Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/323630363a623934303a3a2f33322d3438203d3e203631313338.roa
File: 323630363a623934303a3a2f33322d3438203d3e203631313338.roa (raw, json)
Hash identifier: hxTM8XAmgwLLMCTFF62/cH9ibw1YDzD27HxffLGy6oU=
Subject key identifier: 44:DC:5B:D2:1C:5C:D6:27:37:1A:9D:E9:E2:48:E9:83:FD:84:E2:B0
Certificate issuer: /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial: 0D736D216AFF5BF0964338987632C25058BE6FCE
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/323630363a623934303a3a2f33322d3438203d3e203631313338.roa
Signing time: Tue 11 Mar 2025 02:40:18 +0000
ROA not before: Tue 11 Mar 2025 02:35:18 +0000
ROA not after: Tue 10 Mar 2026 02:40:18 +0000
asID: 61138
IP address blocks: 2606:b940::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 00:35:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:73:6d:21:6a:ff:5b:f0:96:43:38:98:76:32:c2:50:58:be:6f:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Validity
Not Before: Mar 11 02:35:18 2025 GMT
Not After : Mar 10 02:40:18 2026 GMT
Subject: CN=44DC5BD21C5CD627371A9DE9E248E983FD84E2B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2f:34:20:5a:50:45:ba:86:2d:1b:43:bd:76:
c5:8d:aa:f8:e4:bb:d6:2d:f8:93:4e:3e:68:f1:6c:
cc:80:7f:a5:b2:c4:ce:43:79:cd:be:39:8a:7e:0c:
6b:2b:2b:db:e2:a0:9e:c1:62:f4:b3:a1:17:51:e3:
b0:37:3e:48:c1:81:65:df:f9:71:37:f9:e9:7b:8e:
9e:4d:a1:8c:42:35:d6:a2:f0:a5:d2:6c:2c:11:e7:
8a:14:86:37:2c:e2:16:50:44:f7:4a:65:8c:a6:e3:
d8:9c:75:c6:0d:a0:1c:9f:7f:79:75:84:ed:8d:e1:
70:87:a6:8b:ed:90:da:a2:f5:fb:6b:e0:79:99:d2:
d2:56:07:39:fe:23:cf:54:21:4c:b3:a2:db:17:0c:
fc:de:bd:fb:47:8a:52:04:e7:cc:e2:16:4e:be:2b:
ac:c0:16:ee:f9:61:52:6a:d1:86:92:50:14:9c:11:
56:da:c7:36:3e:99:ed:56:26:cc:4b:1c:b3:7e:f3:
c0:f1:b5:34:d9:e2:d2:de:7b:6e:8f:80:f4:35:73:
e7:dc:3b:a3:f5:a5:57:16:fd:50:5a:61:8f:fc:60:
80:ac:b8:f7:a3:c8:04:4f:a8:14:d2:6b:83:a9:73:
19:58:c9:c1:85:c9:3a:68:11:a4:ef:cb:b9:4b:a2:
1e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:DC:5B:D2:1C:5C:D6:27:37:1A:9D:E9:E2:48:E9:83:FD:84:E2:B0
X509v3 Authority Key Identifier:
keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/323630363a623934303a3a2f33322d3438203d3e203631313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2606:b940::/32
Signature Algorithm: sha256WithRSAEncryption
a0:7f:7e:79:52:f3:2f:69:d2:cc:90:89:fa:93:db:af:80:6b:
21:c9:11:8a:a6:be:93:80:1f:47:39:f4:ab:46:de:4b:68:88:
1e:76:94:78:1a:b8:bc:18:52:7f:af:95:53:d4:87:60:9d:84:
2d:ad:36:15:5e:23:a9:2f:b8:4c:93:19:4e:bc:1a:4a:52:98:
db:d9:a7:25:2b:4d:0e:b7:ff:4f:8a:63:96:54:bb:1c:60:3e:
8b:f8:92:52:a2:e7:6f:f3:ab:28:83:15:6b:60:10:5e:99:65:
ec:78:42:a9:6f:db:96:73:bd:86:3a:4d:02:20:43:55:44:f0:
81:c6:cf:3e:ef:c3:1f:06:a1:76:61:63:8c:db:d2:64:0e:ae:
2b:bc:08:c1:c7:29:ca:a5:ed:07:8e:b6:03:6d:2c:6a:14:a4:
8f:d8:87:e7:fa:bd:7a:ef:1e:c2:55:1b:4e:c2:d5:5e:4a:f5:
88:c2:98:77:26:42:d7:a1:e9:f3:23:67:65:f6:6f:47:48:25:
d5:4c:13:e5:ba:e2:57:8a:d0:89:86:19:71:79:b3:00:3c:e7:
f1:b7:00:ab:84:15:05:e8:61:69:19:2d:07:dd:86:31:f9:f8:
51:24:f2:64:23:38:dd:9b:74:ed:43:e0:44:29:7e:15:3f:fb:
b9:f6:66:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 08:27:40 2025 by rpki-client