Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d2be55c2-045b-366e-9669-52a17acac6bc.roa
File: d2be55c2-045b-366e-9669-52a17acac6bc.roa (raw, json)
Hash identifier: 8sz/7BQuAdzORTR8YU1gpaPaVQ8cioavACMvz4yNj4k=
Subject key identifier: FA:68:B3:30:8E:90:F2:E5:CD:20:50:DE:28:B5:90:42:21:16:DE:41
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858490B4C31DEAE29919677D7B880
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d2be55c2-045b-366e-9669-52a17acac6bc.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 701
IP address blocks: 70.105.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:31:de:ae:29:91:96:77:d7:b8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=61e3e3cd-e126-4e61-9a61-98b7c9eb2782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:69:83:89:cc:29:cc:25:8e:d0:b7:54:9c:24:
35:09:21:72:ac:47:31:2f:03:fb:3e:d4:d8:94:5b:
c2:98:df:90:22:c6:51:66:21:ed:87:43:87:96:e1:
23:88:11:f9:b2:62:16:32:99:b4:bc:2c:ad:90:de:
48:f4:9f:ec:78:54:39:2f:d6:43:bb:d1:4b:5e:de:
7d:9c:37:f8:6d:75:b2:64:02:8a:7d:1c:f5:80:58:
ae:22:a1:7a:95:8f:04:a6:db:e6:2b:d7:59:11:09:
26:7f:05:97:09:92:42:15:95:40:71:62:8d:de:fd:
aa:43:b8:4a:e4:51:08:d5:f1:d0:67:35:1b:23:00:
bf:f5:b1:e4:81:b5:66:ef:ac:3d:2a:e5:80:d6:a1:
ea:b7:dd:1b:a7:13:40:a5:7b:20:85:1e:23:2b:e2:
27:9a:56:f3:68:36:23:5b:f1:4a:10:10:83:d0:b4:
68:42:76:24:49:53:94:48:78:dc:ae:d8:9d:f1:b7:
06:5d:d1:51:8e:90:74:e8:21:ae:5c:73:b1:b4:96:
a2:ec:3a:33:c7:bd:dc:ae:d9:f0:ca:96:47:df:87:
94:4d:c7:0d:ee:06:21:3e:56:6c:91:d0:20:8c:89:
4e:08:8a:26:7b:ec:ee:80:8b:db:f4:db:2b:5f:c8:
4b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:68:B3:30:8E:90:F2:E5:CD:20:50:DE:28:B5:90:42:21:16:DE:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d2be55c2-045b-366e-9669-52a17acac6bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
70.105.132.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:4e:e9:49:43:36:3c:cc:21:1d:87:12:29:7e:54:c2:b3:89:
29:1b:e1:06:ad:a2:b6:15:9a:61:6c:85:0e:09:85:6d:b5:1e:
c8:d9:6f:0b:6e:75:44:f4:57:ae:e1:35:ab:f7:ed:8f:e9:77:
bb:16:93:d8:ab:e5:ab:de:ad:75:95:de:d5:f9:86:1e:6c:c9:
f2:f7:61:ca:0f:2a:9a:12:0a:99:18:7a:c8:93:49:cf:70:2f:
20:e6:c5:38:fb:40:ea:54:92:5f:1d:8e:d2:3b:85:2f:2d:98:
36:1e:6a:52:88:67:fc:56:85:9a:e0:d1:55:84:16:79:3e:8e:
47:22:f9:60:66:ef:97:1c:a7:7d:0e:79:be:99:e2:6b:1e:5d:
7a:90:24:c3:50:ce:be:02:bf:0b:f1:f0:e4:46:0f:7f:17:65:
3f:92:ec:09:d2:f5:1c:fd:bc:ed:40:b5:4e:e8:0e:14:61:11:
05:16:1e:9c:1d:c8:80:92:c4:0f:7c:10:1b:69:9b:4b:0e:8f:
15:da:99:de:b1:bd:2f:53:1e:0e:4c:3e:6b:99:6f:37:83:31:
b8:25:3c:66:97:fe:bc:74:30:09:13:9c:0f:ea:bc:c5:74:f4:
d7:b9:cd:3e:1c:16:8e:92:ab:e5:04:68:3d:fa:85:6c:6c:d6:
97:2e:bd:3f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTDHerimRlnfXuIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk
NjFlM2UzY2QtZTEyNi00ZTYxLTlhNjEtOThiN2M5ZWIyNzgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAommDicwpzCWO0LdUnCQ1CSFyrEcxLwP7PtTY
lFvCmN+QIsZRZiHth0OHluEjiBH5smIWMpm0vCytkN5I9J/seFQ5L9ZDu9FLXt59
nDf4bXWyZAKKfRz1gFiuIqF6lY8EptvmK9dZEQkmfwWXCZJCFZVAcWKN3v2qQ7hK
5FEI1fHQZzUbIwC/9bHkgbVm76w9KuWA1qHqt90bpxNApXsghR4jK+InmlbzaDYj
W/FKEBCD0LRoQnYkSVOUSHjcrtid8bcGXdFRjpB06CGuXHOxtJai7Dozx73crtnw
ypZH34eUTccN7gYhPlZskdAgjIlOCIome+zugIvb9NsrX8hLYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPposzCOkPLlzSBQ3ii1kEIhFt5BMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDJiZTU1YzItMDQ1Yi0z
NjZlLTk2NjktNTJhMTdhY2FjNmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARmmEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFpO6UlDNjzMIR2HEil+VMKziSkb4QatorYVmmFshQ4JhW21HsjZbwtu
dUT0V67hNav37Y/pd7sWk9ir5averXWV3tX5hh5syfL3YcoPKpoSCpkYesiTSc9w
LyDmxTj7QOpUkl8djtI7hS8tmDYealKIZ/xWhZrg0VWEFnk+jkci+WBm75ccp30O
eb6Z4mseXXqQJMNQzr4Cvwvx8ORGD38XZT+S7AnS9Rz9vO1AtU7oDhRhEQUWHpwd
yICSxA98EBtpm0sOjxXamd6xvS9THg5MPmuZbzeDMbglPGaX/rx0MAkTnA/qvMV0
9Ne5zT4cFo6Sq+UEaD36hWxs1pcuvT8=
-----END CERTIFICATE-----
Generated at Thu Apr 10 04:46:58 2025 by rpki-client