Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b32e0872-c937-357c-833b-817abe08d267.roa
File: b32e0872-c937-357c-833b-817abe08d267.roa (raw, json)
Hash identifier: zkpPkRa9xUyygH8AI6dc6IwC+R8s/e/KpVvSpQSsYvo=
Subject key identifier: DE:17:13:8D:A9:51:CB:0E:84:AA:7E:AE:18:E4:EA:01:DD:83:FA:EF
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858490B4C33E4EDDC0D28B110EB80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b32e0872-c937-357c-833b-817abe08d267.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 701
IP address blocks: 96.240.0.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:33:e4:ed:dc:0d:28:b1:10:eb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=8e90cdfc-c476-4734-9f56-b320f7159d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1f:d9:c9:1a:61:fd:4c:ea:4f:39:36:f3:27:
aa:8f:79:39:ab:ef:34:53:d1:6b:f5:10:a1:57:97:
e8:d2:fb:47:a1:0f:c8:00:cf:4a:e4:6a:54:ca:18:
b6:00:3f:b8:e2:9c:af:73:b6:28:17:7b:ba:1f:1b:
51:56:4d:55:bd:03:bb:2f:32:da:91:be:12:f0:52:
43:cc:5b:f7:29:8e:43:20:12:b3:8f:d8:7d:51:9b:
89:74:af:97:df:14:a5:0a:17:4e:b3:21:a1:93:b3:
35:b7:db:f5:18:3a:4c:92:a7:ee:73:34:81:5f:5e:
0e:4c:d5:69:6b:8c:80:e9:9e:e2:70:70:8b:7f:c5:
9e:3a:bf:98:92:6b:ef:c5:4d:6a:06:96:28:80:88:
db:42:0b:b1:04:c1:9a:07:7e:85:de:0f:b4:a3:30:
1e:db:6d:80:64:d8:ef:b9:50:4c:59:51:69:59:fc:
fe:1d:a7:46:56:59:56:3e:36:ad:f7:9d:c7:9c:c7:
a0:ee:46:9d:6d:37:bd:93:0e:fc:7f:cb:7c:f0:13:
bf:c4:99:36:44:f9:ba:a0:26:b8:a5:0e:90:6d:1c:
89:84:a4:0d:23:32:82:f7:2e:a8:bf:60:a6:2a:d2:
dc:49:06:df:2d:a8:45:ba:68:36:19:cd:87:aa:5b:
3b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:17:13:8D:A9:51:CB:0E:84:AA:7E:AE:18:E4:EA:01:DD:83:FA:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b32e0872-c937-357c-833b-817abe08d267.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
96.240.0.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:f7:ce:96:dd:fe:42:e7:8f:cb:af:81:1b:78:f9:19:b8:6f:
1d:0b:ec:3d:43:45:86:21:44:1c:8c:81:f5:49:b8:5b:be:f9:
b9:9b:1c:9b:f1:88:fd:5f:32:a2:b5:5e:6e:c9:30:12:d5:fc:
2f:43:d3:b7:12:70:e2:d2:9b:a8:24:a4:1b:eb:44:5c:ca:93:
ff:56:27:f4:b8:25:72:02:f9:35:9f:3b:32:42:42:af:a9:dd:
e3:97:fe:73:03:61:55:86:da:53:89:04:a3:e5:8f:fe:5b:71:
dc:fd:e9:7b:f8:84:e4:d5:3a:5b:7c:41:e9:5b:b1:1b:0a:44:
bd:08:fe:06:85:5b:6a:06:d0:1e:f8:f1:59:80:a6:cd:56:8b:
2b:31:95:88:0b:06:38:c1:0c:1b:91:c1:83:dc:46:bc:a4:76:
94:fa:77:91:94:c9:d9:62:ba:4c:c1:6a:a3:f0:a1:67:38:7f:
d1:02:c5:21:ba:46:43:98:2d:d9:a7:35:65:0b:6c:bf:fe:09:
ad:d1:1c:4a:16:f3:23:19:aa:e1:37:87:4b:ee:37:a1:aa:ad:
de:46:64:55:72:78:3f:57:a5:10:ac:b8:00:fb:04:9f:f4:8a:
2f:da:b7:29:de:de:b6:8f:fc:99:8d:24:66:0a:04:e7:9e:14:
7a:7e:f3:80
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTDPk7dwNKLEQ64AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk
OGU5MGNkZmMtYzQ3Ni00NzM0LTlmNTYtYjMyMGY3MTU5ZDk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtx/ZyRph/UzqTzk28yeqj3k5q+80U9Fr9RCh
V5fo0vtHoQ/IAM9K5GpUyhi2AD+44pyvc7YoF3u6HxtRVk1VvQO7LzLakb4S8FJD
zFv3KY5DIBKzj9h9UZuJdK+X3xSlChdOsyGhk7M1t9v1GDpMkqfuczSBX14OTNVp
a4yA6Z7icHCLf8WeOr+YkmvvxU1qBpYogIjbQguxBMGaB36F3g+0ozAe222AZNjv
uVBMWVFpWfz+HadGVllWPjat953HnMeg7kadbTe9kw78f8t88BO/xJk2RPm6oCa4
pQ6QbRyJhKQNIzKC9y6ov2CmKtLcSQbfLahFumg2Gc2Hqls7OwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN4XE42pUcsOhKp+rhjk6gHdg/rvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjMyZTA4NzItYzkzNy0z
NTdjLTgzM2ItODE3YWJlMDhkMjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFYPAAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIj3zpbd/kLnj8uvgRt4+Rm4bx0L7D1DRYYhRByMgfVJuFu++bmbHJvx
iP1fMqK1Xm7JMBLV/C9D07cScOLSm6gkpBvrRFzKk/9WJ/S4JXIC+TWfOzJCQq+p
3eOX/nMDYVWG2lOJBKPlj/5bcdz96Xv4hOTVOlt8QelbsRsKRL0I/gaFW2oG0B74
8VmAps1WiysxlYgLBjjBDBuRwYPcRrykdpT6d5GUydliukzBaqPwoWc4f9ECxSG6
RkOYLdmnNWULbL/+Ca3RHEoW8yMZquE3h0vuN6Gqrd5GZFVyeD9XpRCsuAD7BJ/0
ii/atyne3raP/JmNJGYKBOeeFHp+84A=
-----END CERTIFICATE-----
Generated at Thu Apr 10 12:22:10 2025 by rpki-client