Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/64b04f18-6d92-3bae-a8a9-8b34149ee966.roa
File: 64b04f18-6d92-3bae-a8a9-8b34149ee966.roa (raw, json)
Hash identifier: J9LXddar/ZlEzJUKOIPF/1RX454P0JcO0VBNUG8wk+w=
Subject key identifier: 74:9C:AA:2B:CA:E4:4D:A6:AE:87:EC:87:49:92:C5:7A:3C:6B:9B:3F
Certificate issuer: /CN=39b6b2fc-3422-46e7-b637-7b8dcb84bff1
Certificate serial: 010D0C9F43285848A6CB6872686FAEA0F62F5E00
Authority key identifier: F5:79:B5:2B:5C:12:7C:0B:C8:CD:00:75:42:2C:15:FC:6F:A6:37:73
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/64b04f18-6d92-3bae-a8a9-8b34149ee966.roa
Signing time: Fri 24 Jan 2025 14:00:52 +0000
ROA not before: Fri 24 Jan 2025 14:00:52 +0000
ROA not after: Thu 24 Apr 2025 13:00:52 +0000
asID: 16509
IP address blocks: 2620:ab:a002::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 09 Apr 2025 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a6:cb:68:72:68:6f:ae:a0:f6:2f:5e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39b6b2fc-3422-46e7-b637-7b8dcb84bff1
Validity
Not Before: Jan 24 14:00:52 2025 GMT
Not After : Apr 24 13:00:52 2025 GMT
Subject: CN=3c0fa4fd-362c-42fb-9a36-398ec3677603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:70:48:46:f7:a3:4c:0a:c7:d9:95:57:bf:4f:
05:4f:89:10:f4:58:46:90:11:f1:bb:37:29:c0:ca:
ef:36:66:e3:ca:90:c2:44:4a:99:bf:4a:ef:ac:9d:
13:ba:8d:8c:31:80:9d:31:14:ec:66:e2:c5:1b:0a:
60:f0:e0:21:71:b1:0d:ec:db:16:6d:d8:f5:c4:f6:
c8:ac:24:7a:14:1f:b2:9d:db:6a:42:07:a9:4b:80:
d6:b3:44:ae:55:33:47:5a:2c:36:3d:78:ee:e6:e7:
b1:cd:6b:88:58:e1:94:85:33:9c:52:a3:b3:80:7a:
e5:d9:12:3c:b0:d3:22:d6:f3:51:e9:33:aa:5d:86:
fd:b0:8f:71:5b:0f:2f:ef:ef:48:cd:d3:0d:65:9c:
82:9c:fd:8c:f2:2f:ea:82:cc:eb:67:65:9f:2d:39:
91:8e:06:35:d4:de:a7:11:49:4e:aa:65:82:ea:5a:
e2:3f:86:3d:2e:a5:41:c8:ba:82:b6:17:9b:d4:b0:
58:29:b3:60:3f:a2:03:34:e1:1e:db:fe:a6:07:d2:
d0:11:21:0c:0a:ef:d6:99:fb:08:b5:be:92:86:10:
19:d7:8f:7c:66:14:49:37:55:f8:46:dd:45:21:53:
75:14:f3:62:00:06:da:60:0a:c4:d3:29:a8:bc:54:
05:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:9C:AA:2B:CA:E4:4D:A6:AE:87:EC:87:49:92:C5:7A:3C:6B:9B:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/64b04f18-6d92-3bae-a8a9-8b34149ee966.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.crl
X509v3 Authority Key Identifier:
keyid:F5:79:B5:2B:5C:12:7C:0B:C8:CD:00:75:42:2C:15:FC:6F:A6:37:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:ab:a002::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:6b:64:17:f3:df:4f:94:45:15:8b:64:f7:6b:4c:92:b5:b5:
a6:5e:b9:83:7b:46:40:99:71:27:03:0d:bc:d4:4e:06:31:1a:
e0:96:f7:d2:fa:0a:d6:61:d5:5a:b9:21:65:a8:be:1d:31:d4:
ec:b9:ab:4d:6e:16:46:77:d9:fd:8b:a4:8c:7f:37:1b:8b:37:
5e:17:7b:26:2d:12:19:f8:de:1e:e8:87:31:91:12:c5:00:9f:
e8:90:49:04:fa:80:a0:4c:b4:ea:cc:9e:50:cf:fb:77:97:02:
bf:df:4a:d2:af:94:42:05:25:92:5b:fe:a6:ea:6f:7e:d3:48:
a2:a1:ab:af:23:8c:ef:d9:4a:53:25:36:7e:ff:b0:48:3e:31:
7b:d1:51:d4:37:52:da:e5:d4:e3:8c:35:84:cb:2d:91:0f:52:
6f:80:cd:70:0f:cc:54:b9:b8:7e:e9:a3:ba:40:42:f9:36:31:
f5:75:71:b7:1e:0e:3f:af:12:d4:02:9b:2c:9b:b2:b6:f0:a9:
c0:89:16:4f:2b:ca:9c:b6:55:01:2e:66:ad:71:9c:f2:21:5f:
70:9a:b0:46:4f:0d:73:e2:72:87:ad:a1:a4:47:34:48:e7:7f:
b7:90:c9:67:3f:ec:d1:73:86:08:2e:4e:f3:d9:3b:1b:bd:81:
5e:4a:d8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:41:13 2025 by rpki-client