Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/988ba759-c83d-3353-9d4a-0e247ab819ff.roa
File: 988ba759-c83d-3353-9d4a-0e247ab819ff.roa (raw, json)
Hash identifier: HTqz6cPAmkbUTnOs5nmjWSmRM7RcWO1J4UoBcIbzOfc=
Subject key identifier: 74:4E:49:6E:C4:D1:C1:B8:9A:11:3E:FB:7C:43:E6:11:0E:1E:CB:C6
Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial: 010D0C9F4328584908817B89DC0B7A608886E9D0
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/988ba759-c83d-3353-9d4a-0e247ab819ff.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 1239
IP address blocks: 23.237.31.0/24 maxlen: 24
23.237.32.0/23 maxlen: 23
23.237.34.0/23 maxlen: 23
23.237.36.0/23 maxlen: 23
23.237.38.0/23 maxlen: 23
23.237.40.0/24 maxlen: 24
23.237.42.0/23 maxlen: 23
23.237.44.0/23 maxlen: 23
23.237.50.0/23 maxlen: 23
23.237.54.0/23 maxlen: 23
23.237.56.0/23 maxlen: 23
23.237.60.0/23 maxlen: 23
23.237.64.0/23 maxlen: 23
23.237.66.0/23 maxlen: 23
23.237.72.0/23 maxlen: 23
23.237.80.0/23 maxlen: 23
23.237.84.0/23 maxlen: 23
23.237.94.0/23 maxlen: 23
23.237.106.0/23 maxlen: 23
23.237.108.0/23 maxlen: 23
23.237.110.0/23 maxlen: 23
23.237.112.0/23 maxlen: 23
23.237.114.0/23 maxlen: 23
23.237.118.0/23 maxlen: 23
23.237.176.0/23 maxlen: 23
23.237.178.0/23 maxlen: 23
23.237.182.0/23 maxlen: 23
23.237.186.0/24 maxlen: 24
23.237.188.0/23 maxlen: 23
23.237.196.0/23 maxlen: 23
23.237.200.0/23 maxlen: 23
23.237.205.0/24 maxlen: 24
23.237.206.0/24 maxlen: 24
23.237.212.0/24 maxlen: 24
23.237.213.0/24 maxlen: 24
23.237.214.0/24 maxlen: 24
23.237.216.0/24 maxlen: 24
23.237.219.0/24 maxlen: 24
23.237.220.0/23 maxlen: 23
23.237.222.0/23 maxlen: 23
23.237.224.0/23 maxlen: 23
23.237.226.0/23 maxlen: 23
23.237.228.0/23 maxlen: 23
23.237.231.0/24 maxlen: 24
23.237.232.0/23 maxlen: 23
23.237.234.0/23 maxlen: 23
23.237.236.0/23 maxlen: 23
23.237.238.0/24 maxlen: 24
23.237.242.0/24 maxlen: 24
23.237.243.0/24 maxlen: 24
23.237.246.0/24 maxlen: 24
23.237.254.0/23 maxlen: 23
50.7.96.0/22 maxlen: 22
50.7.100.0/24 maxlen: 24
50.7.101.0/24 maxlen: 24
50.7.102.0/24 maxlen: 24
50.7.103.0/24 maxlen: 24
50.7.104.0/22 maxlen: 22
50.7.108.0/24 maxlen: 24
50.7.109.0/24 maxlen: 24
50.7.110.0/24 maxlen: 24
50.7.111.0/24 maxlen: 24
50.7.118.0/23 maxlen: 23
50.7.229.0/24 maxlen: 24
192.240.108.0/22 maxlen: 22
192.240.116.0/24 maxlen: 24
192.240.120.0/23 maxlen: 23
192.240.123.0/24 maxlen: 24
192.240.124.0/22 maxlen: 22
198.255.4.0/22 maxlen: 22
198.255.12.0/22 maxlen: 22
198.255.46.0/23 maxlen: 23
198.255.66.0/23 maxlen: 23
198.255.68.0/23 maxlen: 23
198.255.70.0/23 maxlen: 23
198.255.72.0/23 maxlen: 23
198.255.74.0/24 maxlen: 24
198.255.75.0/24 maxlen: 24
198.255.85.0/24 maxlen: 24
198.255.102.0/24 maxlen: 24
198.255.103.0/24 maxlen: 24
198.255.120.0/24 maxlen: 24
198.255.126.0/24 maxlen: 24
198.255.127.0/24 maxlen: 24
2001:49f0:d137::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 16 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:7b:89:dc:0b:7a:60:88:86:e9:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=d6acaff0-fb69-4d96-bb15-9e7e77b171df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4b:f9:a5:ad:fb:e9:0c:3b:27:02:81:e5:e8:
0e:9e:f7:60:2d:a1:8e:cd:0d:01:e1:1c:62:fa:02:
6f:8b:30:e9:6c:88:12:d3:52:08:85:84:6e:42:6e:
08:f2:a5:93:28:98:f6:be:82:86:4c:4a:9b:00:a6:
26:f2:45:8b:da:39:d8:33:74:75:33:1b:ff:68:e5:
38:9f:02:76:eb:a0:1f:f4:49:ca:97:40:84:fc:0a:
b6:e7:db:3f:4c:82:38:0f:36:11:a0:36:d2:40:21:
73:c6:b5:ed:d0:26:45:29:59:e6:14:98:be:41:34:
ab:13:a7:2f:1f:e3:bf:9b:45:be:e0:50:6e:ee:bc:
4f:9a:ad:bb:d6:5a:6c:14:1e:4f:5b:57:81:3d:72:
f1:0d:1f:e7:df:8b:61:e1:83:25:a0:33:db:96:4f:
b3:07:8c:a7:e5:5d:10:0e:0a:52:03:7e:80:90:23:
a4:92:93:13:5a:1a:c3:cb:dd:be:d3:22:61:13:a3:
94:b8:5f:59:af:50:fd:ef:6a:1b:67:e5:f7:e5:c1:
2a:62:3b:20:a7:d4:68:fa:75:3f:01:89:99:a0:1f:
88:8a:d1:b6:4c:47:c7:a2:70:ab:18:26:4f:f1:9a:
c6:9d:43:0d:cf:30:aa:f8:62:7c:5a:a7:bb:9d:21:
30:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:4E:49:6E:C4:D1:C1:B8:9A:11:3E:FB:7C:43:E6:11:0E:1E:CB:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/988ba759-c83d-3353-9d4a-0e247ab819ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
X509v3 Authority Key Identifier:
keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
sbgp-ipAddrBlock: critical
IPv4:
23.237.31.0-23.237.40.255
23.237.42.0-23.237.45.255
23.237.50.0/23
23.237.54.0-23.237.57.255
23.237.60.0/23
23.237.64.0/22
23.237.72.0/23
23.237.80.0/23
23.237.84.0/23
23.237.94.0/23
23.237.106.0-23.237.115.255
23.237.118.0/23
23.237.176.0/22
23.237.182.0/23
23.237.186.0/24
23.237.188.0/23
23.237.196.0/23
23.237.200.0/23
23.237.205.0-23.237.206.255
23.237.212.0-23.237.214.255
23.237.216.0/24
23.237.219.0-23.237.229.255
23.237.231.0-23.237.238.255
23.237.242.0/23
23.237.246.0/24
23.237.254.0/23
50.7.96.0/20
50.7.118.0/23
50.7.229.0/24
192.240.108.0/22
192.240.116.0/24
192.240.120.0/23
192.240.123.0-192.240.127.255
198.255.4.0/22
198.255.12.0/22
198.255.46.0/23
198.255.66.0-198.255.75.255
198.255.85.0/24
198.255.102.0/23
198.255.120.0/24
198.255.126.0/23
IPv6:
2001:49f0:d137::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:38:e1:2a:87:c0:a1:3a:50:4d:99:d9:d4:ce:0a:e4:76:ff:
cf:da:1e:bf:b0:a9:16:08:e8:d2:1d:9e:5c:bc:43:85:4f:58:
74:9b:84:fe:a8:b3:48:17:02:fd:77:eb:18:c2:ea:89:11:9c:
aa:54:96:f2:98:a9:51:42:d1:e0:45:4e:9f:9a:bb:d6:aa:ff:
43:df:a7:04:e4:02:f9:b2:03:eb:45:eb:1e:95:c8:7a:ff:43:
90:ff:80:07:81:78:cf:3f:4c:24:3e:8a:d3:78:d5:fd:d0:b8:
71:4b:2b:66:06:d8:17:9e:16:a1:77:29:d3:77:da:8d:7e:6f:
b3:b1:84:f6:53:9c:cc:99:83:ba:d6:34:e6:0f:a2:b6:2f:95:
30:23:44:35:9f:66:30:95:dd:f8:a5:5b:17:bd:da:c1:c8:0b:
13:6e:72:f3:90:1f:17:be:f0:ae:14:5a:25:d7:f6:83:72:84:
d4:a2:b3:50:1e:44:8a:65:fe:fd:27:3b:7e:fd:de:0e:3a:5e:
bd:02:3f:ad:58:4c:08:cc:19:0a:cc:af:6d:08:4c:08:2c:9b:
08:9b:2e:d1:e4:44:83:d2:5b:26:06:78:23:c9:d5:9b:14:fb:
21:44:d5:4a:39:c9:d0:0b:fb:7c:45:0c:48:77:56:3c:7a:9f:
33:9b:69:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 06:40:18 2025 by rpki-client