Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3069465a-e602-3259-b7bd-52da384940cc.roa
File: 3069465a-e602-3259-b7bd-52da384940cc.roa (raw, json)
Hash identifier: vKMLwGJY7gBryA7n0ov7oDBq3IblbKTEUlJKRvtxj9k=
Subject key identifier: D6:D9:68:5C:B8:79:F8:72:99:7A:2D:7E:14:B1:89:87:2D:A6:ED:BA
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C265ABE9A7A1684D1421FD00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3069465a-e602-3259-b7bd-52da384940cc.roa
Signing time: Mon 03 Feb 2025 11:18:34 +0000
ROA not before: Mon 03 Feb 2025 11:18:34 +0000
ROA not after: Sun 04 May 2025 10:18:34 +0000
asID: 30036
IP address blocks: 2604:2d80:a580::/41 maxlen: 41
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Apr 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c2:65:ab:e9:a7:a1:68:4d:14:21:fd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 3 11:18:34 2025 GMT
Not After : May 4 10:18:34 2025 GMT
Subject: CN=2ae334ef-5842-4c78-b625-664fe6f8939b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:3c:6d:7a:31:65:83:82:55:92:06:ff:f0:4b:
1d:ea:7a:9a:63:6b:5e:41:24:80:77:e3:d0:28:d2:
d8:5a:ce:4e:e8:0e:18:65:a9:bb:74:f9:c3:c7:35:
ce:96:e8:16:81:0f:69:c3:e1:29:27:51:ea:2c:21:
21:ba:1e:6a:b3:0d:dd:6c:1b:f1:20:ca:19:85:b0:
fa:33:6c:91:63:e2:59:6a:de:ae:f9:a5:9d:64:73:
2c:c3:94:f3:07:7c:4b:4a:c8:69:bb:72:56:63:19:
e1:28:ee:76:b7:d0:de:71:91:78:00:7c:76:4b:d8:
4a:10:2b:1f:26:31:b5:30:17:3a:7c:e8:5c:f4:3f:
51:9e:7c:05:1e:f2:a5:99:fb:7f:22:2c:12:6b:32:
03:b6:e1:b7:fa:1c:3f:bc:a9:48:8f:a9:1e:f9:6b:
5d:b8:70:e5:1c:4c:97:4a:eb:31:c5:b1:3f:a6:a7:
70:f2:15:f2:16:3d:a3:5d:c5:98:43:ed:14:f0:5a:
87:17:48:5c:91:92:f4:1c:10:cc:e4:24:bd:ca:00:
7d:5e:cd:55:56:aa:64:78:3c:eb:a8:5c:ff:57:bc:
9c:12:26:bb:f4:e4:1d:04:70:8a:6e:82:34:51:22:
21:be:fc:1d:bf:77:90:ca:bf:70:b2:37:1c:96:05:
3c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D9:68:5C:B8:79:F8:72:99:7A:2D:7E:14:B1:89:87:2D:A6:ED:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3069465a-e602-3259-b7bd-52da384940cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d80:a580::/41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:60:14:45:ea:cf:3a:79:a5:a5:87:a3:34:16:eb:01:cc:27:
96:a0:d2:ef:24:49:47:b2:d1:11:d5:b7:b0:6b:51:f8:15:5d:
03:ab:a1:88:44:4f:dc:8b:ed:99:dd:07:e8:17:f2:b8:c1:4d:
c9:cb:d0:b9:de:5b:fb:aa:1e:41:ab:89:31:57:f5:53:f7:08:
8f:d8:35:68:48:37:c7:b9:d8:b3:2e:36:8a:65:df:65:10:ff:
56:eb:38:f8:6f:5f:b6:94:3e:e9:97:d8:29:75:0c:62:28:50:
fc:b8:75:fb:ca:de:f2:e3:ef:fe:90:63:25:7b:fb:01:e3:5d:
a0:be:8a:86:6c:9e:7f:c5:17:d8:c7:39:5e:c3:72:f8:f3:87:
51:cb:dd:63:ab:16:7c:cd:03:65:ee:c1:b8:4b:fc:09:dc:19:
14:66:cf:b6:1c:ff:82:26:ce:35:de:4b:f9:1c:49:b9:3e:8f:
da:f4:49:63:3d:17:45:cc:3a:79:1b:22:37:5a:a3:5f:2e:62:
fa:e0:1a:d5:47:bd:03:43:58:e9:31:66:07:84:74:76:12:d6:
f8:ee:e9:5d:32:a6:60:29:27:40:20:57:a0:a1:d5:9a:08:b6:
8a:7c:67:65:d4:00:52:fe:d1:d4:59:2a:fd:83:62:ea:35:c2:
c4:09:af:93
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjCZavpp6FoTRQh/QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDIwMzExMTgzNFoXDTI1MDUwNDEwMTgzNFowLzEtMCsGA1UEAxMk
MmFlMzM0ZWYtNTg0Mi00Yzc4LWI2MjUtNjY0ZmU2Zjg5MzliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTxtejFlg4JVkgb/8Esd6nqaY2teQSSAd+PQ
KNLYWs5O6A4YZam7dPnDxzXOlugWgQ9pw+EpJ1HqLCEhuh5qsw3dbBvxIMoZhbD6
M2yRY+JZat6u+aWdZHMsw5TzB3xLSshpu3JWYxnhKO52t9DecZF4AHx2S9hKECsf
JjG1MBc6fOhc9D9RnnwFHvKlmft/IiwSazIDtuG3+hw/vKlIj6ke+WtduHDlHEyX
SusxxbE/pqdw8hXyFj2jXcWYQ+0U8FqHF0hckZL0HBDM5CS9ygB9Xs1VVqpkeDzr
qFz/V7ycEia79OQdBHCKboI0USIhvvwdv3eQyr9wsjcclgU8PQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNbZaFy4efhymXotfhSxiYctpu26MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzA2OTQ2NWEtZTYwMi0z
MjU5LWI3YmQtNTJkYTM4NDk0MGNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgKWA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHpgFEXqzzp5paWHozQW6wHMJ5ag0u8kSUey0RHVt7BrUfgVXQOr
oYhET9yL7ZndB+gX8rjBTcnL0LneW/uqHkGriTFX9VP3CI/YNWhIN8e52LMuNopl
32UQ/1brOPhvX7aUPumX2Cl1DGIoUPy4dfvK3vLj7/6QYyV7+wHjXaC+ioZsnn/F
F9jHOV7Dcvjzh1HL3WOrFnzNA2XuwbhL/AncGRRmz7Yc/4ImzjXeS/kcSbk+j9r0
SWM9F0XMOnkbIjdao18uYvrgGtVHvQNDWOkxZgeEdHYS1vju6V0ypmApJ0AgV6Ch
1ZoItop8Z2XUAFL+0dRZKv2DYuo1wsQJr5M=
-----END CERTIFICATE-----
Generated at Thu Apr 10 06:41:15 2025 by rpki-client