Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dc529ca2-6e0a-36c5-8cb1-ee3b7a177095.roa
File: dc529ca2-6e0a-36c5-8cb1-ee3b7a177095.roa (raw, json)
Hash identifier: heLjDvkJbBW6CPtY2BIrcLxP0eVDj+Y7lKF7KfTVeR4=
Subject key identifier: 8D:09:4B:91:84:18:B0:BE:D0:0E:4D:CA:9B:B7:3F:E4:D1:D6:28:B6
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584964845F94FC802734CBFFAEF0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dc529ca2-6e0a-36c5-8cb1-ee3b7a177095.roa
Signing time: Wed 02 Apr 2025 13:01:01 +0000
ROA not before: Wed 02 Apr 2025 13:01:01 +0000
ROA not after: Tue 01 Jul 2025 13:01:01 +0000
asID: 6167
IP address blocks: 75.204.128.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:64:84:5f:94:fc:80:27:34:cb:ff:ae:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Apr 2 13:01:01 2025 GMT
Not After : Jul 1 13:01:01 2025 GMT
Subject: CN=70635003-a2c2-43b3-b288-24bf4a4b1ea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a0:b9:7d:a5:63:d4:60:8a:2c:22:46:02:fc:
76:a0:b3:95:7b:53:8d:e3:de:58:2e:4a:3f:01:b9:
62:53:d6:5a:47:46:af:bc:87:ab:f8:6d:50:e5:c8:
2b:2b:53:af:fa:ab:53:18:e0:4b:41:c4:e8:79:4d:
0a:c1:a1:e1:e1:82:65:0b:9d:84:21:08:c6:4c:9b:
fc:d9:67:b1:eb:20:28:ae:75:67:78:26:ec:cd:1f:
95:f5:e0:3c:11:09:6e:d0:72:c1:42:7b:c1:70:1c:
7f:cd:b5:a7:a1:29:63:ed:13:3d:09:5c:19:14:c7:
4b:68:d4:18:db:a8:57:9c:a2:b3:e6:d3:2a:80:0f:
71:44:05:30:a9:de:8a:32:cb:0d:62:ac:4c:4e:ac:
f4:16:97:2d:d8:4a:0f:59:e8:e9:07:0a:c0:19:67:
80:f7:78:f1:89:a4:da:a5:cf:18:00:b9:a5:b1:4d:
a2:f0:cb:bc:38:22:83:a0:fa:9d:75:f6:74:6a:e5:
33:98:14:1a:87:dc:61:71:d2:f3:74:f6:55:8e:bf:
80:fc:60:62:f5:50:f0:20:37:78:76:85:a4:3a:57:
44:2c:a3:5a:b3:5e:51:f9:ea:05:16:f7:ab:26:f7:
d1:9b:bb:1f:82:33:ea:a5:b3:59:6a:25:00:28:28:
4b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:09:4B:91:84:18:B0:BE:D0:0E:4D:CA:9B:B7:3F:E4:D1:D6:28:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dc529ca2-6e0a-36c5-8cb1-ee3b7a177095.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
75.204.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:e0:57:7a:5f:7b:9f:64:ca:91:16:da:be:cd:2d:65:91:94:
3e:ea:6e:4f:aa:13:ae:65:06:3e:20:63:cb:a9:e5:5e:c6:a6:
41:e6:83:4c:ff:75:e0:9f:01:79:ea:8f:d8:2f:2c:72:cb:23:
a7:64:c7:25:7a:14:c1:0d:f4:99:db:f6:be:6d:05:19:57:05:
8c:6b:a4:45:49:0a:e7:22:2b:c2:58:de:d3:8b:a4:85:ef:1d:
c4:ad:7c:9a:7e:7b:d9:54:26:ee:10:3b:d3:95:4c:88:c8:f3:
be:64:d2:64:5f:cc:4e:06:0c:c4:4f:fb:09:29:76:1b:14:1f:
8d:0f:fe:ed:8c:f4:47:e1:2d:af:43:96:10:9b:37:7a:d1:b1:
4f:ec:e2:4c:3c:97:c8:60:27:3e:26:33:51:e3:f4:5b:bf:90:
48:9a:dc:63:8a:66:fd:a3:28:5d:fc:6a:83:cb:48:0c:c2:52:
d4:69:b7:42:eb:6f:80:84:21:05:b1:f2:c7:3b:0f:43:e6:2b:
82:a1:a2:8f:2f:e1:30:a4:28:a6:7a:86:d1:4c:7e:f2:0e:6d:
10:c8:d7:af:fe:5c:45:0a:90:97:9d:eb:54:40:b3:b3:63:86:
ba:3a:fb:35:80:64:df:3e:a6:13:c9:2a:43:93:67:55:61:bd:
48:6b:96:37
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElkhF+U/IAnNMv/rvAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDQwMjEzMDEwMVoXDTI1MDcwMTEzMDEwMVowLzEtMCsGA1UEAxMk
NzA2MzUwMDMtYTJjMi00M2IzLWIyODgtMjRiZjRhNGIxZWEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6C5faVj1GCKLCJGAvx2oLOVe1ON495YLko/
AbliU9ZaR0avvIer+G1Q5cgrK1Ov+qtTGOBLQcToeU0KwaHh4YJlC52EIQjGTJv8
2Wex6yAornVneCbszR+V9eA8EQlu0HLBQnvBcBx/zbWnoSlj7RM9CVwZFMdLaNQY
26hXnKKz5tMqgA9xRAUwqd6KMssNYqxMTqz0Fpct2EoPWejpBwrAGWeA93jxiaTa
pc8YALmlsU2i8Mu8OCKDoPqddfZ0auUzmBQah9xhcdLzdPZVjr+A/GBi9VDwIDd4
doWkOldELKNas15R+eoFFverJvfRm7sfgjPqpbNZaiUAKChLvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI0JS5GEGLC+0A5Nypu3P+TR1ii2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZGM1MjljYTItNmUwYS0z
NmM1LThjYjEtZWUzYjdhMTc3MDk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFS8yAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKDgV3pfe59kypEW2r7NLWWRlD7qbk+qE65lBj4gY8up5V7GpkHmg0z/
deCfAXnqj9gvLHLLI6dkxyV6FMEN9Jnb9r5tBRlXBYxrpEVJCuciK8JY3tOLpIXv
HcStfJp+e9lUJu4QO9OVTIjI875k0mRfzE4GDMRP+wkpdhsUH40P/u2M9EfhLa9D
lhCbN3rRsU/s4kw8l8hgJz4mM1Hj9Fu/kEia3GOKZv2jKF38aoPLSAzCUtRpt0Lr
b4CEIQWx8sc7D0PmK4Khoo8v4TCkKKZ6htFMfvIObRDI16/+XEUKkJed61RAs7Nj
hro6+zWAZN8+phPJKkOTZ1VhvUhrljc=
-----END CERTIFICATE-----
Generated at Thu Apr 10 09:52:50 2025 by rpki-client