Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/732291c2-9541-3833-8b8b-32de6384bc20.roa
File: 732291c2-9541-3833-8b8b-32de6384bc20.roa (raw, json)
Hash identifier: RR5AmQEiAMJhfl2Wu2K/NN7RSjYL2UkM+Pfpor+Z8ZU=
Subject key identifier: 5F:BE:30:F1:51:4C:01:BD:C4:A8:69:82:79:8C:1B:C2:95:9C:A0:CD
Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial: 010D0C9F432858491ED6ED6FCEB6FE7E69A86510
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/732291c2-9541-3833-8b8b-32de6384bc20.roa
Signing time: Sat 08 Mar 2025 14:00:52 +0000
ROA not before: Sat 08 Mar 2025 14:00:52 +0000
ROA not after: Fri 06 Jun 2025 13:00:52 +0000
asID: 16839
IP address blocks: 2606:3600:105::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1e:d6:ed:6f:ce:b6:fe:7e:69:a8:65:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Validity
Not Before: Mar 8 14:00:52 2025 GMT
Not After : Jun 6 13:00:52 2025 GMT
Subject: CN=062937dd-987c-401d-bb67-ef11bf853586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:03:2d:b4:5a:a3:99:7f:b6:7d:92:7b:37:7f:
61:d1:10:89:c7:28:2e:a9:60:f4:05:ad:4a:b7:23:
9d:12:0a:ed:06:e7:04:f6:f9:a7:cd:99:8d:8e:4f:
06:4e:2f:9d:3d:32:80:31:df:10:c7:2a:5e:09:c6:
98:e3:96:a2:bf:42:1b:a3:e9:94:fc:af:be:97:5a:
0f:38:90:a9:c4:7c:7d:71:a8:7d:da:88:c8:1d:b9:
9b:e3:7e:15:52:c9:89:76:7d:6e:54:af:43:7f:f9:
21:f4:16:4d:25:ac:e4:bd:52:cc:d3:3f:fc:40:0e:
e3:59:11:72:9f:c2:7d:f2:56:a5:6f:4a:5e:36:57:
72:00:a0:34:40:91:d5:58:95:f6:64:de:9e:00:72:
b4:3d:1c:a0:e8:56:de:3e:36:cb:9e:1d:97:c0:07:
2d:37:12:08:ed:be:8e:56:7a:1b:55:9c:b7:f3:a1:
3a:0c:6f:25:df:e5:03:24:14:2c:68:b9:f0:91:c0:
4a:1b:3d:00:29:38:f1:c2:34:1c:84:51:ae:2c:29:
a4:cc:73:b2:74:fa:08:6f:3d:ad:5d:39:cd:60:18:
dd:7c:a3:70:da:bc:b5:61:81:f8:cf:e9:65:fb:37:
2c:af:e6:ba:07:59:f0:77:24:80:c7:3e:a0:49:1f:
f2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:BE:30:F1:51:4C:01:BD:C4:A8:69:82:79:8C:1B:C2:95:9C:A0:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/732291c2-9541-3833-8b8b-32de6384bc20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
X509v3 Authority Key Identifier:
keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:3600:105::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:06:77:f0:d5:32:64:48:36:0b:82:73:18:51:20:b2:2c:cc:
4a:4a:39:05:5d:70:29:7b:a9:8a:57:d5:ee:7b:6e:72:99:cf:
c6:24:03:b0:d9:54:d2:f8:44:d8:97:22:0a:fc:cb:e7:68:7d:
d1:7e:2c:1e:5d:2c:70:e3:cb:2c:bc:d4:ae:da:8a:14:eb:c5:
56:ec:46:1e:b5:cf:eb:19:4d:f3:78:91:1f:dc:a6:15:78:80:
fc:08:2d:57:ee:b7:c9:7a:66:9b:fe:f1:4b:a3:c4:c5:ce:49:
e5:f3:c8:70:b3:d7:e0:6a:3c:d9:d6:fa:4d:65:d9:83:ee:aa:
1f:5e:cd:12:00:c6:e7:85:04:d0:55:89:15:e1:58:bc:c4:ed:
4a:6e:c1:f1:ac:44:76:23:00:73:36:de:2a:36:08:79:3a:5d:
99:d0:f2:26:e0:89:ba:6d:95:a6:e1:cb:76:3b:d5:ac:51:ee:
07:a0:99:75:55:9b:d5:af:19:bf:06:5a:f4:da:14:46:67:37:
e7:fc:01:e7:20:84:ac:cf:20:0d:dd:99:38:ec:9a:1f:3c:67:
ae:88:b7:16:e3:70:6b:de:d0:c6:7a:3f:03:3a:ae:0d:1b:84:
f7:e1:d4:59:64:16:80:c4:7b:ad:a7:2e:c2:a1:20:fd:5f:fc:
da:bf:8a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 11:33:58 2025 by rpki-client