Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1d64cf61-d200-3b3e-ba44-79a3efacdf80.roa
File: 1d64cf61-d200-3b3e-ba44-79a3efacdf80.roa (raw, json)
Hash identifier: dxJk25RA00IJC4DAZ2q6MbBOhGJaMZukZ5rEPmeM7N8=
Subject key identifier: A4:EE:B2:C9:CA:EA:45:62:10:30:86:4B:F0:34:C3:DE:8C:49:F9:5D
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848ADC626498E8B97C41A4BD300
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1d64cf61-d200-3b3e-ba44-79a3efacdf80.roa
Signing time: Mon 27 Jan 2025 02:00:39 +0000
ROA not before: Mon 27 Jan 2025 02:00:39 +0000
ROA not after: Sun 27 Apr 2025 01:00:39 +0000
asID: 9498
IP address blocks: 2600:140f:2400::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ad:c6:26:49:8e:8b:97:c4:1a:4b:d3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 27 02:00:39 2025 GMT
Not After : Apr 27 01:00:39 2025 GMT
Subject: CN=3e135c30-2bbf-4257-ac95-0333653b6457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:59:b8:1d:aa:a1:e2:32:6e:a9:29:66:83:30:
75:0a:8d:62:ed:dc:4c:80:86:e6:b2:b1:c7:c2:51:
bb:93:50:d0:d7:bd:a4:ed:91:75:96:75:04:b8:a5:
15:35:2c:a7:cb:0f:0f:03:02:c3:33:25:9d:c0:56:
ff:72:ba:27:67:0c:f4:67:44:2b:f0:41:58:a8:4e:
6f:97:fc:b3:fa:b0:3c:84:d6:d4:68:df:b1:88:88:
84:b0:0e:83:b1:1f:44:f9:0d:39:a8:d8:d5:3c:0e:
43:a4:47:46:f7:be:cd:41:f0:9c:c9:fa:3c:b3:37:
5e:22:ed:4d:bd:36:4a:b9:bc:46:a2:ef:59:77:54:
51:6d:56:c8:21:1b:43:46:a4:7a:ba:c1:54:0d:ca:
1b:59:7b:6b:71:08:55:9d:b5:52:c0:8a:ac:30:02:
ab:7e:8c:49:05:db:bd:5d:2c:ac:d6:1f:93:e7:e1:
ad:b3:0d:d2:90:4b:08:d9:3e:79:cd:e6:ef:28:e9:
d7:3b:2a:de:74:90:98:98:8b:c1:e4:fa:42:52:5b:
e6:16:13:00:ae:e0:33:02:85:ef:ca:19:a4:f6:e9:
25:e4:dc:e3:06:a3:b3:15:b9:d3:11:10:d9:7d:7f:
f3:6d:42:70:11:f4:b3:40:45:cd:90:c4:19:e9:4c:
b1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:EE:B2:C9:CA:EA:45:62:10:30:86:4B:F0:34:C3:DE:8C:49:F9:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1d64cf61-d200-3b3e-ba44-79a3efacdf80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:140f:2400::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:01:99:91:d6:9f:ef:46:2d:71:09:76:0d:30:6d:90:b9:3e:
ec:de:f0:e8:15:04:e6:1e:64:3b:b9:26:4d:53:31:b9:42:db:
d8:0a:61:29:4e:95:8a:ab:92:a3:df:52:8a:24:e0:b2:e3:05:
b7:0a:b0:6e:42:be:48:cb:f3:4d:8e:8c:17:85:52:53:b0:da:
7b:f1:a5:7d:f5:64:ee:54:ba:a7:5e:db:09:bb:e0:ec:62:b9:
78:3a:86:3c:d8:61:b4:94:24:ab:ee:7a:b7:e2:48:52:3c:7c:
b5:ec:77:93:ca:0b:fd:f3:b1:d1:c4:00:c0:b7:04:0d:01:d5:
25:19:00:c7:7e:a4:3d:e2:2f:60:57:1b:7e:8b:8f:d7:56:25:
a5:10:6e:bd:c8:b7:78:cd:50:b4:73:42:07:3f:b7:46:b2:21:
39:9c:b6:68:78:3e:e3:6f:fe:0d:0c:fc:ae:df:6d:54:4b:1d:
b1:d5:4a:dd:36:14:76:f6:f5:07:44:fb:a9:35:5a:cc:9e:2f:
e7:8c:35:df:89:97:19:c9:4f:26:ad:50:7b:5a:19:ab:2f:17:
a2:b8:b0:6c:50:1c:dc:b7:4f:0f:3f:33:55:62:b6:f0:f7:f0:
93:b0:c5:05:6f:12:f1:96:c4:f0:8a:ee:cf:c8:44:4b:4c:88:
6c:00:5a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:28:37 2025 by rpki-client