Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d9961d99-667b-323a-9215-0c36df7d6096.roa
File: d9961d99-667b-323a-9215-0c36df7d6096.roa (raw, json)
Hash identifier: celZZAlaAKpHDJCN9WaLrlfSv8415hKIIhYnk+OgZzc=
Subject key identifier: F7:42:13:A0:84:D8:10:4C:6A:7F:AB:12:DF:B2:16:DB:94:66:A7:99
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584921842850156B921B35A02880
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d9961d99-667b-323a-9215-0c36df7d6096.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 22394
IP address blocks: 66.174.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:84:28:50:15:6b:92:1b:35:a0:28:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=7c9f6510-5370-4331-a346-dcbdc61c28e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f3:e0:3b:de:7e:a8:b9:b5:68:bd:4f:fd:c8:
2f:23:45:47:67:46:ca:f2:ed:64:0b:29:9d:d0:d6:
71:3c:da:2a:44:65:f6:e3:30:02:e7:19:b6:de:48:
26:e8:a9:21:dd:14:ce:aa:b9:e5:61:36:63:53:1c:
83:cf:88:4e:8d:02:72:79:47:e6:84:28:27:29:52:
f1:ac:ca:bc:30:84:7c:0d:77:d6:31:e0:de:61:b9:
a0:18:24:9b:59:7b:3b:5e:19:d0:cc:b0:be:68:91:
1a:04:ef:5a:49:e6:43:04:30:23:a5:01:ac:14:ac:
1a:ac:62:7a:91:32:96:b8:9f:61:8b:45:2d:47:ee:
b5:3b:30:04:22:6a:75:c0:67:c3:51:f1:cc:4f:36:
d3:0e:51:5c:fd:87:54:4f:ed:14:67:58:0c:cf:eb:
3b:ca:42:d6:54:b2:a0:09:7c:65:9a:2c:b4:19:6d:
61:cc:8d:3d:66:4b:9c:d0:49:b5:fa:51:0c:82:7c:
7a:8e:e7:3f:27:09:fe:1b:4c:28:d5:82:d3:54:74:
20:f2:22:ec:e4:2e:ac:84:b9:b9:cc:bf:14:c2:d9:
68:68:63:fc:32:02:71:9e:5d:ff:13:c3:a4:56:8e:
8e:a4:a1:21:6d:10:cf:5e:16:22:89:1a:79:ad:a7:
ad:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:42:13:A0:84:D8:10:4C:6A:7F:AB:12:DF:B2:16:DB:94:66:A7:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d9961d99-667b-323a-9215-0c36df7d6096.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
66.174.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:c5:b5:07:16:64:46:1b:b3:a7:82:cf:fe:7d:75:56:9a:4b:
2e:34:7d:0a:e7:f9:82:a0:75:43:ea:c5:45:44:d1:03:bf:7a:
ac:99:67:99:a0:25:32:b3:6f:b6:6e:9a:cb:d9:c6:39:ab:f1:
8e:6e:6b:cc:2a:02:bb:7e:4f:57:ea:4f:8d:2e:51:7b:68:80:
ec:42:d3:fd:27:4d:0e:8a:98:ff:a9:14:1d:c2:1b:c4:f1:a0:
ec:69:bf:3e:0d:a7:3b:3d:ae:0f:bd:55:72:4b:59:05:e5:78:
d8:41:e1:f7:ad:a4:a4:48:b1:40:90:44:50:8b:c5:d3:6f:11:
63:24:98:40:8e:30:d9:a1:12:0f:b4:f0:29:57:e3:a3:8b:4d:
23:6a:22:2e:8a:58:62:40:6d:37:ae:f3:c0:2b:66:bc:62:23:
21:b7:fa:d2:73:6a:8c:d7:4a:2e:c0:48:fc:26:8d:d3:5c:f9:
2e:50:d7:3f:34:e0:e3:a7:41:ae:53:e3:b9:64:a2:94:f9:f8:
eb:a1:62:19:fc:7d:10:02:f5:f9:b9:8f:72:48:6a:10:a7:5c:
4e:8f:8b:b8:c7:b6:2a:be:c2:61:aa:10:f3:3b:9c:be:3f:ad:
be:18:fa:ac:dc:36:41:11:ba:56:05:5b:07:c1:ed:9e:6e:e2:
a2:7d:0b:bd
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEkhhChQFWuSGzWgKIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk
N2M5ZjY1MTAtNTM3MC00MzMxLWEzNDYtZGNiZGM2MWMyOGU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfPgO95+qLm1aL1P/cgvI0VHZ0bK8u1kCymd
0NZxPNoqRGX24zAC5xm23kgm6Kkh3RTOqrnlYTZjUxyDz4hOjQJyeUfmhCgnKVLx
rMq8MIR8DXfWMeDeYbmgGCSbWXs7XhnQzLC+aJEaBO9aSeZDBDAjpQGsFKwarGJ6
kTKWuJ9hi0UtR+61OzAEImp1wGfDUfHMTzbTDlFc/YdUT+0UZ1gMz+s7ykLWVLKg
CXxlmiy0GW1hzI09Zkuc0Em1+lEMgnx6juc/Jwn+G0wo1YLTVHQg8iLs5C6shLm5
zL8UwtloaGP8MgJxnl3/E8OkVo6OpKEhbRDPXhYiiRp5raetawIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFPdCE6CE2BBMan+rEt+yFtuUZqeZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDk5NjFkOTktNjY3Yi0z
MjNhLTkyMTUtMGMzNmRmN2Q2MDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAQq4wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAJ8W1BxZkRhuzp4LP/n11VppLLjR9Cuf5gqB1Q+rFRUTRA796rJlnmaAl
MrNvtm6ay9nGOavxjm5rzCoCu35PV+pPjS5Re2iA7ELT/SdNDoqY/6kUHcIbxPGg
7Gm/Pg2nOz2uD71VcktZBeV42EHh962kpEixQJBEUIvF028RYySYQI4w2aESD7Tw
KVfjo4tNI2oiLopYYkBtN67zwCtmvGIjIbf60nNqjNdKLsBI/CaN01z5LlDXPzTg
46dBrlPjuWSilPn466FiGfx9EAL1+bmPckhqEKdcTo+LuMe2Kr7CYaoQ8zucvj+t
vhj6rNw2QRG6VgVbB8Htnm7ion0LvQ==
-----END CERTIFICATE-----
Generated at Thu Apr 10 05:04:39 2025 by rpki-client