Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f6aa529a-14d2-3756-8aaf-0775379d704a.roa
File: f6aa529a-14d2-3756-8aaf-0775379d704a.roa (raw, json)
Hash identifier: oHb1dzsc6uwiHrgER1Zj5MCu1hY7rd6POv6V9Ma3isk=
Subject key identifier: 45:3A:37:B3:A3:DB:7B:96:E5:ED:0B:F0:16:BD:F0:37:A9:0E:B8:96
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584925B3B91A986DCF88EF1B7880
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f6aa529a-14d2-3756-8aaf-0775379d704a.roa
Signing time: Tue 11 Mar 2025 01:00:40 +0000
ROA not before: Tue 11 Mar 2025 01:00:40 +0000
ROA not after: Mon 09 Jun 2025 01:00:40 +0000
asID: 399165
IP address blocks: 2610:a1:3300::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:25:b3:b9:1a:98:6d:cf:88:ef:1b:78:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 11 01:00:40 2025 GMT
Not After : Jun 9 01:00:40 2025 GMT
Subject: CN=a4e37655-dde3-4c5a-bc62-e1da18afdf5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a9:68:93:a2:e3:0d:d1:b5:a2:2d:72:d9:1c:
cc:0a:11:89:ff:8f:a7:51:76:d5:48:96:43:69:3a:
bb:92:a1:ad:52:79:45:e5:58:0c:07:5d:72:05:b5:
c7:5a:94:fe:ad:3d:ee:a6:9d:2d:81:93:6a:e7:ba:
ec:54:37:e2:a7:21:2e:a6:af:ef:3b:2a:80:fc:12:
85:14:ee:53:88:ea:25:a6:f0:77:b7:91:bf:23:30:
7a:f3:19:f8:c8:be:46:ad:52:95:53:4d:25:05:3f:
d1:cb:52:e0:ce:b8:f0:aa:8e:4a:eb:ef:64:b7:61:
d2:d5:64:05:02:95:0d:52:8e:3c:f5:c2:95:d7:c9:
71:54:2b:42:fa:b4:21:44:a6:47:65:8a:01:17:9f:
a2:16:64:30:d0:38:d2:06:90:49:28:30:23:60:25:
af:0e:9e:ed:32:ab:67:d7:cc:f8:dc:bc:df:c1:cd:
8a:9e:00:b4:28:d1:ad:5c:5d:89:1d:57:b7:9f:5f:
28:7a:46:1f:0a:e3:08:c3:06:9c:2b:05:eb:50:c3:
86:39:b1:0b:d7:a3:ed:85:59:79:50:22:f3:d9:3f:
38:bc:b6:b4:4e:f2:96:5b:32:5c:4c:4a:e8:73:5e:
85:c7:f8:f2:e8:26:aa:db:90:26:19:1d:35:01:7a:
4c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:3A:37:B3:A3:DB:7B:96:E5:ED:0B:F0:16:BD:F0:37:A9:0E:B8:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f6aa529a-14d2-3756-8aaf-0775379d704a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv6:
2610:a1:3300::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:ed:f7:2c:f2:42:ed:9d:c5:b0:24:60:26:91:04:c5:8d:97:
cf:7d:40:0d:ea:26:56:87:18:ca:73:2c:c3:26:00:e6:22:77:
54:d7:e7:45:26:8f:2b:9f:7d:f4:48:47:26:a3:8c:0e:49:46:
e3:a8:87:16:e0:c1:a1:4e:c3:e2:23:50:a8:14:e9:8f:00:91:
25:84:15:d6:11:26:59:bc:10:e9:a4:a9:9e:76:fd:99:e3:a9:
26:ee:5c:ef:26:d5:33:61:47:7a:ff:bb:bb:7f:67:10:8c:78:
9a:a6:66:84:8b:8e:1f:f6:32:45:6f:c8:5d:94:e4:c1:d7:b8:
c0:4b:5f:e4:48:4e:d7:5b:7b:05:a7:f0:8f:69:c0:c7:13:1c:
77:5b:8e:ab:02:e9:d1:e9:54:9d:e3:1e:8b:ef:0c:bf:c8:4b:
52:5e:b8:ef:74:fb:3d:f3:e4:0b:df:34:98:f6:f9:45:e2:88:
ba:84:d2:43:0e:7b:b1:fa:d1:6f:3f:0a:4d:9a:d2:78:6f:b4:
bc:32:07:d3:ad:80:9c:e5:09:c4:30:41:aa:da:1d:97:82:71:
aa:8d:c4:b7:af:28:c2:ef:9c:7b:7c:a4:c0:3a:4b:8c:96:8d:
52:90:3f:96:ad:53:f9:02:5a:3d:87:45:2a:00:05:74:41:29:
56:71:52:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 00:46:16 2025 by rpki-client