Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0404a015-1036-3526-b744-6773265cdf60.roa
File: 0404a015-1036-3526-b744-6773265cdf60.roa (raw, json)
Hash identifier: nJK0b1UkM5QxbApCD7aKoGexGmNWjffknZsqR0JxmYw=
Subject key identifier: C6:68:FA:CA:F7:9B:20:69:8F:7B:7B:D5:B8:37:E0:92:ED:45:17:BB
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858495C244CC7028DF786FCF7D000
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0404a015-1036-3526-b744-6773265cdf60.roa
Signing time: Sun 30 Mar 2025 13:01:02 +0000
ROA not before: Sun 30 Mar 2025 13:01:02 +0000
ROA not after: Sat 28 Jun 2025 13:01:02 +0000
asID: 701
IP address blocks: 71.243.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5c:24:4c:c7:02:8d:f7:86:fc:f7:d0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 30 13:01:02 2025 GMT
Not After : Jun 28 13:01:02 2025 GMT
Subject: CN=f9cda4d9-eb3b-43bc-836a-e199ce6d682b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:39:65:50:67:17:8c:3e:52:2b:69:8e:8c:2d:
de:97:3e:ba:32:13:ba:11:98:0b:2d:7c:1b:e5:4b:
71:de:51:48:c3:50:90:ec:0f:00:0a:96:ea:03:5d:
a5:0c:44:4b:f9:5a:44:52:b1:37:b5:0f:c8:69:f3:
23:39:e3:72:66:65:90:d5:71:86:28:4c:ed:18:1e:
fa:d3:29:f2:60:67:c4:c9:c2:7d:4d:e9:cc:5d:1b:
22:25:76:37:10:7e:4d:28:89:b7:8e:90:9d:b1:eb:
02:95:83:17:28:6a:f2:e2:70:74:fb:24:1f:02:56:
be:50:9a:7f:3e:24:7e:fd:e1:76:fb:aa:ae:08:45:
86:7f:b1:2e:95:39:44:9a:d2:e0:f0:1d:13:a3:5c:
12:f5:3a:11:17:e4:b8:13:73:36:88:e5:b6:16:1a:
be:99:ae:1e:7b:89:4b:f3:e6:30:d8:8a:39:bd:ac:
f7:76:93:67:79:32:a0:00:d5:58:20:6e:1c:b0:42:
b2:78:6a:2e:46:d9:46:b0:83:cb:b4:3f:56:06:f9:
59:1c:68:7a:95:0b:c3:b7:0e:b2:13:85:67:15:53:
72:d7:cf:1a:d5:7a:d2:4f:1d:20:70:db:7f:4c:96:
de:79:81:1a:d5:7e:72:f6:66:92:04:11:64:3f:ba:
95:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:68:FA:CA:F7:9B:20:69:8F:7B:7B:D5:B8:37:E0:92:ED:45:17:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0404a015-1036-3526-b744-6773265cdf60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
71.243.1.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:12:07:87:7b:55:9f:ef:9f:8f:9c:46:90:10:c7:42:a1:7d:
6c:1d:b4:13:dd:f3:1f:8c:5b:38:9c:68:fe:c7:be:d0:60:a2:
7d:0d:ed:00:80:39:fc:5c:03:35:d1:d3:97:9c:cc:5d:cc:ab:
eb:c6:a6:2c:08:8e:85:8a:ee:9f:0b:33:ce:20:64:34:e7:60:
11:3b:15:a7:8e:45:0e:ee:87:a3:53:65:d3:7a:6c:c3:dd:df:
d3:b0:5f:77:97:58:2c:35:2c:15:11:1a:3c:4a:7e:ba:ba:fa:
48:07:8f:81:cb:0a:03:69:21:b2:3b:e4:9f:39:cf:23:7e:06:
e6:6e:13:ac:01:75:8f:9a:21:05:19:fa:6a:72:99:b2:dc:50:
70:8d:47:ea:14:fc:b5:8d:15:f2:b9:20:72:8f:85:4a:ae:41:
74:45:49:7c:f7:7b:5f:62:d7:85:e4:ea:b5:00:7f:70:88:08:
6c:81:13:26:fd:08:7b:c7:1e:d9:0d:a5:65:d0:8e:42:73:30:
b3:e0:e1:fc:d4:ca:38:38:92:6a:a9:4d:80:fa:cc:5e:d4:31:
4b:6b:b5:ef:80:5d:d8:ce:43:c9:3c:10:e4:ca:b7:2b:b1:aa:
0c:0a:8e:62:15:f1:89:cf:aa:04:79:e1:27:74:93:50:83:2e:
90:01:35:d3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJEzHAo33hvz30AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk
ZjljZGE0ZDktZWIzYi00M2JjLTgzNmEtZTE5OWNlNmQ2ODJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzllUGcXjD5SK2mOjC3elz66MhO6EZgLLXwb
5Utx3lFIw1CQ7A8ACpbqA12lDERL+VpEUrE3tQ/IafMjOeNyZmWQ1XGGKEztGB76
0ynyYGfEycJ9TenMXRsiJXY3EH5NKIm3jpCdsesClYMXKGry4nB0+yQfAla+UJp/
PiR+/eF2+6quCEWGf7EulTlEmtLg8B0To1wS9ToRF+S4E3M2iOW2Fhq+ma4ee4lL
8+Yw2Io5vaz3dpNneTKgANVYIG4csEKyeGouRtlGsIPLtD9WBvlZHGh6lQvDtw6y
E4VnFVNy188a1XrSTx0gcNt/TJbeeYEa1X5y9maSBBFkP7qVjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMZo+sr3myBpj3t71bg34JLtRRe7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMDQwNGEwMTUtMTAzNi0z
NTI2LWI3NDQtNjc3MzI2NWNkZjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAR/MBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHgSB4d7VZ/vn4+cRpAQx0KhfWwdtBPd8x+MWzicaP7HvtBgon0N7QCA
OfxcAzXR05eczF3Mq+vGpiwIjoWK7p8LM84gZDTnYBE7FaeORQ7uh6NTZdN6bMPd
39OwX3eXWCw1LBURGjxKfrq6+kgHj4HLCgNpIbI75J85zyN+BuZuE6wBdY+aIQUZ
+mpymbLcUHCNR+oU/LWNFfK5IHKPhUquQXRFSXz3e19i14Xk6rUAf3CICGyBEyb9
CHvHHtkNpWXQjkJzMLPg4fzUyjg4kmqpTYD6zF7UMUtrte+AXdjOQ8k8EOTKtyux
qgwKjmIV8YnPqgR54Sd0k1CDLpABNdM=
-----END CERTIFICATE-----
Generated at Thu Apr 10 11:17:47 2025 by rpki-client