Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e5bac686-9016-351f-bebb-d30663e4a5c6.roa
File: e5bac686-9016-351f-bebb-d30663e4a5c6.roa (raw, json)
Hash identifier: 1/ia++xdHxANMQTN5oxOyYhDnHiAaqvpweMKWdVeZFE=
Subject key identifier: 46:51:72:C0:8A:18:2D:19:BB:56:1D:BC:EA:A9:AF:F4:7B:12:46:AF
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285849218424D3BF0E4E0F9F3343A0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e5bac686-9016-351f-bebb-d30663e4a5c6.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 6167
IP address blocks: 97.154.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:84:24:d3:bf:0e:4e:0f:9f:33:43:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=3ab90409-fef0-408a-9412-14a0cef1ae6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:cc:97:86:7d:09:2b:61:2c:7e:cd:ca:01:f7:
d8:20:47:72:99:01:d7:58:91:ed:f6:aa:9c:83:a5:
f9:7b:03:31:f4:f3:93:29:9b:a9:c1:86:19:f8:4d:
3a:6c:10:31:7e:6b:1e:3f:08:dc:db:b9:e0:96:c1:
88:c4:7a:0e:ac:fd:f9:b8:d3:3b:43:2a:45:fb:4f:
00:73:00:cb:a1:3a:88:3f:06:38:8f:5d:31:8a:2e:
ed:64:74:82:71:b1:1c:b5:0e:24:36:7d:08:d5:34:
03:fc:2b:6d:9f:ba:6e:62:96:f5:af:e5:c7:ed:9e:
52:a5:39:bd:e6:87:c4:6c:89:02:21:89:3f:84:e3:
a7:af:cc:b7:1f:32:cf:71:48:eb:73:f7:82:f3:21:
c2:e9:62:b7:4d:b1:7d:a5:5f:66:62:62:80:a8:d4:
e2:6d:40:f9:0f:1f:b3:c9:31:05:03:3f:58:18:fe:
b3:82:c1:19:47:1f:28:e9:4f:23:33:2a:5d:64:3e:
6e:24:b5:ab:ae:53:b4:9e:a2:e1:8b:9f:7b:52:ec:
10:8e:a6:a7:55:62:dd:ca:23:33:ad:1e:53:00:a7:
fb:5e:22:0d:05:1e:6d:27:ba:96:09:47:c3:20:d7:
1b:cd:05:3d:77:96:ea:b0:38:7a:f0:b0:ec:30:49:
18:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:51:72:C0:8A:18:2D:19:BB:56:1D:BC:EA:A9:AF:F4:7B:12:46:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e5bac686-9016-351f-bebb-d30663e4a5c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
97.154.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:ae:0e:1a:31:dd:ee:b9:d7:7b:27:72:f9:9b:2c:bc:38:89:
85:ff:54:71:84:92:c3:81:7f:d9:25:14:a1:ce:f8:d8:ca:46:
69:06:d0:dc:1b:c1:31:44:f2:e4:00:72:48:be:e4:a8:f1:de:
b5:83:8a:ea:b7:de:15:9f:ba:11:58:c3:f3:20:23:85:90:88:
10:9d:12:b4:d9:15:6a:39:cf:04:61:45:c6:65:b2:46:7f:d5:
7c:f8:1f:7a:e6:68:ed:8f:3e:c3:3e:2f:79:ce:ce:7f:9b:b1:
8a:c3:65:50:b9:55:ee:a0:70:cd:93:01:8b:cb:82:4e:62:f3:
63:50:65:62:7b:3c:8c:cb:f2:ac:14:01:bb:0c:d6:69:dd:92:
32:90:29:c1:b6:12:ed:d2:4c:13:b6:77:1f:40:95:8c:89:e5:
70:db:51:4f:10:b9:7a:62:4d:e8:be:2a:7c:f3:bd:27:bc:09:
a6:7b:52:cc:e7:98:65:62:40:4b:9a:aa:0d:be:65:09:7e:a8:
45:e7:c3:10:0e:a6:a8:68:0b:30:23:b4:1c:bc:53:04:5e:3f:
a8:da:2a:8e:93:4e:e3:7e:97:c4:85:ce:b6:e3:e0:cf:8f:fc:
18:af:d2:94:c3:23:b9:7a:f5:95:54:82:03:2a:e1:ea:f1:4e:
6a:36:79:49
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEkhhCTTvw5OD58zQ6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk
M2FiOTA0MDktZmVmMC00MDhhLTk0MTItMTRhMGNlZjFhZTZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8yXhn0JK2Esfs3KAffYIEdymQHXWJHt9qqc
g6X5ewMx9POTKZupwYYZ+E06bBAxfmsePwjc27nglsGIxHoOrP35uNM7QypF+08A
cwDLoTqIPwY4j10xii7tZHSCcbEctQ4kNn0I1TQD/Cttn7puYpb1r+XH7Z5SpTm9
5ofEbIkCIYk/hOOnr8y3HzLPcUjrc/eC8yHC6WK3TbF9pV9mYmKAqNTibUD5Dx+z
yTEFAz9YGP6zgsEZRx8o6U8jMypdZD5uJLWrrlO0nqLhi597UuwQjqanVWLdyiMz
rR5TAKf7XiINBR5tJ7qWCUfDINcbzQU9d5bqsDh68LDsMEkYewIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFEZRcsCKGC0Zu1YdvOqpr/R7EkavMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZTViYWM2ODYtOTAxNi0z
NTFmLWJlYmItZDMwNjYzZTRhNWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAYZowVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAp64OGjHd7rnXeydy+ZssvDiJhf9UcYSSw4F/2SUUoc742MpGaQbQ3BvB
MUTy5ABySL7kqPHetYOK6rfeFZ+6EVjD8yAjhZCIEJ0StNkVajnPBGFFxmWyRn/V
fPgfeuZo7Y8+wz4vec7Of5uxisNlULlV7qBwzZMBi8uCTmLzY1BlYns8jMvyrBQB
uwzWad2SMpApwbYS7dJME7Z3H0CVjInlcNtRTxC5emJN6L4qfPO9J7wJpntSzOeY
ZWJAS5qqDb5lCX6oRefDEA6mqGgLMCO0HLxTBF4/qNoqjpNO436XxIXOtuPgz4/8
GK/SlMMjuXr1lVSCAyrh6vFOajZ5SQ==
-----END CERTIFICATE-----
Generated at Thu Apr 10 12:34:19 2025 by rpki-client