Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/10ddcfe6-5262-3152-92cc-747b7a277438.roa
File: 10ddcfe6-5262-3152-92cc-747b7a277438.roa (raw, json)
Hash identifier: EqwAXOj/XtmnkLMY0KB3gkAUcrEx5cCBV4iavMspGW8=
Subject key identifier: 8A:2D:E2:DC:44:0F:65:BC:D0:35:53:4C:8C:EC:A0:07:E0:46:C1:AE
Certificate issuer: /CN=4eab7524-ab79-46c8-aea6-96b100eb245d
Certificate serial: 010D0C9F432858491ED6E8144FD47D87F23D84C0
Authority key identifier: 02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/10ddcfe6-5262-3152-92cc-747b7a277438.roa
Signing time: Sat 08 Mar 2025 14:00:52 +0000
ROA not before: Sat 08 Mar 2025 14:00:52 +0000
ROA not after: Fri 06 Jun 2025 13:00:52 +0000
asID: 400097
IP address blocks: 2606:3d40:4f00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 17 Apr 2025 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1e:d6:e8:14:4f:d4:7d:87:f2:3d:84:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eab7524-ab79-46c8-aea6-96b100eb245d
Validity
Not Before: Mar 8 14:00:52 2025 GMT
Not After : Jun 6 13:00:52 2025 GMT
Subject: CN=2c74a6fb-efa6-4e28-b351-76e2a85a111d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:26:80:ec:06:b2:96:a6:63:b2:66:9a:7f:c9:
6f:9c:15:0a:a8:23:79:98:7a:8e:2a:3a:17:60:84:
12:38:e9:69:13:95:33:e2:ab:79:b4:8c:e6:3a:77:
b5:60:92:69:ca:9d:1f:11:95:09:bf:d3:d9:c0:1b:
dc:10:72:eb:b4:e6:84:00:24:1d:a7:7d:b5:ad:c5:
7a:45:cf:38:85:d4:84:06:0b:ef:9d:7b:4e:ee:a1:
b9:8e:55:a9:03:82:08:60:21:f2:29:ef:0d:b6:67:
c3:ac:17:39:e6:66:06:51:e2:72:1b:2c:84:0d:9b:
de:68:f5:39:e3:a2:7b:d7:91:cd:03:b7:25:27:ae:
b3:ca:02:1a:20:a6:16:1b:14:a0:99:2e:43:44:94:
3b:a9:4e:08:1a:5c:3a:a9:d7:44:48:6e:87:5f:22:
cb:e6:79:09:b8:4f:80:cc:49:82:db:d8:9b:a6:f6:
7f:6c:92:56:10:c7:d4:cc:db:3f:2c:dd:5a:99:24:
fb:b9:09:08:c5:68:5c:7b:39:53:64:1b:16:bd:3a:
ea:11:d1:ea:33:67:e6:ec:a8:27:2b:dc:0e:a8:18:
ff:bb:f0:fe:98:70:94:36:8b:49:92:fa:f1:91:7f:
b2:b0:97:9b:bc:33:99:d3:de:3f:c7:36:45:62:f7:
d9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:2D:E2:DC:44:0F:65:BC:D0:35:53:4C:8C:EC:A0:07:E0:46:C1:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/10ddcfe6-5262-3152-92cc-747b7a277438.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl
X509v3 Authority Key Identifier:
keyid:02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:3d40:4f00::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:88:77:26:32:4d:f0:ef:68:b9:68:a2:e0:c3:41:e6:fd:b8:
11:fe:f6:fa:8c:ea:fb:bd:06:e1:fa:52:70:e1:25:47:6f:09:
57:1d:3c:0d:f7:72:e1:a9:b5:91:e9:0a:d8:ef:52:55:2a:9b:
a3:e0:9a:90:de:3c:b7:00:ee:d5:12:1d:7e:8d:c2:e8:ac:0e:
02:5d:fd:b9:14:13:26:3f:02:fc:42:c6:3f:91:92:99:93:2e:
a0:d4:8b:46:73:7f:78:2e:04:34:e6:27:52:48:19:bb:b9:fa:
66:66:84:01:b3:33:69:f3:fb:71:ab:04:cc:dd:b9:e9:ac:10:
51:19:3b:11:6a:f7:3e:69:dc:bd:4d:db:f7:2f:95:3f:cb:e7:
69:b2:a2:83:c7:fb:71:0a:fd:39:b6:e7:77:f6:b2:57:ea:a5:
11:4c:2e:79:a5:59:76:da:ef:f1:40:05:e6:2d:58:23:be:fa:
17:76:4f:fb:80:35:4f:9c:df:45:c1:f4:2c:65:e1:05:ae:f7:
89:64:93:2e:24:0a:98:64:ea:ee:f1:43:7f:0b:66:e3:22:4d:
8a:2d:6f:9b:b2:b6:a3:20:85:20:ad:7f:ab:4d:3e:49:a8:a5:
e0:23:e5:99:23:42:39:7b:7b:2d:3e:a6:c2:7f:c7:87:4c:8a:
56:02:bb:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 20:46:57 2025 by rpki-client