4e:dc:9d:0c:cf:25:57:
35:46:32:54:cc:e9:7f:4d:0d:88:ae:b7:92:23:e9:
fa:c5:3d:81:67:8b:28:3e:c8:f9:ec:63:02:84:22:
12:b9:62:18:47:3c:d3:27:15:71:7a:85:54:8f:6b:
b1:e0:a6:c5:77:f4:29:76:9c:ab:d0:bc:2b:5b:94:
06:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:93:8F:B1:F3:4D:DD:59:F9:DE:81:2B:10:08:EE:2E:DA:78:5C:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/60a02ca3-def9-373c-9cab-e414a3744c3a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/9eee3662-bee3-410a-9cb1-559a07ce6a9c.crl
X509v3 Authority Key Identifier:
keyid:62:5E:5D:D6:AA:8D:AD:0C:90:3F:B0:31:38:6D:1E:33:51:89:D1:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c.cer
sbgp-ipAddrBlock: critical
IPv4:
64.210.157.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:03:4f:6d:50:7b:8b:d0:4b:b1:3a:45:f9:0d:fc:34:9b:84:
98:e4:2d:a1:e5:45:dd:43:a5:8c:5f:5f:fd:14:b8:2f:8b:1e:
b6:33:96:48:c0:b5:d3:fe:92:91:c2:2c:74:0f:0b:e1:29:1d:
a2:39:e0:c3:92:3f:d5:62:f2:da:7a:7e:2d:33:d7:25:15:e5:
0a:9e:b4:ac:87:3f:63:77:e5:94:70:cf:9e:ac:b0:b6:ae:e2:
ba:7c:5b:99:3a:37:bb:f2:61:67:0c:a5:f9:0a:5b:2b:54:44:
be:ab:2f:11:e0:62:f9:e5:7e:66:b2:f8:fa:bb:75:fe:74:58:
28:5e:b4:00:e5:cd:a1:e1:f7:29:71:ea:e4:39:b0:6d:17:20:
8f:8e:a5:4b:f1:6a:88:d3:4f:e4:c6:c3:ab:16:f9:3f:6c:56:
d6:30:38:4f:f4:ea:68:50:81:78:f2:4a:55:48:49:7a:a6:35:
3c:86:6d:74:21:2b:8e:81:96:04:d4:c8:fa:49:d8:28:c6:ad:
28:c2:72:f0:6c:06:7c:67:77:9c:a6:7b:f8:c6:7f:d8:0e:b1:
f4:1f:74:9a:d8:39:a7:34:a9:1e:98:ad:53:5a:cb:b1:fc:53:
67:ca:a6:fe:36:82:1c:cb:30:d4:14:2b:33:39:d4:9f:c9:66:
68:b8:e6:89
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk6iiYJz8Utu/0ShgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWVlZTM2NjItYmVlMy00MTBhLTljYjEtNTU5YTA3Y2U2
YTljMB4XDTI1MDMxODEyMDkwNFoXDTI1MDYxNjEyMDkwNFowLzEtMCsGA1UEAxMk
NzY4ZTg2OGYtNjk2NS00NTFkLWIxNTYtMmU3ZDA5MjUzMTA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOkipHKJovWlFO9vlKqVPemwFb1/WNdwaRgu
0LCk2HerbaVhhhuB1kR4PI3PHiHa5grJ+PEOhKtO7fCrVV2g0WhzUapmWXbvrP5D
qYQE0bgoBZvFr57Bwd1qutiN5+cXfxXOdAbJA9K6oczeR6Ay1K8dALRcPkIbnVIg
Q1frKO46SyoDz+JmItBmpRU5DBahzcyLQHr+r2XjytLD1ISh9BdLzzrBJgV2G1MD
873jqh0G3+EV2CP69RvSDU7cnQzPJVc1RjJUzOl/TQ2IrreSI+n6xT2BZ4soPsj5
7GMChCISuWIYRzzTJxVxeoVUj2ux4KbFd/Qpdpyr0LwrW5QGEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL+Tj7HzTd1Z+d6BKxAI7i7aeFyhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85ZWVl
MzY2Mi1iZWUzLTQxMGEtOWNiMS01NTlhMDdjZTZhOWMvNjBhMDJjYTMtZGVmOS0z
NzNjLTljYWItZTQxNGEzNzQ0YzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOWVlZTM2NjItYmVlMy00MTBhLTlj
YjEtNTU5YTA3Y2U2YTljLzllZWUzNjYyLWJlZTMtNDEwYS05Y2IxLTU1OWEwN2Nl
NmE5Yy5jcmwwHwYDVR0jBBgwFoAUYl5d1qqNrQyQP7AxOG0eM1GJ0fowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi85ZWVlMzY2Mi1iZWUzLTQxMGEtOWNiMS01NTlh
MDdjZTZhOWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQNKdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEkDT21Qe4vQS7E6RfkN/DSbhJjkLaHlRd1DpYxfX/0UuC+LHrYzlkjA
tdP+kpHCLHQPC+EpHaI54MOSP9Vi8tp6fi0z1yUV5QqetKyHP2N35ZRwz56ssLau
4rp8W5k6N7vyYWcMpfkKWytURL6rLxHgYvnlfmay+Pq7df50WChetADlzaHh9ylx
6uQ5sG0XII+OpUvxaojTT+TGw6sW+T9sVtYwOE/06mhQgXjySlVISXqmNTyGbXQh
K46BlgTUyPpJ2CjGrSjCcvBsBnxnd5yme/jGf9gOsfQfdJrYOac0qR6YrVNay7H8
U2fKpv42ghzLMNQUKzM51J/JZmi45ok=
-----END CERTIFICATE-----
Generated at Tue Apr 15 15:59:10 2025 by rpki-client