Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/969034eb-7b60-3ad8-a8dc-f3f4ba464cb7.roa
File: 969034eb-7b60-3ad8-a8dc-f3f4ba464cb7.roa (raw, json)
Hash identifier: rtRYiKKvrU2Glk7dXupmu5kwmh/so3ekVgFp8c16Cos=
Subject key identifier: 81:6C:21:39:80:CC:87:E8:EC:D0:0A:1F:EC:94:F3:6E:4F:9E:67:66
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F43285848E9CBDB43C27F5953148F4EC0
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/969034eb-7b60-3ad8-a8dc-f3f4ba464cb7.roa
Signing time: Mon 17 Feb 2025 14:00:52 +0000
ROA not before: Mon 17 Feb 2025 14:00:52 +0000
ROA not after: Sun 18 May 2025 13:00:52 +0000
asID: 16509
IP address blocks: 130.137.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 09 Apr 2025 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e9:cb:db:43:c2:7f:59:53:14:8f:4e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Feb 17 14:00:52 2025 GMT
Not After : May 18 13:00:52 2025 GMT
Subject: CN=818cb17f-964a-43ac-97ca-0fcfe8a29561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:63:2f:ce:50:c4:30:6c:8e:ba:b9:ba:5c:d4:
99:8e:53:c9:f2:7f:65:87:1f:94:ef:5a:40:1b:a1:
6d:d5:8e:cb:31:b2:48:2c:ed:b2:9a:00:23:3a:97:
76:eb:36:5e:89:09:b1:45:c8:0b:01:4c:ca:ff:97:
e1:f2:86:81:1c:3e:9b:c9:e2:cf:2a:9c:ee:ca:ed:
45:0c:8b:88:30:47:8b:ee:43:21:0d:30:ba:a1:46:
3f:d0:85:2f:7a:22:05:49:10:5e:75:ad:27:99:3e:
2a:d9:b4:2e:7b:03:bd:b5:36:78:c2:e7:7e:6d:6b:
d6:b0:e0:0d:40:bc:cd:0f:e6:d0:b9:f4:63:c3:ff:
79:cd:7b:9c:d9:68:f2:89:4e:c8:9a:54:16:1a:ad:
4f:11:3c:09:59:7e:ab:42:23:eb:46:34:79:32:fe:
23:9d:ab:0d:32:e1:4e:54:3a:fa:33:d5:55:ff:fc:
47:16:3a:7e:35:7c:ab:34:9f:ed:84:59:4e:b4:df:
55:33:f3:96:cf:5c:2e:fd:f2:3b:f1:c9:9d:af:e9:
1a:31:04:b1:31:de:2b:f0:b6:95:71:65:85:e4:7b:
c0:42:d8:52:e3:e5:35:4a:cd:52:40:4b:5f:68:0e:
c5:0e:30:bc:75:b1:56:24:ad:ad:d7:34:d0:64:01:
a7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:6C:21:39:80:CC:87:E8:EC:D0:0A:1F:EC:94:F3:6E:4F:9E:67:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/969034eb-7b60-3ad8-a8dc-f3f4ba464cb7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.80.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:64:f3:70:0b:ae:d7:a2:21:c0:6d:f1:78:7d:cf:5f:18:5b:
bb:3f:a7:dd:6e:eb:de:5f:59:a4:bc:c5:b9:d6:67:ae:0d:df:
b7:4a:61:29:22:80:1d:5b:f8:ac:8f:b1:55:93:6b:81:8d:d2:
35:ff:ed:b0:64:80:87:f2:39:cb:0f:cf:03:f6:f0:2c:57:0d:
67:20:b8:70:35:34:ef:99:06:d0:19:7a:64:db:d9:f4:0d:dd:
c8:b7:ca:64:c8:54:c1:5a:77:29:af:39:11:d8:2b:4d:8b:57:
51:c9:d0:13:db:a4:c7:6d:54:1f:e7:91:2c:7f:d1:9c:ea:42:
25:1c:b3:14:23:19:5d:a0:d4:6c:c1:6e:7d:ad:4f:fd:92:ab:
32:f7:48:fc:31:60:b8:82:c3:59:f7:1f:b8:ea:55:36:a0:be:
d6:d7:f8:20:05:08:d4:74:bd:b4:38:11:db:1d:e3:23:4e:4c:
60:43:7f:66:e4:21:67:9a:35:b0:91:c4:0c:75:0c:87:60:71:
7e:df:1a:52:61:c5:3b:cd:d5:92:c7:57:1e:80:ff:00:c7:e0:
8e:96:1e:30:33:6e:75:04:37:5c:01:79:0b:c9:9c:c4:ad:88:
3a:ce:31:36:0e:8d:34:64:17:6f:83:15:62:a1:2d:b9:1e:d8:
62:2f:48:86
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjpy9tDwn9ZUxSPTsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI1MDIxNzE0MDA1MloXDTI1MDUxODEzMDA1MlowLzEtMCsGA1UEAxMk
ODE4Y2IxN2YtOTY0YS00M2FjLTk3Y2EtMGZjZmU4YTI5NTYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGMvzlDEMGyOurm6XNSZjlPJ8n9lhx+U71pA
G6Ft1Y7LMbJILO2ymgAjOpd26zZeiQmxRcgLAUzK/5fh8oaBHD6byeLPKpzuyu1F
DIuIMEeL7kMhDTC6oUY/0IUveiIFSRBeda0nmT4q2bQuewO9tTZ4wud+bWvWsOAN
QLzND+bQufRjw/95zXuc2WjyiU7ImlQWGq1PETwJWX6rQiPrRjR5Mv4jnasNMuFO
VDr6M9VV//xHFjp+NXyrNJ/thFlOtN9VM/OWz1wu/fI78cmdr+kaMQSxMd4r8LaV
cWWF5HvAQthS4+U1Ss1SQEtfaA7FDjC8dbFWJK2t1zTQZAGn4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIFsITmAzIfo7NAKH+yU825PnmdmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvOTY5MDM0ZWItN2I2MC0z
YWQ4LWE4ZGMtZjNmNGJhNDY0Y2I3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgolQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIJk83ALrteiIcBt8Xh9z18YW7s/p91u695fWaS8xbnWZ64N37dKYSki
gB1b+KyPsVWTa4GN0jX/7bBkgIfyOcsPzwP28CxXDWcguHA1NO+ZBtAZemTb2fQN
3ci3ymTIVMFadymvORHYK02LV1HJ0BPbpMdtVB/nkSx/0ZzqQiUcsxQjGV2g1GzB
bn2tT/2SqzL3SPwxYLiCw1n3H7jqVTagvtbX+CAFCNR0vbQ4Edsd4yNOTGBDf2bk
IWeaNbCRxAx1DIdgcX7fGlJhxTvN1ZLHVx6A/wDH4I6WHjAzbnUEN1wBeQvJnMSt
iDrOMTYOjTRkF2+DFWKhLbke2GIvSIY=
-----END CERTIFICATE-----
Generated at Tue Apr 8 15:17:31 2025 by rpki-client