Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/ebcd6a6c-403f-3b78-bd97-c1ad15d93c50.roa
File: ebcd6a6c-403f-3b78-bd97-c1ad15d93c50.roa (raw, json)
Hash identifier: lmMfwya0bPvEDhQQ3Wy3Jbdcjtqelon6vWVvbt6LKgU=
Subject key identifier: E5:0C:F7:28:52:3E:8D:D3:4F:BE:DE:D4:FD:28:E0:03:13:95:37:3A
Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial: 010D0C9F43285849244E7CED141CC78601E7F980
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/ebcd6a6c-403f-3b78-bd97-c1ad15d93c50.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 14061
IP address blocks: 2604:a880::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:7c:ed:14:1c:c7:86:01:e7:f9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=e0675497-b255-41c8-8ff9-d6952ebe21a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:b2:e9:02:0d:78:51:e1:3e:a6:1c:af:43:35:
e7:ad:12:01:3e:94:5a:37:5d:1b:2a:0f:e7:1c:65:
a9:cc:65:db:d9:37:5a:96:48:ce:4a:73:02:f8:f9:
61:24:51:a0:29:a2:64:ce:b0:02:8b:30:a3:b7:03:
72:f5:8b:21:27:3a:ec:d3:1f:0b:94:07:df:79:35:
bf:97:80:26:41:8f:26:70:48:3d:3b:c6:ff:43:cb:
2c:ab:03:ff:04:34:a4:0c:71:e6:69:d3:a9:25:f6:
0c:10:6c:8b:15:96:ee:9b:30:bf:ae:7a:bd:ac:81:
28:b5:dd:84:9c:fd:f3:1d:28:47:55:af:af:ab:48:
6d:d6:67:3d:40:c3:a3:59:5e:14:ae:20:1c:54:2c:
3b:78:ef:36:e0:2f:31:ff:39:9d:b9:38:6f:b2:c6:
32:e0:2d:59:6d:a7:69:6a:19:30:85:89:31:35:b6:
ad:c3:57:86:86:e9:89:c8:9b:45:1e:8c:0e:4a:7d:
0d:78:24:77:9f:11:e0:08:83:36:62:88:90:5b:5d:
1e:af:00:54:36:bb:4a:4d:41:69:1b:7c:13:cf:95:
bc:f0:d9:5a:09:c5:86:81:56:ea:b0:8c:b0:5e:55:
b1:78:e5:0e:42:64:de:18:1f:16:35:a0:ba:8f:31:
81:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:0C:F7:28:52:3E:8D:D3:4F:BE:DE:D4:FD:28:E0:03:13:95:37:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/ebcd6a6c-403f-3b78-bd97-c1ad15d93c50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
X509v3 Authority Key Identifier:
keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:a880::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:8b:14:6d:76:ca:fb:20:49:63:38:39:fb:05:31:b8:c4:64:
ab:2f:7e:0b:bc:e2:af:4d:0b:d9:6b:06:76:4e:3d:41:24:9f:
bb:93:62:f8:76:d8:31:f7:cb:5f:8d:47:cc:72:21:e5:61:3e:
83:90:29:41:ea:3d:24:39:f0:9e:10:55:de:37:cd:9d:e2:bf:
0a:30:a6:79:23:78:11:8c:84:fd:46:94:3b:f0:f7:2c:26:f2:
7e:66:18:61:15:e2:6c:52:18:f2:d4:c9:c1:d1:1a:db:2a:54:
1a:0c:7e:01:f2:5e:76:4f:d5:32:92:de:82:9d:d9:2d:6f:a3:
cc:9d:51:3d:c3:c1:17:d7:c9:d5:06:24:da:29:f5:fb:05:1c:
b0:dc:ef:8d:a8:6a:35:47:93:52:c1:fd:95:2c:ca:04:41:09:
a7:40:30:48:31:3b:93:ba:90:9b:f7:7e:a3:99:b6:85:cb:28:
04:a8:9a:d2:0a:25:f3:51:39:b8:82:f3:74:b1:67:c9:57:97:
31:78:d5:19:00:c5:83:12:e0:f5:e8:48:6e:61:d3:24:ab:15:
a5:ce:a0:49:c0:a6:43:ff:87:38:82:2f:f5:cb:31:b9:64:81:
32:ec:2e:59:b1:fe:5f:e5:a9:88:07:25:70:22:6d:40:d3:4a:
65:04:79:ca
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkkTnztFBzHhgHn+YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy
Njk4MB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk
ZTA2NzU0OTctYjI1NS00MWM4LThmZjktZDY5NTJlYmUyMWE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA67LpAg14UeE+phyvQzXnrRIBPpRaN10bKg/n
HGWpzGXb2TdalkjOSnMC+PlhJFGgKaJkzrACizCjtwNy9YshJzrs0x8LlAffeTW/
l4AmQY8mcEg9O8b/Q8ssqwP/BDSkDHHmadOpJfYMEGyLFZbumzC/rnq9rIEotd2E
nP3zHShHVa+vq0ht1mc9QMOjWV4UriAcVCw7eO824C8x/zmduThvssYy4C1Zbadp
ahkwhYkxNbatw1eGhumJyJtFHowOSn0NeCR3nxHgCIM2YoiQW10erwBUNrtKTUFp
G3wTz5W88NlaCcWGgVbqsIywXlWxeOUOQmTeGB8WNaC6jzGBSQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFOUM9yhSPo3TT77e1P0o4AMTlTc6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4
ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvZWJjZDZhNmMtNDAzZi0z
Yjc4LWJkOTctYzFhZDE1ZDkzYzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh
ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl
MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3
ZjYyZTI2OTguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgSogDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCqixRtdsr7IEljODn7BTG4xGSrL34LvOKvTQvZawZ2Tj1BJJ+7k2L4
dtgx98tfjUfMciHlYT6DkClB6j0kOfCeEFXeN82d4r8KMKZ5I3gRjIT9RpQ78Pcs
JvJ+ZhhhFeJsUhjy1MnB0RrbKlQaDH4B8l52T9Uykt6Cndktb6PMnVE9w8EX18nV
BiTaKfX7BRyw3O+NqGo1R5NSwf2VLMoEQQmnQDBIMTuTupCb936jmbaFyygEqJrS
CiXzUTm4gvN0sWfJV5cxeNUZAMWDEuD16EhuYdMkqxWlzqBJwKZD/4c4gi/1yzG5
ZIEy7C5Zsf5f5amIByVwIm1A00plBHnK
-----END CERTIFICATE-----
Generated at Tue Apr 8 21:08:17 2025 by rpki-client