Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/4ccec03b-e500-3150-8eff-15de50817fe6.roa
File: 4ccec03b-e500-3150-8eff-15de50817fe6.roa (raw, json)
Hash identifier: /UJ+tdgEbnsFyy1xHsQiJ99j0ewURVshqT28ErQ1TJY=
Subject key identifier: 8A:F4:DA:1B:0A:60:DE:3E:43:95:5F:8E:27:20:27:63:9C:A4:8C:07
Certificate issuer: /CN=cb01b28a-436d-42dd-8750-5361f2309297
Certificate serial: 010D0C9F43285849D16506CBC5B177DE218F5C80
Authority key identifier: A0:3F:D7:81:F7:6B:86:20:05:40:B3:B0:F1:5E:57:49:8A:88:1E:C4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/4ccec03b-e500-3150-8eff-15de50817fe6.roa
Signing time: Sun 11 May 2025 13:01:01 +0000
ROA not before: Sun 11 May 2025 13:01:01 +0000
ROA not after: Sat 09 Aug 2025 13:01:01 +0000
asID: 25820
IP address blocks: 43.243.84.0/22 maxlen: 24
45.78.64.0/20 maxlen: 24
46.254.88.0/22 maxlen: 24
64.64.224.0/19 maxlen: 24
65.49.130.0/23 maxlen: 24
65.49.132.0/22 maxlen: 24
65.49.144.0/23 maxlen: 24
65.49.150.0/23 maxlen: 24
65.49.192.0/19 maxlen: 24
65.49.224.0/20 maxlen: 24
66.98.112.0/20 maxlen: 24
67.216.192.0/19 maxlen: 24
67.218.128.0/19 maxlen: 24
67.230.160.0/19 maxlen: 24
68.168.128.0/20 maxlen: 24
69.171.64.0/20 maxlen: 24
69.194.8.0/21 maxlen: 24
74.82.192.0/19 maxlen: 24
74.120.168.0/21 maxlen: 24
74.211.96.0/19 maxlen: 24
80.251.208.0/20 maxlen: 24
89.208.240.0/20 maxlen: 24
93.179.96.0/21 maxlen: 24
93.179.112.0/21 maxlen: 24
93.179.124.0/22 maxlen: 24
94.103.4.0/22 maxlen: 24
95.163.192.0/20 maxlen: 24
95.169.0.0/19 maxlen: 24
95.181.188.0/22 maxlen: 24
96.45.176.0/20 maxlen: 24
97.64.16.0/20 maxlen: 24
97.64.32.0/20 maxlen: 24
97.64.80.0/22 maxlen: 24
97.64.104.0/21 maxlen: 24
97.64.120.0/21 maxlen: 24
98.142.128.0/20 maxlen: 24
104.36.64.0/21 maxlen: 24
104.36.184.0/22 maxlen: 24
104.129.180.0/22 maxlen: 24
104.129.184.0/22 maxlen: 24
104.153.96.0/21 maxlen: 24
104.225.144.0/20 maxlen: 24
104.225.232.0/21 maxlen: 24
104.243.16.0/20 maxlen: 24
104.244.88.0/21 maxlen: 24
104.245.40.0/21 maxlen: 24
104.245.188.0/22 maxlen: 24
107.182.16.0/20 maxlen: 24
144.34.128.0/17 maxlen: 24
150.242.88.0/22 maxlen: 24
162.211.220.0/22 maxlen: 24
162.219.120.0/21 maxlen: 24
162.244.240.0/22 maxlen: 24
172.93.32.0/20 maxlen: 24
172.96.16.0/22 maxlen: 24
172.96.192.0/18 maxlen: 24
173.242.112.0/20 maxlen: 24
174.137.48.0/20 maxlen: 24
176.122.128.0/18 maxlen: 24
184.170.208.0/20 maxlen: 24
185.180.16.0/22 maxlen: 24
185.199.240.0/22 maxlen: 24
185.205.180.0/22 maxlen: 24
185.212.56.0/22 maxlen: 24
192.69.88.0/21 maxlen: 24
198.181.32.0/20 maxlen: 24
198.181.56.0/22 maxlen: 24
199.19.104.0/21 maxlen: 24
199.115.228.0/22 maxlen: 24
199.168.136.0/21 maxlen: 24
199.180.112.0/21 maxlen: 24
199.193.124.0/22 maxlen: 24
206.190.232.0/21 maxlen: 24
216.24.176.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 14 May 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:d1:65:06:cb:c5:b1:77:de:21:8f:5c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb01b28a-436d-42dd-8750-5361f2309297
Validity
Not Before: May 11 13:01:01 2025 GMT
Not After : Aug 9 13:01:01 2025 GMT
Subject: CN=ee152119-1b3c-4f68-a6da-ee38c48191ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:91:a9:3b:7c:ef:2c:de:42:d3:f2:c8:4e:2e:
72:6e:83:8c:fa:1b:4a:45:37:94:c2:a0:0c:62:5d:
b6:38:3b:58:a7:5d:58:dc:a1:65:dc:ab:e9:63:7c:
4b:db:86:9f:b0:08:bb:98:fb:59:20:24:a1:f5:e9:
24:5c:ee:61:78:33:66:b7:9f:86:69:18:b3:3c:8f:
09:e2:01:1a:e0:c1:e9:4a:1e:27:ec:49:f3:7a:4b:
6e:12:ba:f9:b8:79:28:c0:6a:c8:8a:3c:e4:cb:ef:
0e:8f:8d:04:56:6f:dd:c8:04:2d:22:7d:34:17:61:
45:47:3e:20:18:d5:8f:dd:22:ea:09:bd:66:a2:b6:
bc:ee:a5:75:9c:51:12:60:1e:bd:c5:29:10:10:52:
e9:be:03:de:33:c0:2b:95:0f:67:73:7f:0b:4e:85:
6d:64:bd:c9:9c:a0:d8:33:58:1c:6d:c2:dc:d2:4a:
df:6a:68:d2:83:31:e6:06:21:37:39:40:b8:13:27:
59:0c:a5:1f:77:08:c5:85:56:b0:3f:c4:db:e6:b0:
ac:ac:2c:e3:85:c4:44:65:87:0e:13:81:b2:66:fb:
65:f1:90:61:47:91:bd:df:03:ac:a9:67:62:50:8c:
df:ab:1d:b7:31:35:18:9e:d3:bb:5e:44:ce:d4:9b:
a7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F4:DA:1B:0A:60:DE:3E:43:95:5F:8E:27:20:27:63:9C:A4:8C:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/4ccec03b-e500-3150-8eff-15de50817fe6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.crl
X509v3 Authority Key Identifier:
keyid:A0:3F:D7:81:F7:6B:86:20:05:40:B3:B0:F1:5E:57:49:8A:88:1E:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer
sbgp-ipAddrBlock: critical
IPv4:
43.243.84.0/22
45.78.64.0/20
46.254.88.0/22
64.64.224.0/19
65.49.130.0-65.49.135.255
65.49.144.0/23
65.49.150.0/23
65.49.192.0-65.49.239.255
66.98.112.0/20
67.216.192.0/19
67.218.128.0/19
67.230.160.0/19
68.168.128.0/20
69.171.64.0/20
69.194.8.0/21
74.82.192.0/19
74.120.168.0/21
74.211.96.0/19
80.251.208.0/20
89.208.240.0/20
93.179.96.0/21
93.179.112.0/21
93.179.124.0/22
94.103.4.0/22
95.163.192.0/20
95.169.0.0/19
95.181.188.0/22
96.45.176.0/20
97.64.16.0-97.64.47.255
97.64.80.0/22
97.64.104.0/21
97.64.120.0/21
98.142.128.0/20
104.36.64.0/21
104.36.184.0/22
104.129.180.0-104.129.187.255
104.153.96.0/21
104.225.144.0/20
104.225.232.0/21
104.243.16.0/20
104.244.88.0/21
104.245.40.0/21
104.245.188.0/22
107.182.16.0/20
144.34.128.0/17
150.242.88.0/22
162.211.220.0/22
162.219.120.0/21
162.244.240.0/22
172.93.32.0/20
172.96.16.0/22
172.96.192.0/18
173.242.112.0/20
174.137.48.0/20
176.122.128.0/18
184.170.208.0/20
185.180.16.0/22
185.199.240.0/22
185.205.180.0/22
185.212.56.0/22
192.69.88.0/21
198.181.32.0/20
198.181.56.0/22
199.19.104.0/21
199.115.228.0/22
199.168.136.0/21
199.180.112.0/21
199.193.124.0/22
206.190.232.0/21
216.24.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:92:0a:9b:3a:5d:f8:41:6e:98:da:00:00:7d:2b:b7:b6:7d:
13:f2:7b:5f:e9:12:f6:96:cc:fe:21:d8:e5:c6:6e:c4:5a:2c:
5a:9d:43:5f:0e:80:fd:2b:d1:49:6c:08:08:ae:19:60:61:69:
07:7b:c9:b3:0f:4a:7a:19:be:7a:ac:59:94:34:ff:a1:34:75:
6d:01:ca:39:66:5c:4b:aa:63:85:59:69:2f:30:c0:4e:3d:7b:
7f:95:b9:cb:3e:ec:f7:12:61:52:62:df:d9:c0:e0:8b:71:06:
b2:c3:c1:60:9a:9d:90:d2:a2:f2:d3:5c:9e:f4:12:f8:2b:3d:
70:ec:29:1f:70:37:ee:8b:72:30:1a:f9:78:15:0f:7e:4d:68:
48:5a:de:34:cb:50:9d:6d:52:70:7c:39:31:34:40:43:b0:57:
be:4e:43:a2:8e:10:27:02:d3:22:a7:41:75:2f:51:99:63:77:
bd:30:90:d1:ec:fd:99:ec:50:dc:cf:9a:7b:75:5c:81:1c:c8:
49:4a:da:52:dd:7d:6a:96:42:4e:0f:2e:39:17:25:bd:9e:fc:
5f:fa:87:55:44:0d:a3:86:f4:19:bd:18:f3:54:2d:29:c2:8d:
5d:4b:a8:9d:d2:b1:2a:3e:18:ae:f6:af:c5:8b:89:ac:fc:53:
27:05:30:bf
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue May 13 14:17:37 2025 by rpki-client