Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/190cd081-bd70-3693-ae24-89826bca0914.roa
File: 190cd081-bd70-3693-ae24-89826bca0914.roa (raw, json)
Hash identifier: XjWKC96KhtbrXhhGwa3tMrWMw9/2EJXsySaFiUHbIK4=
Subject key identifier: 69:B8:AF:43:C6:0E:48:00:4C:BC:0A:50:61:8E:B9:67:80:B1:61:E8
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584917DC053456EA44589F1A1820
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/190cd081-bd70-3693-ae24-89826bca0914.roa
Signing time: Thu 06 Mar 2025 02:00:39 +0000
ROA not before: Thu 06 Mar 2025 02:00:39 +0000
ROA not after: Wed 04 Jun 2025 01:00:39 +0000
asID: 6167
IP address blocks: 72.96.8.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:17:dc:05:34:56:ea:44:58:9f:1a:18:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 6 02:00:39 2025 GMT
Not After : Jun 4 01:00:39 2025 GMT
Subject: CN=9c6aafea-3e17-4247-ae8e-d470036dcf0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b3:aa:55:ac:86:71:6d:34:c9:4d:e9:91:af:
c2:95:f1:2d:92:67:ef:de:a1:52:9d:3a:ce:3e:3a:
04:fd:82:cd:9c:42:35:07:f1:25:18:30:e6:05:b6:
a7:ee:1e:2c:0c:e1:b6:6a:61:9f:45:7f:3b:82:2d:
92:b4:6d:d4:91:bc:ae:81:9f:3f:ca:ca:36:83:9a:
db:fe:6a:b4:6e:7c:4d:eb:0e:30:fe:97:16:ca:be:
3d:9f:56:68:f0:4a:01:0b:c7:3d:9f:f9:3d:7a:42:
ef:76:fb:f4:21:6f:e7:3d:f1:85:06:f1:dd:2f:c9:
18:1c:e5:f2:1c:2c:41:39:09:6c:32:d5:bf:29:5a:
5a:14:b7:42:a9:e9:ef:7a:b9:97:79:c6:30:fb:88:
72:a3:b9:57:2a:2b:ea:fe:73:bf:94:8f:be:b3:fc:
f2:45:c7:13:00:c9:be:75:61:fa:e7:7f:2e:e7:5b:
ee:32:22:99:86:97:1d:d3:bf:9e:8e:74:b1:22:43:
2d:45:49:90:40:2a:a0:36:44:13:bb:3d:c1:71:97:
f1:62:c1:fd:cb:e1:d9:c9:fc:6f:a2:23:1f:db:f0:
4d:64:e5:6b:7c:84:e0:41:70:bd:92:63:b0:e7:5f:
63:f4:43:13:e4:47:ce:41:d5:9a:95:99:17:34:e9:
c6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B8:AF:43:C6:0E:48:00:4C:BC:0A:50:61:8E:B9:67:80:B1:61:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/190cd081-bd70-3693-ae24-89826bca0914.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.96.8.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:6b:65:eb:55:2c:9d:20:18:c7:aa:01:28:0d:ce:32:cf:7b:
d7:7f:60:76:c5:6f:41:9a:fa:ac:0b:37:e4:5f:43:78:af:ba:
85:45:cc:31:6f:54:cc:04:81:09:22:52:70:22:62:5e:09:62:
f9:b0:1d:c2:23:ae:3f:13:bc:d7:b2:89:34:e5:cd:57:d4:af:
41:81:90:3b:64:87:9a:10:d5:c9:0a:10:7f:c1:ce:a0:d7:b1:
f4:bf:a2:eb:a7:60:96:4c:57:84:1d:74:eb:5f:6f:71:71:e4:
82:e2:6e:38:ab:d4:4a:4d:7c:fb:df:4a:21:e2:db:f2:3d:c9:
d7:7f:ad:56:93:3e:8c:24:b9:3e:d1:a4:eb:53:c4:fa:66:51:
ea:cc:8a:22:48:91:df:ad:6e:a8:42:c7:10:0c:53:01:f6:22:
72:41:0b:41:4b:d0:4b:f7:0c:2b:34:fb:24:94:7f:76:eb:32:
1f:49:f6:3f:7a:25:dc:8d:08:b8:46:5a:f4:2e:dd:15:3b:a2:
05:b9:70:1d:99:37:dc:04:c3:e8:6f:d7:02:91:84:d6:2c:b1:
c6:d4:58:a9:44:43:b9:7f:4b:b9:6d:a6:0d:0c:b7:34:51:c3:
81:6a:66:b7:88:1e:9b:ee:c4:4c:b5:32:80:48:bc:1c:99:17:
d2:81:e9:03
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3AU0VupEWJ8aGCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk
OWM2YWFmZWEtM2UxNy00MjQ3LWFlOGUtZDQ3MDAzNmRjZjBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7OqVayGcW00yU3pka/ClfEtkmfv3qFSnTrO
PjoE/YLNnEI1B/ElGDDmBban7h4sDOG2amGfRX87gi2StG3UkbyugZ8/yso2g5rb
/mq0bnxN6w4w/pcWyr49n1Zo8EoBC8c9n/k9ekLvdvv0IW/nPfGFBvHdL8kYHOXy
HCxBOQlsMtW/KVpaFLdCqenvermXecYw+4hyo7lXKivq/nO/lI++s/zyRccTAMm+
dWH6538u51vuMiKZhpcd07+ejnSxIkMtRUmQQCqgNkQTuz3BcZfxYsH9y+HZyfxv
oiMf2/BNZOVrfITgQXC9kmOw519j9EMT5EfOQdWalZkXNOnGZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGm4r0PGDkgATLwKUGGOuWeAsWHoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMTkwY2QwODEtYmQ3MC0z
NjkzLWFlMjQtODk4MjZiY2EwOTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGAIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADprZetVLJ0gGMeqASgNzjLPe9d/YHbFb0Ga+qwLN+RfQ3ivuoVFzDFv
VMwEgQkiUnAiYl4JYvmwHcIjrj8TvNeyiTTlzVfUr0GBkDtkh5oQ1ckKEH/BzqDX
sfS/ouunYJZMV4QddOtfb3Fx5ILibjir1EpNfPvfSiHi2/I9ydd/rVaTPowkuT7R
pOtTxPpmUerMiiJIkd+tbqhCxxAMUwH2InJBC0FL0Ev3DCs0+ySUf3brMh9J9j96
JdyNCLhGWvQu3RU7ogW5cB2ZN9wEw+hv1wKRhNYsscbUWKlEQ7l/S7ltpg0MtzRR
w4FqZreIHpvuxEy1MoBIvByZF9KB6QM=
-----END CERTIFICATE-----
Generated at Thu Apr 10 11:36:44 2025 by rpki-client