Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9162148b-3b22-37b0-9d11-8978d0f887bb.roa
File: 9162148b-3b22-37b0-9d11-8978d0f887bb.roa (raw, json)
Hash identifier: aX/zrdH82MAljgQEBD1CjJXgg/AT1wM+J+9QYgon0Cw=
Subject key identifier: 6B:0A:91:64:06:BF:24:38:1D:35:0E:04:B6:F4:9D:A6:3A:66:FF:81
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C265EA1391E1D00277BF59C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9162148b-3b22-37b0-9d11-8978d0f887bb.roa
Signing time: Mon 03 Feb 2025 11:19:03 +0000
ROA not before: Mon 03 Feb 2025 11:19:03 +0000
ROA not after: Sun 04 May 2025 10:19:03 +0000
asID: 30036
IP address blocks: 2604:2d80:e600::/41 maxlen: 41
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 07:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c2:65:ea:13:91:e1:d0:02:77:bf:59:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 3 11:19:03 2025 GMT
Not After : May 4 10:19:03 2025 GMT
Subject: CN=f467c8f4-1576-4258-9bb1-b5efe219ea4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:59:a0:24:1e:95:8e:de:9c:4a:f1:25:ff:9d:
ec:74:08:fe:25:f3:21:c8:9b:39:dc:1a:71:9c:73:
1d:eb:72:8a:69:a6:5d:77:ba:34:de:11:d6:c5:39:
94:76:09:78:d8:40:89:88:56:0b:51:f9:bb:67:b6:
f9:29:01:e7:2c:a9:36:a1:19:07:3d:9f:11:47:78:
35:95:7c:14:bc:9e:3a:99:a2:7f:76:55:91:2c:e0:
54:8c:6e:22:71:60:2b:76:5b:fe:30:58:dc:2f:42:
c7:65:a1:21:9b:5d:4c:08:d4:8b:aa:bf:14:1b:9f:
4f:c1:22:53:96:d8:73:83:e7:ad:9f:74:2e:3c:c3:
fa:71:c9:99:ac:c6:fe:b6:fb:30:39:fa:a4:5a:1e:
9d:6a:60:4e:7c:b9:2e:80:9f:de:6a:4b:8d:c0:c3:
aa:67:7e:92:f2:b3:db:f2:23:08:84:e8:19:b1:e4:
3e:27:f7:90:c5:cb:90:bc:24:26:13:c3:15:43:9c:
72:fc:07:1c:4c:f6:15:03:bc:9b:86:a2:eb:55:c3:
9b:bb:62:2d:d7:91:bc:78:30:4e:9c:37:0b:5e:15:
d0:9f:69:48:98:84:45:4f:64:06:1f:24:c2:70:2e:
21:1f:fe:bf:68:63:32:54:4f:a1:28:89:a5:9b:74:
7b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:0A:91:64:06:BF:24:38:1D:35:0E:04:B6:F4:9D:A6:3A:66:FF:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9162148b-3b22-37b0-9d11-8978d0f887bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d80:e600::/41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:89:57:64:51:55:29:3e:a3:d2:11:7c:88:ae:60:94:2c:3b:
b4:4e:dc:01:a2:d9:10:09:75:fa:d5:1a:ee:cc:38:4a:87:05:
53:af:8e:69:7a:3d:55:8d:a6:43:d0:bb:7d:07:2a:20:ce:8c:
91:5f:f2:96:1c:65:19:53:3e:d9:5f:35:85:76:ef:f6:d7:b9:
44:5c:03:fc:e1:ca:36:8a:d1:92:0d:cb:f7:d6:3c:e1:ab:cb:
9f:37:7a:96:22:2f:67:8d:d5:d4:fb:39:2c:e4:c5:3f:a2:1a:
97:57:35:49:9e:a4:c3:03:10:a9:e0:68:a4:4c:5c:6d:04:3c:
c2:05:ad:49:72:ac:30:db:d4:2f:c9:61:90:ac:24:55:5a:02:
df:b4:30:aa:54:39:48:a7:21:8a:26:fa:bd:35:6b:8d:4c:f5:
51:9a:41:49:98:bf:47:b2:fa:ef:79:26:e6:68:2f:e8:81:25:
c9:71:cf:b2:69:4b:69:a9:53:96:1a:a7:f0:71:9c:ac:0b:1e:
a6:5d:77:c8:55:57:a1:57:41:77:41:2a:26:fb:14:ad:b9:16:
cf:6a:8d:e7:cf:6d:71:1b:06:e8:f4:17:5e:f7:cd:a8:dc:40:
b2:83:78:42:d5:00:88:f9:08:3d:5d:60:06:23:d1:9b:8e:45:
25:7e:b0:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:26:04 2025 by rpki-client