Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/90681843-300f-3875-a7c9-6cac5058ae97.roa
File: 90681843-300f-3875-a7c9-6cac5058ae97.roa (raw, json)
Hash identifier: ahQb6512CwZaupgb9UMwJvTOzMDV1YSHmWE9DWYQObg=
Subject key identifier: 90:45:49:93:40:FF:35:E3:87:31:17:D4:58:A0:55:09:D9:41:65:02
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285849124701AA46FCEF54C2D44040
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/90681843-300f-3875-a7c9-6cac5058ae97.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 397220
IP address blocks: 2001:500:3682::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:47:01:aa:46:fc:ef:54:c2:d4:40:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=da829cb6-2d32-4fd5-b57d-46be88c6eb63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a0:d5:7e:8c:78:4d:f3:c2:17:31:8e:62:3c:
75:b3:84:01:39:c2:58:39:0d:0b:10:5e:03:13:d1:
56:5a:89:74:a3:8e:38:37:98:23:14:5f:b3:4f:a3:
bc:11:37:1d:41:e4:1a:e7:af:08:1c:6d:36:ae:bc:
2f:e1:8b:20:90:e7:ee:0f:b6:33:0b:20:9e:82:ab:
b5:8e:15:32:af:47:34:50:c1:a8:d8:13:65:26:03:
e2:23:94:e5:23:bb:cc:2d:41:23:b0:fe:c6:6f:af:
ea:df:3b:af:c9:ac:30:af:98:64:8d:f7:fc:72:1b:
f0:f1:17:7a:3b:41:4b:a4:09:5e:fc:72:cd:98:fd:
88:92:85:d9:78:62:ec:f9:2b:ee:15:eb:55:8a:83:
2a:09:ea:a9:d3:aa:42:b3:31:6d:83:09:43:f4:9c:
64:ec:58:66:3a:a2:15:98:11:a9:3b:8a:d5:40:50:
ab:85:f8:19:e4:a1:80:52:87:6e:23:6e:78:27:68:
12:68:76:98:ae:6c:b5:82:d7:63:2e:a7:fe:07:19:
22:1b:6a:56:c0:80:63:8e:78:03:a8:92:39:79:ef:
e8:75:15:be:b1:3b:ec:6f:dc:2c:52:4e:4d:59:23:
ca:ab:be:4d:6a:a3:31:1c:96:f1:98:e9:0c:38:80:
d5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:45:49:93:40:FF:35:E3:87:31:17:D4:58:A0:55:09:D9:41:65:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/90681843-300f-3875-a7c9-6cac5058ae97.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:3682::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:fd:4f:99:96:fa:6c:c4:04:d3:6c:d2:3c:ac:a3:de:a9:1e:
1a:94:18:94:50:b8:f2:bf:d8:41:d2:c4:87:9d:79:d9:2d:91:
7e:29:3d:bd:97:c9:62:5a:15:ba:9a:f0:9a:03:b3:a4:09:23:
81:85:2f:bc:ae:e6:78:be:59:1f:5b:6d:1a:c1:c3:68:44:03:
8f:1c:de:67:63:7d:d4:a1:42:11:cd:9a:a0:bd:14:91:84:32:
16:fd:f8:5a:29:41:23:7b:6c:f3:d0:88:7b:ae:0e:a8:f9:47:
db:7a:49:0d:51:d6:f5:ff:4b:fb:40:fd:fa:b3:10:fb:89:79:
5f:15:03:5c:a3:dc:c1:b9:59:1d:57:1e:fc:40:86:62:e7:d8:
de:31:f0:ef:9e:9a:d2:d8:64:c4:48:d0:eb:e7:d2:5e:ac:be:
f6:f7:46:25:70:23:19:d8:73:e7:d5:8e:ce:74:17:d2:46:58:
5f:69:b9:3c:af:c4:d5:53:be:da:0b:6a:15:65:8f:d6:b3:ff:
ad:35:ff:08:34:58:38:cd:d9:16:a0:c5:e9:fd:ef:cf:ca:fe:
bc:70:6c:fd:4d:8b:c7:08:1f:60:2b:56:1a:ad:1f:4d:61:9c:
af:4e:2f:6a:77:6f:08:36:c6:d3:d5:67:79:ee:60:f6:25:67:
4e:f4:ef:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 17:14:34 2025 by rpki-client