Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/75d15f4b-7cf2-3a45-ba05-a6f27300ae81.roa
File: 75d15f4b-7cf2-3a45-ba05-a6f27300ae81.roa (raw, json)
Hash identifier: wF8VcbZs0zYSh0zcrftixJlUYgDagOitQhDjStdPGbc=
Subject key identifier: A2:5D:CF:D4:C0:DC:9A:4B:6E:8C:AB:C6:5A:77:CA:C2:E7:A7:F5:7A
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858490B4C28B3E820A62E11EFE500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/75d15f4b-7cf2-3a45-ba05-a6f27300ae81.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 701
IP address blocks: 72.73.32.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:28:b3:e8:20:a6:2e:11:ef:e5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=f7708717-3817-4c58-9355-23eadcb8ecf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ed:5a:8b:b9:3c:7e:d2:ae:c0:8c:09:27:3b:
6f:92:26:42:9b:9f:30:28:0e:cc:3e:06:7b:f9:5b:
85:bd:d2:97:98:8d:cb:63:f5:2d:72:53:2f:ab:f5:
9f:7f:2a:39:81:db:b9:67:7c:06:ba:3f:c0:29:31:
8e:4c:60:f8:9c:db:cd:00:5b:1a:fb:4e:b2:fb:d9:
6c:13:81:f2:03:01:9c:5b:1c:9a:59:e0:1d:9d:66:
f2:31:49:c0:62:a6:fa:30:8a:c2:ef:11:53:60:e8:
a9:52:2e:3f:f6:5a:0e:cf:c2:1b:73:ec:17:c7:e5:
ba:c1:ba:df:ba:e3:1c:45:1a:46:72:ce:90:ed:10:
e7:e5:c6:e9:21:22:ce:a1:dd:45:1e:cd:88:6d:12:
f2:4d:ad:0d:24:a1:3d:0f:d3:9e:c5:31:07:35:da:
45:85:9f:2e:fe:3c:34:14:2e:9d:0b:69:a3:b6:1e:
32:f0:8e:b0:77:96:aa:b3:29:f7:12:54:18:d5:f7:
73:e4:99:f9:5d:36:5d:e5:e0:bd:cc:65:db:9c:1c:
89:f2:73:3d:68:67:32:67:77:54:f1:16:7b:92:43:
d8:00:8c:08:4d:8d:c1:1b:b2:a3:5b:c1:0d:4f:ec:
a3:82:82:60:e8:fa:c1:4f:5a:81:6b:3a:6f:6b:4f:
09:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:5D:CF:D4:C0:DC:9A:4B:6E:8C:AB:C6:5A:77:CA:C2:E7:A7:F5:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/75d15f4b-7cf2-3a45-ba05-a6f27300ae81.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.73.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:10:0a:08:e1:e2:71:33:cc:a7:4c:e6:e3:4a:73:69:dc:01:
2e:3a:30:fa:c7:1f:37:e2:8c:b3:e3:c1:62:24:e3:9b:80:f5:
c3:06:20:08:a5:58:bd:79:e5:87:64:a0:c0:51:c3:cc:41:78:
8c:a3:59:5a:f3:10:d0:e1:32:64:20:4e:c8:dd:26:e6:47:1a:
e8:69:fc:87:c7:95:5c:ca:88:f3:31:cb:26:e8:1e:39:ad:95:
1b:0b:c2:76:a9:c4:72:9a:c2:de:26:87:3e:de:34:ba:35:f1:
c1:b0:c5:79:91:3e:be:bd:4e:e0:aa:e9:34:08:7d:af:3f:8d:
b2:6f:16:99:c1:b8:57:0c:27:c3:ee:b4:cb:dd:f3:ab:c3:38:
bf:42:de:a8:b4:6e:1b:5e:3a:59:30:70:62:95:2e:93:85:4d:
5b:e8:9c:6a:37:1e:a5:2e:a8:8b:6b:5f:d5:74:d3:ea:ed:69:
d7:2f:f6:74:55:3d:b0:96:c9:42:5f:16:4d:35:a2:5d:33:f1:
8d:a6:3a:93:de:9f:e6:e5:88:d2:99:94:23:8e:73:4a:15:6f:
7e:2f:7b:10:dc:99:63:42:ea:b3:1b:2b:19:02:bc:4c:50:08:
a3:c1:b9:4b:2f:0b:70:96:c2:3c:6d:4e:c1:e1:a0:49:4a:87:
53:d9:86:98
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTCiz6CCmLhHv5QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk
Zjc3MDg3MTctMzgxNy00YzU4LTkzNTUtMjNlYWRjYjhlY2YwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhO1ai7k8ftKuwIwJJztvkiZCm58wKA7MPgZ7
+VuFvdKXmI3LY/UtclMvq/Wffyo5gdu5Z3wGuj/AKTGOTGD4nNvNAFsa+06y+9ls
E4HyAwGcWxyaWeAdnWbyMUnAYqb6MIrC7xFTYOipUi4/9loOz8Ibc+wXx+W6wbrf
uuMcRRpGcs6Q7RDn5cbpISLOod1FHs2IbRLyTa0NJKE9D9OexTEHNdpFhZ8u/jw0
FC6dC2mjth4y8I6wd5aqsyn3ElQY1fdz5Jn5XTZd5eC9zGXbnByJ8nM9aGcyZ3dU
8RZ7kkPYAIwITY3BG7KjW8ENT+yjgoJg6PrBT1qBazpva08JfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKJdz9TA3JpLboyrxlp3ysLnp/V6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNzVkMTVmNGItN2NmMi0z
YTQ1LWJhMDUtYTZmMjczMDBhZTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESEkgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADkQCgjh4nEzzKdM5uNKc2ncAS46MPrHHzfijLPjwWIk45uA9cMGIAil
WL155YdkoMBRw8xBeIyjWVrzENDhMmQgTsjdJuZHGuhp/IfHlVzKiPMxyyboHjmt
lRsLwnapxHKawt4mhz7eNLo18cGwxXmRPr69TuCq6TQIfa8/jbJvFpnBuFcMJ8Pu
tMvd86vDOL9C3qi0bhteOlkwcGKVLpOFTVvonGo3HqUuqItrX9V00+rtadcv9nRV
PbCWyUJfFk01ol0z8Y2mOpPen+bliNKZlCOOc0oVb34vexDcmWNC6rMbKxkCvExQ
CKPBuUsvC3CWwjxtTsHhoElKh1PZhpg=
-----END CERTIFICATE-----
Generated at Thu Apr 10 05:38:32 2025 by rpki-client