Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/552d64c1-58ba-3825-8bb4-1d0c0d6867d2.roa
File: 552d64c1-58ba-3825-8bb4-1d0c0d6867d2.roa (raw, json)
Hash identifier: MAg7rOwjK/Iqx8/3Ayk+uT7HM6SQdFUMk3ubMKRm8As=
Subject key identifier: 4A:7C:6B:F9:A1:A5:40:48:31:45:21:AA:F6:C1:5A:C7:A3:07:1A:F1
Certificate issuer: /CN=39b6b2fc-3422-46e7-b637-7b8dcb84bff1
Certificate serial: 010D0C9F432858496A19B095A9D9998537FDC5C0
Authority key identifier: F5:79:B5:2B:5C:12:7C:0B:C8:CD:00:75:42:2C:15:FC:6F:A6:37:73
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/552d64c1-58ba-3825-8bb4-1d0c0d6867d2.roa
Signing time: Fri 04 Apr 2025 13:00:59 +0000
ROA not before: Fri 04 Apr 2025 13:00:59 +0000
ROA not after: Thu 03 Jul 2025 13:00:59 +0000
asID: 897
IP address blocks: 2620:ab:a002::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6a:19:b0:95:a9:d9:99:85:37:fd:c5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39b6b2fc-3422-46e7-b637-7b8dcb84bff1
Validity
Not Before: Apr 4 13:00:59 2025 GMT
Not After : Jul 3 13:00:59 2025 GMT
Subject: CN=e34994e5-32c4-4388-a6a7-73d23cd88c12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:20:d8:59:ff:ed:86:22:78:2e:7d:96:af:8d:
c1:50:b0:2e:d6:d7:c1:88:39:c3:90:aa:59:aa:91:
5d:a0:e4:69:73:cc:65:b0:4c:76:75:04:8c:7c:6d:
08:99:b0:e7:f3:25:e7:f2:44:67:42:7e:49:04:95:
a6:1c:f1:39:1c:47:e5:f3:0e:e7:06:9f:ba:2d:f8:
9c:8b:44:27:93:8e:d6:a0:39:1c:6e:d9:f9:32:70:
fa:e0:b5:4f:de:14:dc:2e:45:6e:63:2c:9e:59:38:
61:55:83:5d:50:34:0c:3f:3d:f0:19:1d:6a:6f:70:
99:a7:2c:06:a6:13:af:45:32:fb:61:7c:2d:53:bc:
5c:f5:6a:72:96:68:39:5f:f4:45:67:89:07:37:3d:
c5:f8:d9:58:5f:8f:b5:e0:84:5f:54:8d:2c:5a:d4:
f1:ee:97:fe:de:2c:d5:aa:50:bb:02:ec:6a:cd:f6:
e9:d6:d3:d2:a1:a3:af:aa:c2:23:25:20:66:19:3b:
45:8f:97:e8:6e:c0:1c:92:07:78:c5:32:74:01:80:
6d:67:8f:f6:1b:9d:13:59:e6:a2:97:af:c3:aa:91:
59:24:a5:5e:d5:82:74:10:e1:70:50:b7:41:fb:8e:
ef:30:49:8b:ae:5a:cd:9e:5b:c1:5a:c4:ff:bf:83:
f4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:7C:6B:F9:A1:A5:40:48:31:45:21:AA:F6:C1:5A:C7:A3:07:1A:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/552d64c1-58ba-3825-8bb4-1d0c0d6867d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.crl
X509v3 Authority Key Identifier:
keyid:F5:79:B5:2B:5C:12:7C:0B:C8:CD:00:75:42:2C:15:FC:6F:A6:37:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:ab:a002::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:9a:6c:42:87:65:a5:e1:56:34:49:a2:96:3d:7d:33:5d:ff:
71:55:aa:48:4d:c5:e7:c9:a6:a2:7d:d2:c2:e8:6e:c3:a7:00:
63:d5:7c:b4:ed:14:9c:3d:b0:df:6c:96:71:f5:bc:c8:2c:07:
fd:54:06:85:4c:50:af:6c:1a:2c:34:cc:a2:08:c2:e6:77:1d:
a7:e9:cd:6c:fa:e5:21:d4:12:fd:96:5d:d7:f8:ce:29:08:b1:
a7:9f:a5:2b:6e:3c:50:46:da:56:29:3c:47:07:d8:9b:d5:63:
5d:66:e8:7a:f0:11:82:0d:da:d3:53:f5:86:c0:07:44:43:54:
79:ab:52:f7:4c:7b:b4:6c:8f:88:71:36:06:1d:5f:de:57:97:
c6:5a:b6:f5:d3:21:c1:96:d6:a1:e3:34:6a:71:9f:ca:78:f1:
47:64:4c:37:67:cd:0b:91:45:c4:20:ce:36:e2:f7:84:1a:69:
27:1a:b8:4f:88:82:52:6b:13:fe:c4:d9:e8:3b:ab:90:3b:2c:
52:1b:87:18:79:3d:4e:c0:9d:21:6f:73:d8:b6:64:45:46:8c:
d1:59:1c:e2:02:f2:dd:08:d5:ff:08:46:51:db:aa:30:2f:83:
4e:8d:c7:3d:39:03:54:48:96:43:91:63:19:3e:78:74:e1:7e:
28:9f:3d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:25:31 2025 by rpki-client