Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6cd20d3e-49ee-3db3-9c49-7b5a001acf26.roa
File: 6cd20d3e-49ee-3db3-9c49-7b5a001acf26.roa (raw, json)
Hash identifier: qXe2oPqVYAUKArvU+CKSmEZQj6zq+uc/MDuoCp9L17w=
Subject key identifier: 08:14:8A:05:9C:3A:26:2B:A7:93:59:27:49:43:AD:CC:FD:CA:7E:A9
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285849107D6C26ADCE294B98B3C0C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6cd20d3e-49ee-3db3-9c49-7b5a001acf26.roa
Signing time: Mon 03 Mar 2025 10:39:28 +0000
ROA not before: Mon 03 Mar 2025 10:39:28 +0000
ROA not after: Sun 01 Jun 2025 09:39:28 +0000
asID: 30036
IP address blocks: 2604:2d80:3680::/41 maxlen: 41
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:10:7d:6c:26:ad:ce:29:4b:98:b3:c0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Mar 3 10:39:28 2025 GMT
Not After : Jun 1 09:39:28 2025 GMT
Subject: CN=d784cba2-410e-4671-a632-8bcdb394a1d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c5:9c:1f:3c:50:9c:73:8e:e3:83:8d:f2:e6:
62:59:4e:49:a3:72:88:ef:45:04:2a:a6:26:60:60:
df:8c:cf:f9:81:70:8b:7d:f4:32:4f:48:1c:bf:35:
a3:ce:06:9a:5f:62:78:2e:9f:98:88:c1:4f:0f:26:
cc:04:06:4c:04:fc:7a:03:19:c1:73:de:e5:a5:ec:
49:19:05:e0:ba:7e:9b:e9:0f:3d:f7:cb:d3:25:6d:
3d:66:51:0e:6b:52:e7:3b:7c:d4:64:21:9b:91:7f:
61:6b:ea:4b:b8:a9:ca:b0:e9:7a:83:31:e2:9d:b0:
db:4f:a8:9f:98:0c:6c:62:23:48:17:59:35:4e:33:
d8:cb:04:37:e3:5d:d9:04:40:d8:a5:8d:1a:09:b6:
86:fd:1a:9e:71:84:d0:b7:fc:a0:0d:6e:ba:86:c8:
b8:82:aa:d8:63:69:ed:e4:59:d0:98:a7:e7:6c:2e:
b3:c2:b7:15:7d:c5:c7:34:48:c9:66:75:ec:43:8b:
5b:3b:f4:06:70:b6:7f:54:98:76:7d:8a:63:d9:76:
4d:52:11:3f:b2:2d:63:c7:e7:ab:f5:89:dc:b3:0b:
f4:48:80:25:a0:e5:54:4d:af:5d:f3:ff:2d:55:6c:
b3:ba:31:a9:42:a4:cf:58:a5:33:da:18:0c:75:95:
03:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:14:8A:05:9C:3A:26:2B:A7:93:59:27:49:43:AD:CC:FD:CA:7E:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6cd20d3e-49ee-3db3-9c49-7b5a001acf26.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d80:3680::/41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:34:cd:c2:31:ab:50:52:50:c7:c1:f9:81:8e:ff:b4:15:f4:
e8:28:25:5b:8b:8c:5b:33:23:a1:7f:83:0b:65:e7:e7:30:5e:
20:7c:61:43:1c:d1:f2:c3:bc:74:87:6b:f7:31:00:0e:60:ad:
8e:af:e0:08:57:3e:46:2a:f6:be:11:2f:ab:f3:0e:a1:12:30:
42:54:5e:70:5b:82:15:e5:6f:c4:a2:1d:e1:a9:65:eb:a0:44:
f8:11:7f:44:a4:c6:e6:75:c9:06:20:15:0a:74:c0:1c:17:3f:
78:5b:1e:54:85:96:37:35:77:12:cc:fb:77:fd:84:3a:36:5d:
b2:63:3d:a2:cf:fa:ff:57:23:16:37:97:bf:a5:63:1c:53:e6:
c8:f7:89:79:37:2b:af:40:c8:cf:d4:d2:2f:19:e0:a7:20:35:
53:2f:47:7c:72:1a:65:ca:14:18:20:1e:3f:b5:5b:d3:6e:47:
67:25:4b:c5:b0:4f:74:7e:27:7b:29:bd:ec:fc:79:48:cc:f5:
b8:ec:f4:f3:ed:ed:74:98:f7:69:92:be:bc:cb:15:e5:09:30:
9c:dc:26:9c:cb:a4:e0:17:dc:2e:9b:51:5a:da:a9:cf:2d:14:
ca:31:72:c9:4b:64:b6:42:2f:7f:53:ec:96:1a:7f:55:3f:af:
16:7e:f9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 19:06:36 2025 by rpki-client