Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fbc8e6f0-2262-360a-a336-aea533a7162a.roa
File: fbc8e6f0-2262-360a-a336-aea533a7162a.roa (raw, json)
Hash identifier: yZnffsMpQKY4p/WfAt+GC1/CN84WWJalNsUxulTDTLE=
Subject key identifier: 34:A2:15:58:DC:3D:EC:0F:94:11:FA:92:94:BA:FA:3A:89:93:78:0D
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584921346FB4C1CCDC7FF22C0840
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fbc8e6f0-2262-360a-a336-aea533a7162a.roa
Signing time: Sun 09 Mar 2025 10:21:09 +0000
ROA not before: Sun 09 Mar 2025 10:21:09 +0000
ROA not after: Sat 07 Jun 2025 10:21:09 +0000
asID: 855
IP address blocks: 2001:4c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:6f:b4:c1:cc:dc:7f:f2:2c:08:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:21:09 2025 GMT
Not After : Jun 7 10:21:09 2025 GMT
Subject: CN=b28c0dd2-cb39-4999-84fd-21d77fec6e94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:08:bb:2b:8f:5c:97:58:16:a4:ae:09:43:4e:
97:cb:f8:65:c3:a9:44:f8:6a:89:5d:4c:f1:be:af:
73:b6:57:12:4a:e4:30:3f:d5:5c:82:49:2c:91:b7:
3b:6c:4e:7a:52:78:99:d5:51:3b:2c:19:90:af:a3:
3a:7f:9f:2d:f4:c4:06:48:ea:35:57:e2:77:d7:16:
d8:23:62:22:89:2e:86:15:90:c7:87:77:5f:7e:0f:
5a:2e:4c:18:17:ae:a9:a6:46:f0:90:c5:1f:b5:5a:
86:72:93:97:e9:af:6d:fc:17:7e:18:61:84:58:3e:
73:0a:55:98:36:c5:53:f7:5c:b4:ce:67:dd:75:10:
41:11:de:03:f4:0f:02:cd:80:e6:8b:34:ee:cf:81:
a8:d8:55:68:61:32:f9:99:fb:bf:ef:4d:63:ee:61:
97:0d:29:3b:90:9a:5d:d1:45:bf:47:71:1b:21:5f:
ea:b3:fc:5b:9e:19:d3:c8:49:d7:9d:0c:9a:aa:1d:
6a:cf:10:78:74:20:0a:ad:2d:c1:0b:55:df:5f:45:
a4:e0:01:25:05:c5:45:00:5d:07:dc:33:c0:36:f4:
b3:9b:96:6d:6a:d2:b7:b3:1d:1e:13:4e:15:13:ca:
7b:07:7a:55:f7:76:90:d6:5a:88:09:14:ca:9f:1f:
1a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A2:15:58:DC:3D:EC:0F:94:11:FA:92:94:BA:FA:3A:89:93:78:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fbc8e6f0-2262-360a-a336-aea533a7162a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4c0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:1c:4a:98:b0:48:77:48:44:fd:50:85:75:52:55:5f:2f:72:
9a:99:51:dd:20:01:00:51:c4:31:0b:e1:0d:a2:1a:00:29:0b:
e9:6a:14:4c:28:36:34:56:fd:f4:78:18:2f:55:66:41:0d:67:
66:19:3f:0d:5b:be:06:52:44:4a:d5:98:f1:9a:9f:fe:ec:14:
74:07:3b:7d:03:49:98:7d:0b:f4:61:33:33:57:13:38:f6:0f:
ed:46:e0:46:d2:e0:06:ac:8d:c1:0c:41:9f:39:69:76:b3:1d:
00:8a:e0:be:1c:65:20:58:1d:e1:ad:aa:0b:ca:7c:97:9d:bd:
55:7c:5c:fe:14:0a:69:3c:f8:56:ea:13:9c:b7:a7:85:5c:b1:
99:18:3a:aa:4e:61:48:0e:6f:86:b7:03:b4:59:5f:26:6b:e3:
f9:d6:31:3e:3e:bc:1a:e7:42:09:18:72:41:d6:50:e8:4d:47:
ef:4f:9e:99:09:cb:5b:35:57:83:6e:50:d6:72:b1:1c:09:22:
09:41:0c:98:eb:34:5e:c3:03:ac:86:f1:65:92:58:8a:26:e4:
a2:86:72:db:1e:93:16:52:65:39:33:6a:fe:4b:20:ff:27:ee:
70:d8:c4:df:b0:7d:07:b9:cd:43:db:8a:13:62:b8:60:b8:18:
73:4a:e8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 04:14:32 2025 by rpki-client