Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87b5cad1-1858-3498-8713-f8ae100ba712.roa
File: 87b5cad1-1858-3498-8713-f8ae100ba712.roa (raw, json)
Hash identifier: IbMC0o3oQLgmdsMmyxBnaqRwZoRtwlXIKC4iRoTai1Q=
Subject key identifier: 96:4A:09:22:5F:0B:86:FA:B6:50:B5:E0:11:0B:2C:38:72:E4:B8:A2
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584913AC3F5C00AAD64E27AB2A80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87b5cad1-1858-3498-8713-f8ae100ba712.roa
Signing time: Tue 04 Mar 2025 14:00:52 +0000
ROA not before: Tue 04 Mar 2025 14:00:52 +0000
ROA not after: Mon 02 Jun 2025 13:00:52 +0000
asID: 7342
IP address blocks: 2001:503:4872::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:13:ac:3f:5c:00:aa:d6:4e:27:ab:2a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 4 14:00:52 2025 GMT
Not After : Jun 2 13:00:52 2025 GMT
Subject: CN=bd4b0007-b5e3-4522-a86f-ef5eb1091f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:dd:5b:b5:bb:70:0f:bf:9a:ee:85:b5:90:f2:
89:ad:00:e4:e9:20:a8:cc:15:b2:7b:aa:95:7f:13:
ad:85:7d:a9:9c:6f:cd:87:ef:50:60:05:b9:0f:89:
c0:c2:af:d3:35:4b:16:81:87:00:f4:18:9c:94:87:
95:50:1e:d5:8a:cf:63:c6:6b:43:d7:b4:2f:55:57:
0a:50:65:ec:7e:93:d7:1d:46:97:f7:70:93:60:3e:
e1:e8:b9:a6:47:21:1d:32:0c:d4:c1:62:57:ac:66:
45:07:56:cb:bd:b9:99:a2:d7:53:dc:59:c5:3b:06:
c4:7c:63:6b:19:af:a0:9f:ed:74:ca:8f:0c:f8:d5:
9d:21:a8:1b:ff:81:ef:be:d8:e6:43:a9:ad:da:c3:
1e:66:bb:9c:56:08:1e:1e:e9:32:b3:08:8b:51:ae:
3a:e3:46:38:8d:e7:a4:85:85:19:98:ec:5a:13:b8:
e2:fe:c9:0c:b3:5c:ab:46:ea:d1:a8:2f:dc:00:84:
a4:07:0b:aa:9b:e4:3e:4d:53:cc:57:07:48:e6:7f:
8e:ac:5f:5a:f6:03:97:16:f0:e3:fe:0b:4b:72:b7:
d0:d9:46:c7:9e:f8:0c:08:af:85:40:d3:c3:fe:fa:
40:51:a3:3f:41:97:32:2d:02:63:17:d1:73:11:73:
f2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:4A:09:22:5F:0B:86:FA:B6:50:B5:E0:11:0B:2C:38:72:E4:B8:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87b5cad1-1858-3498-8713-f8ae100ba712.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:503:4872::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:46:a7:5a:ae:8d:49:e7:ab:77:d8:f5:6d:91:3d:a4:0e:21:
0e:6f:0c:79:08:1f:50:45:aa:e4:18:e4:5a:23:31:1a:00:6b:
41:75:94:f3:c0:3c:1d:63:ad:76:69:37:9b:03:ce:9e:28:97:
87:63:97:e9:03:fa:2a:6a:7e:d1:d8:4e:31:1d:dc:f0:49:20:
dd:7d:0f:ac:de:9b:8b:5a:69:7f:c8:68:d6:1c:eb:12:de:f2:
fa:85:22:9a:1d:a0:96:1d:90:f9:ed:8c:a9:47:e5:58:6d:c9:
03:6e:c1:76:cd:45:8b:5b:c2:02:a6:68:57:ed:44:aa:3b:2f:
51:a1:10:13:bb:23:f4:d4:01:5f:29:38:e9:83:ab:2b:be:0c:
66:e5:5f:a6:c0:e6:94:3a:c4:28:0e:fa:6d:ab:ec:dc:a7:80:
43:bf:a7:64:40:9a:fc:d3:ef:9e:cc:8b:f2:4f:69:b6:a6:e2:
63:55:1d:f9:73:28:89:eb:5c:00:2a:a5:5c:6d:f2:d8:80:35:
af:f1:5f:9c:b9:ae:00:7f:2e:9c:63:ed:a5:8b:65:2d:32:72:
be:5c:04:47:96:94:6b:76:1b:e0:b9:1f:e5:fc:bc:13:e7:c5:
90:17:0c:10:6f:ea:2a:01:51:22:8d:a5:a1:6e:d0:f2:43:94:
c3:47:53:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:51:12 2025 by rpki-client