Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/3a3eb039-61a2-311a-91ae-3870c3ee1928.roa
File: 3a3eb039-61a2-311a-91ae-3870c3ee1928.roa (raw, json)
Hash identifier: mFqHRsufBgeA4+YKvTfWN+NA5OjEIGu8f0vMeL+R5lY=
Subject key identifier: 5F:99:0C:52:38:09:C6:3E:29:A9:43:53:D9:91:6A:CB:D1:F1:D2:F7
Certificate issuer: /CN=de801427-6a45-470a-898c-c6a2b1b27380
Certificate serial: 010D0C9F432858493C09265997CF480B69968380
Authority key identifier: 21:E4:15:AD:0E:76:7F:D5:80:F2:33:09:E7:CE:05:10:DA:73:68:15
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/3a3eb039-61a2-311a-91ae-3870c3ee1928.roa
Signing time: Wed 19 Mar 2025 01:00:40 +0000
ROA not before: Wed 19 Mar 2025 01:00:40 +0000
ROA not after: Tue 17 Jun 2025 01:00:40 +0000
asID: 13443
IP address blocks: 2620:119:50d2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/de801427-6a45-470a-898c-c6a2b1b27380.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/de801427-6a45-470a-898c-c6a2b1b27380.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3c:09:26:59:97:cf:48:0b:69:96:83:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de801427-6a45-470a-898c-c6a2b1b27380
Validity
Not Before: Mar 19 01:00:40 2025 GMT
Not After : Jun 17 01:00:40 2025 GMT
Subject: CN=edbecd5c-bc59-430c-bf38-29ac88154f16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:84:24:6c:26:b8:f1:15:20:71:02:ae:af:42:
af:7c:56:87:75:f8:a7:52:ae:6f:0e:d6:45:48:ec:
55:6c:84:1c:4d:b7:6a:b8:7c:a0:52:1f:8b:08:8d:
71:f0:e3:1d:c2:03:a0:c0:58:2c:ba:cf:73:a0:49:
10:3d:b7:44:8a:d6:18:ea:51:3f:34:a1:36:49:36:
18:d7:0e:58:57:96:2a:43:3d:e6:42:18:22:80:53:
d6:89:58:59:3c:41:50:aa:2b:c9:7b:f2:66:05:ac:
ef:2a:db:5f:0e:9e:6e:a1:0c:38:c4:ec:44:81:6b:
ba:4f:e5:dd:44:3f:e3:1e:6b:f1:34:f7:1c:19:b6:
b8:6c:d5:86:87:cf:3d:26:5e:29:8c:45:5f:91:a7:
90:d7:1b:8b:2c:4e:cf:77:a3:b4:96:ef:e6:94:b8:
5d:9b:f8:41:e1:8e:4c:96:c6:bf:3f:70:8e:ef:9b:
9d:f1:6e:1f:62:19:f2:aa:98:93:7b:96:04:d0:f2:
3d:53:55:83:0c:f9:71:8c:60:49:f3:38:61:c7:5b:
f6:35:5e:6e:44:ff:08:8d:22:44:6f:c7:da:af:f1:
bf:6e:63:d2:81:3e:2e:7c:2c:84:7f:b5:62:d0:d6:
0e:a5:c6:18:f9:73:a9:ba:6e:43:7d:ad:c5:d9:d2:
6c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:99:0C:52:38:09:C6:3E:29:A9:43:53:D9:91:6A:CB:D1:F1:D2:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/3a3eb039-61a2-311a-91ae-3870c3ee1928.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/de801427-6a45-470a-898c-c6a2b1b27380.crl
X509v3 Authority Key Identifier:
keyid:21:E4:15:AD:0E:76:7F:D5:80:F2:33:09:E7:CE:05:10:DA:73:68:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:119:50d2::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:31:59:03:90:81:ac:02:10:eb:23:51:90:63:c8:9b:d0:7d:
7e:cf:c7:37:7f:00:69:5b:9f:07:fd:9d:a6:2b:da:dc:e8:ed:
e9:e5:02:ca:63:c8:67:01:af:0e:1c:89:f5:b2:ee:c9:60:24:
36:31:ee:87:06:c7:90:e1:cf:fa:58:d4:95:57:e9:3c:7c:58:
6b:c0:3f:dc:f6:b4:f6:b4:10:c8:3a:d6:36:59:be:ad:94:55:
50:54:c4:b6:69:a0:a2:3b:24:14:7b:03:53:0a:6a:64:b3:ba:
09:b2:fb:43:70:fb:c1:61:01:a9:16:b2:d1:31:47:47:df:f9:
6d:8d:b3:d3:1e:16:87:1a:de:2e:2a:61:f8:9c:20:b3:d9:db:
4f:fe:aa:a1:8b:3f:12:8d:28:11:26:04:f0:88:b0:a4:ef:62:
af:3b:c1:ef:df:aa:20:7f:c7:71:5c:df:e4:1e:03:3c:2a:fa:
f6:e4:fe:96:f6:54:98:a3:a3:e5:7c:3b:df:57:81:5d:b0:f5:
6d:8e:2b:1c:3c:4b:11:d3:5f:85:15:61:78:64:45:27:a4:9c:
02:ab:43:8a:39:47:4c:8c:58:73:bb:26:a7:a0:13:62:1d:63:
92:42:6f:d0:21:cf:e6:f2:d8:ba:27:b7:91:be:2b:cd:ad:d9:
be:0e:34:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:49:25 2025 by rpki-client