Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/f795707f-42b9-3e1c-9651-5bb7df87b841.roa
File: f795707f-42b9-3e1c-9651-5bb7df87b841.roa (raw, json)
Hash identifier: eBRh1bPpSo/aGPEPjIhJZ4vWJ/OBeMKYcg8mhYblQnk=
Subject key identifier: AD:28:46:83:EB:CB:F0:4F:C7:CD:4F:F9:42:B1:06:42:AA:86:0E:24
Certificate issuer: /CN=e601b694-6242-4b1c-a841-d0a7214cd9c7
Certificate serial: 010D0C9F43285848F65BE37F1DEC79A578C56500
Authority key identifier: 96:7A:A6:3B:2E:D3:AA:65:44:0B:7E:8B:F5:4B:BA:F1:ED:95:50:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/f795707f-42b9-3e1c-9651-5bb7df87b841.roa
Signing time: Sat 22 Feb 2025 02:00:38 +0000
ROA not before: Sat 22 Feb 2025 02:00:38 +0000
ROA not after: Fri 23 May 2025 01:00:38 +0000
asID: 32982
IP address blocks: 2607:f368:804::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f6:5b:e3:7f:1d:ec:79:a5:78:c5:65:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e601b694-6242-4b1c-a841-d0a7214cd9c7
Validity
Not Before: Feb 22 02:00:38 2025 GMT
Not After : May 23 01:00:38 2025 GMT
Subject: CN=0c9515ee-39af-405c-826b-657f9ed2832e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:48:99:d4:75:d9:61:36:2e:05:82:cf:ed:b9:
68:a2:16:33:ec:96:a0:04:0f:31:82:cb:f7:e5:e2:
65:7d:d7:9a:54:60:fd:16:fb:75:1f:60:ff:37:ae:
6e:5f:ac:35:dc:b2:60:dd:b8:b3:e0:ef:07:2f:c3:
94:f1:b0:d3:0f:54:af:4b:1b:50:a2:5b:89:45:bb:
d1:08:b2:60:98:02:77:38:48:f9:01:e4:96:57:5a:
22:a9:c1:cf:db:bd:77:f3:82:14:c2:27:fe:4b:4f:
d6:4c:2a:8a:b1:bc:85:a2:01:7a:59:98:54:af:bc:
1a:8f:31:ff:de:84:eb:60:77:21:0f:72:19:c8:10:
56:a6:e9:b4:10:dc:c6:57:90:13:fa:e8:0c:51:d3:
0e:05:a2:d7:3b:a8:69:9c:98:e7:a8:05:c6:60:50:
66:a8:ac:0d:e0:8c:4a:f1:15:c4:09:a6:85:8e:a8:
00:e4:f6:f8:0e:d5:26:0a:f1:29:69:15:44:22:e0:
3f:e9:67:46:8c:89:6a:70:2b:e3:c7:c7:f1:1c:b4:
54:7f:8a:03:1f:b3:d8:c0:7a:32:1e:5d:0a:90:91:
e1:bc:e5:fa:11:c6:7c:a2:a5:19:b4:ea:55:4b:bc:
e6:d8:b2:e2:27:72:0a:31:0e:16:52:b7:b7:ac:32:
b8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:28:46:83:EB:CB:F0:4F:C7:CD:4F:F9:42:B1:06:42:AA:86:0E:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/f795707f-42b9-3e1c-9651-5bb7df87b841.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.crl
X509v3 Authority Key Identifier:
keyid:96:7A:A6:3B:2E:D3:AA:65:44:0B:7E:8B:F5:4B:BA:F1:ED:95:50:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:f368:804::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:69:45:b0:8c:ed:28:2e:d3:eb:9c:bd:14:f7:ad:05:52:bf:
c6:fc:fd:21:a0:7d:6d:b3:57:a3:de:80:2e:f9:e5:ef:f1:9d:
9c:90:06:a1:43:a3:3d:86:19:62:38:43:7e:9c:3c:5b:d7:37:
83:4f:b2:60:04:30:80:db:26:29:03:39:a0:29:fa:83:96:cb:
95:1c:d4:dc:cb:3c:18:6a:4d:86:01:cc:c9:29:0d:3c:70:fe:
00:aa:8a:ee:7c:4f:3b:1b:4d:02:9f:d6:3a:9a:d9:26:95:b8:
8f:93:4d:94:57:92:c7:3b:38:aa:12:60:23:9f:7e:50:d1:f4:
b5:41:3a:57:e6:99:40:4c:df:c9:8e:9b:67:07:fc:7d:bc:5f:
14:7a:4e:6e:d9:2f:a5:d5:93:44:50:43:b2:38:75:d5:e7:91:
1a:3e:97:33:49:d0:e4:e3:3f:df:2b:56:14:3f:99:3a:78:b7:
f9:f9:2a:a9:a3:21:3f:42:94:f8:ab:72:2e:87:f6:96:6e:10:
2f:0b:4b:fd:89:62:79:c2:56:42:0e:bb:b3:00:2c:82:c0:69:
c4:57:db:0d:86:b3:1c:a4:f5:00:dd:98:cd:85:df:63:93:7a:
52:06:4b:9b:b3:2f:c9:1e:83:de:38:57:04:68:f7:08:07:1b:
e3:9c:05:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:13:40 2025 by rpki-client