Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/988ba759-c83d-3353-9d4a-0e247ab819ff.roa
File: 988ba759-c83d-3353-9d4a-0e247ab819ff.roa (raw, json)
Hash identifier: D9s6qkSRBs6nX2OazzFC93WkU+nvWevw2H6s89u5sSk=
Subject key identifier: 19:FA:92:3A:37:EB:62:7F:07:AD:59:4A:D1:67:D9:B2:04:8D:DB:1B
Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial: 010D0C9F4328584827C52D9AA0EC34B8F3A17380
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/988ba759-c83d-3353-9d4a-0e247ab819ff.roa
Signing time: Tue 10 Dec 2024 02:00:40 +0000
ROA not before: Tue 10 Dec 2024 02:00:40 +0000
ROA not after: Mon 10 Mar 2025 01:00:40 +0000
asID: 1239
IP address blocks: 23.237.31.0/24 maxlen: 24
23.237.32.0/23 maxlen: 23
23.237.34.0/23 maxlen: 23
23.237.36.0/23 maxlen: 23
23.237.38.0/23 maxlen: 23
23.237.40.0/24 maxlen: 24
23.237.42.0/23 maxlen: 23
23.237.44.0/23 maxlen: 23
23.237.50.0/23 maxlen: 23
23.237.54.0/23 maxlen: 23
23.237.56.0/23 maxlen: 23
23.237.60.0/23 maxlen: 23
23.237.64.0/23 maxlen: 23
23.237.66.0/23 maxlen: 23
23.237.72.0/23 maxlen: 23
23.237.80.0/23 maxlen: 23
23.237.84.0/23 maxlen: 23
23.237.94.0/23 maxlen: 23
23.237.106.0/23 maxlen: 23
23.237.108.0/23 maxlen: 23
23.237.110.0/23 maxlen: 23
23.237.112.0/23 maxlen: 23
23.237.114.0/23 maxlen: 23
23.237.118.0/23 maxlen: 23
23.237.176.0/23 maxlen: 23
23.237.178.0/23 maxlen: 23
23.237.182.0/23 maxlen: 23
23.237.186.0/24 maxlen: 24
23.237.188.0/23 maxlen: 23
23.237.196.0/23 maxlen: 23
23.237.200.0/23 maxlen: 23
23.237.205.0/24 maxlen: 24
23.237.206.0/24 maxlen: 24
23.237.212.0/24 maxlen: 24
23.237.213.0/24 maxlen: 24
23.237.214.0/24 maxlen: 24
23.237.216.0/24 maxlen: 24
23.237.219.0/24 maxlen: 24
23.237.220.0/23 maxlen: 23
23.237.222.0/23 maxlen: 23
23.237.224.0/23 maxlen: 23
23.237.226.0/23 maxlen: 23
23.237.228.0/23 maxlen: 23
23.237.231.0/24 maxlen: 24
23.237.232.0/23 maxlen: 23
23.237.234.0/23 maxlen: 23
23.237.236.0/23 maxlen: 23
23.237.238.0/24 maxlen: 24
23.237.242.0/24 maxlen: 24
23.237.243.0/24 maxlen: 24
23.237.246.0/24 maxlen: 24
23.237.254.0/23 maxlen: 23
50.7.96.0/22 maxlen: 22
50.7.100.0/24 maxlen: 24
50.7.101.0/24 maxlen: 24
50.7.102.0/24 maxlen: 24
50.7.103.0/24 maxlen: 24
50.7.104.0/22 maxlen: 22
50.7.108.0/24 maxlen: 24
50.7.109.0/24 maxlen: 24
50.7.110.0/24 maxlen: 24
50.7.111.0/24 maxlen: 24
50.7.118.0/23 maxlen: 23
50.7.229.0/24 maxlen: 24
192.240.108.0/22 maxlen: 22
192.240.116.0/24 maxlen: 24
192.240.120.0/23 maxlen: 23
192.240.123.0/24 maxlen: 24
192.240.124.0/22 maxlen: 22
198.255.4.0/22 maxlen: 22
198.255.12.0/22 maxlen: 22
198.255.46.0/23 maxlen: 23
198.255.66.0/23 maxlen: 23
198.255.68.0/23 maxlen: 23
198.255.70.0/23 maxlen: 23
198.255.72.0/23 maxlen: 23
198.255.74.0/24 maxlen: 24
198.255.75.0/24 maxlen: 24
198.255.85.0/24 maxlen: 24
198.255.102.0/24 maxlen: 24
198.255.103.0/24 maxlen: 24
198.255.120.0/24 maxlen: 24
198.255.126.0/24 maxlen: 24
198.255.127.0/24 maxlen: 24
2001:49f0:d137::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 17 Feb 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:c5:2d:9a:a0:ec:34:b8:f3:a1:73:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
Validity
Not Before: Dec 10 02:00:40 2024 GMT
Not After : Mar 10 01:00:40 2025 GMT
Subject: CN=bc4a9b84-5a8a-4e6f-9afd-2b05036b71fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:bb:97:b2:47:f7:ba:33:cf:3a:14:7c:54:ca:
bd:05:da:95:0a:6b:77:22:96:55:fd:20:42:60:a2:
f0:ad:ee:4b:ac:56:3a:ba:4f:a7:0a:35:73:32:dd:
c8:e6:3d:4d:07:d3:4a:1f:24:c9:f0:3f:6b:1e:f9:
96:9a:ad:2a:14:64:e4:97:55:33:8b:0e:4b:1a:10:
0e:50:c1:c3:1d:f6:c6:aa:81:66:bd:f0:a9:f5:4b:
1a:9f:e1:a7:f8:e8:29:18:76:9f:d5:de:75:a6:8c:
cc:25:84:61:6e:20:4b:5a:0d:3c:40:74:6b:40:2d:
de:59:31:3b:df:0b:d7:74:58:bd:b9:b5:4c:ab:98:
4c:0b:48:96:5e:83:b6:f1:c6:b6:a9:ae:25:cc:af:
6d:af:16:da:64:63:37:dd:1c:99:e8:f9:f6:cf:93:
29:1c:28:33:d6:ac:66:4c:fb:58:26:d1:74:60:3e:
4c:51:2f:c1:2f:9c:9b:f2:89:57:26:cd:31:8d:7f:
24:55:20:86:b7:29:78:1b:f6:9e:70:92:ff:2f:9e:
a7:62:e9:17:95:98:7c:6b:0c:74:46:a5:bb:f7:0a:
75:78:19:f7:a5:c1:39:48:0c:d7:1f:b9:b3:e1:85:
70:19:a2:87:00:2f:8d:53:39:e7:be:6c:83:95:94:
6a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:FA:92:3A:37:EB:62:7F:07:AD:59:4A:D1:67:D9:B2:04:8D:DB:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/988ba759-c83d-3353-9d4a-0e247ab819ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
X509v3 Authority Key Identifier:
keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
sbgp-ipAddrBlock: critical
IPv4:
23.237.31.0-23.237.40.255
23.237.42.0-23.237.45.255
23.237.50.0/23
23.237.54.0-23.237.57.255
23.237.60.0/23
23.237.64.0/22
23.237.72.0/23
23.237.80.0/23
23.237.84.0/23
23.237.94.0/23
23.237.106.0-23.237.115.255
23.237.118.0/23
23.237.176.0/22
23.237.182.0/23
23.237.186.0/24
23.237.188.0/23
23.237.196.0/23
23.237.200.0/23
23.237.205.0-23.237.206.255
23.237.212.0-23.237.214.255
23.237.216.0/24
23.237.219.0-23.237.229.255
23.237.231.0-23.237.238.255
23.237.242.0/23
23.237.246.0/24
23.237.254.0/23
50.7.96.0/20
50.7.118.0/23
50.7.229.0/24
192.240.108.0/22
192.240.116.0/24
192.240.120.0/23
192.240.123.0-192.240.127.255
198.255.4.0/22
198.255.12.0/22
198.255.46.0/23
198.255.66.0-198.255.75.255
198.255.85.0/24
198.255.102.0/23
198.255.120.0/24
198.255.126.0/23
IPv6:
2001:49f0:d137::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d9:67:80:f8:53:0e:4f:2a:0c:f2:d3:23:35:f9:9e:00:7a:27:
8b:bb:29:80:41:16:c4:38:29:be:45:ec:00:18:86:c3:e7:18:
7d:07:a9:90:98:12:7d:db:c7:6e:a7:4f:ec:44:59:f1:30:7c:
50:f4:9e:00:0b:22:64:31:43:92:61:56:dc:1a:56:fd:31:4b:
63:fb:9c:39:7d:2f:ce:27:65:ed:b5:da:51:63:45:1d:6d:34:
5b:45:52:72:c9:f8:b4:92:8f:e3:80:bd:76:f3:45:6e:37:4e:
dc:c2:43:53:46:62:18:2f:b1:b0:a7:1e:4b:b6:3b:cd:de:4a:
cd:6a:77:03:a1:e2:43:3d:c1:b2:1b:01:f0:08:22:52:46:2b:
80:4e:e2:e3:05:2a:b8:98:9f:f6:b5:f8:c4:59:6c:80:23:1b:
d8:7a:bf:9a:74:d4:e3:a0:df:a5:33:fc:d4:dd:43:75:c2:ca:
a9:04:9e:c4:9d:d9:b8:71:9f:57:e0:02:de:2c:8d:cf:06:83:
e0:10:bb:23:b4:26:75:9a:9b:93:d7:c8:23:3c:5c:f0:47:d3:
ed:b1:49:3f:99:9b:7d:ac:96:c9:f7:97:0c:05:36:e1:e7:24:
8e:f1:0d:f6:50:a9:b2:5c:47:1d:80:6f:f7:8d:e1:16:e0:10:
6e:d5:f9:c2
-----BEGIN CERTIFICATE-----
MIIHnjCCBoagAwIBAgIUAQ0Mn0MoWEgnxS2aoOw0uPOhc4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm
ZDgwMB4XDTI0MTIxMDAyMDA0MFoXDTI1MDMxMDAxMDA0MFowLzEtMCsGA1UEAxMk
YmM0YTliODQtNWE4YS00ZTZmLTlhZmQtMmIwNTAzNmI3MWZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbuXskf3ujPPOhR8VMq9BdqVCmt3IpZV/SBC
YKLwre5LrFY6uk+nCjVzMt3I5j1NB9NKHyTJ8D9rHvmWmq0qFGTkl1Uziw5LGhAO
UMHDHfbGqoFmvfCp9Usan+Gn+OgpGHaf1d51pozMJYRhbiBLWg08QHRrQC3eWTE7
3wvXdFi9ubVMq5hMC0iWXoO28ca2qa4lzK9trxbaZGM33RyZ6Pn2z5MpHCgz1qxm
TPtYJtF0YD5MUS/BL5yb8olXJs0xjX8kVSCGtyl4G/aecJL/L56nYukXlZh8awx0
RqW79wp1eBn3pcE5SAzXH7mz4YVwGaKHAC+NUznnvmyDlZRqBQIDAQABo4IEsDCC
BKwwHQYDVR0OBBYEFBn6kjo362J/B61ZStFn2bIEjdsbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm
NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvOTg4YmE3NTktYzgzZC0z
MzUzLTlkNGEtMGUyNDdhYjgxOWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3
MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0
ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3
OGI5NGZkODAuY2VyMIIBeAYIKwYBBQUHAQcBAf8EggFnMIIBYzCCAU4EAgABMIIB
RjAMAwQAF+0fAwQAF+0oMAwDBAEX7SoDBAEX7SwDBAEX7TIwDAMEARftNgMEARft
OAMEARftPAMEAhftQAMEARftSAMEARftUAMEARftVAMEARftXjAMAwQBF+1qAwQC
F+1wAwQBF+12AwQCF+2wAwQBF+22AwQAF+26AwQBF+28AwQBF+3EAwQBF+3IMAwD
BAAX7c0DBAAX7c4wDAMEAhft1AMEABft1gMEABft2DAMAwQAF+3bAwQBF+3kMAwD
BAAX7ecDBAAX7e4DBAEX7fIDBAAX7fYDBAEX7f4DBAQyB2ADBAEyB3YDBAAyB+UD
BALA8GwDBADA8HQDBAHA8HgwDAMEAMDwewMEB8DwAAMEAsb/BAMEAsb/DAMEAcb/
LjAMAwQBxv9CAwQCxv9IAwQAxv9VAwQBxv9mAwQAxv94AwQBxv9+MA8EAgACMAkD
BwAgAUnw0TcwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB
FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN
BgkqhkiG9w0BAQsFAAOCAQEA2WeA+FMOTyoM8tMjNfmeAHoni7spgEEWxDgpvkXs
ABiGw+cYfQepkJgSfdvHbqdP7ERZ8TB8UPSeAAsiZDFDkmFW3BpW/TFLY/ucOX0v
zidl7bXaUWNFHW00W0VScsn4tJKP44C9dvNFbjdO3MJDU0ZiGC+xsKceS7Y7zd5K
zWp3A6HiQz3BshsB8AgiUkYrgE7i4wUquJif9rX4xFlsgCMb2Hq/mnTU46DfpTP8
1N1DdcLKqQSexJ3ZuHGfV+AC3iyNzwaD4BC7I7QmdZqbk9fIIzxc8EfT7bFJP5mb
fayWyfeXDAU24eckjvEN9lCpslxHHYBv943hFuAQbtX5wg==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:21:52 2025 by rpki-client