Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6fbb29a4-ac8b-3f7e-bf2f-1d990850e7b8.roa
File: 6fbb29a4-ac8b-3f7e-bf2f-1d990850e7b8.roa (raw, json)
Hash identifier: WGpXLrNIeWP7rWTtwAybpV80h7y/IOhVNnyXf68CVpk=
Subject key identifier: 3A:66:7A:D2:4C:01:5B:09:CE:19:DF:BE:30:7E:13:E6:10:95:A2:1A
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285848B558FC6B6C4370FE68CC61E0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6fbb29a4-ac8b-3f7e-bf2f-1d990850e7b8.roa
Signing time: Wed 29 Jan 2025 19:07:30 +0000
ROA not before: Wed 29 Jan 2025 19:07:30 +0000
ROA not after: Tue 29 Apr 2025 18:07:30 +0000
asID: 30036
IP address blocks: 2604:2e8d:a000::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 13 Apr 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b5:58:fc:6b:6c:43:70:fe:68:cc:61:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Jan 29 19:07:30 2025 GMT
Not After : Apr 29 18:07:30 2025 GMT
Subject: CN=864e9253-85de-4c4e-8339-fd9375f78d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5d:7e:9d:cc:be:7d:05:82:44:1a:a4:93:4b:
f0:f7:b8:9d:f1:4e:7a:5c:d4:17:b2:ab:b1:92:e2:
88:50:95:ac:92:16:58:99:c4:ab:f2:5f:95:da:2e:
03:6f:f3:5e:5b:74:0b:8a:62:3b:68:d4:47:87:d3:
d8:9d:e8:d4:66:08:fb:df:b2:7d:93:65:5e:6f:cb:
62:cb:98:44:a6:c9:f6:8a:4f:fc:06:19:6f:b0:69:
8f:f4:cc:bf:5a:5f:52:57:3c:25:b7:42:a2:83:db:
6e:b3:c5:cb:f8:b2:c6:a3:20:6b:b7:db:53:4b:8b:
8f:ae:7e:bf:6a:7e:1e:77:2e:c4:9c:1d:bd:eb:ba:
b0:fa:cf:02:13:15:9a:f8:c9:ca:6d:ed:cd:ef:b1:
85:48:63:db:35:c4:bc:f9:75:85:8a:9f:eb:30:48:
1f:af:f2:bf:6f:b0:e9:36:9f:7a:ce:6d:55:80:67:
9a:0b:62:be:89:bb:7c:82:c1:c4:20:31:2c:45:4d:
ea:8e:10:94:c6:ca:6a:b3:af:e4:62:05:24:b3:5a:
fe:10:2b:27:5b:20:cf:c3:b3:96:4c:a4:81:cc:e4:
14:61:aa:78:24:1b:fe:e5:b2:ca:70:3d:c6:76:3c:
df:b2:09:84:65:eb:08:77:25:ad:21:df:75:be:8c:
6b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:66:7A:D2:4C:01:5B:09:CE:19:DF:BE:30:7E:13:E6:10:95:A2:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6fbb29a4-ac8b-3f7e-bf2f-1d990850e7b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8d:a000::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:db:d0:5a:03:5c:09:2b:73:ab:b7:7f:05:5a:f9:29:5d:9d:
15:50:50:70:49:85:26:e1:47:ef:c5:fd:6c:cf:cb:d2:85:36:
37:a9:b8:cd:6c:b6:52:68:bc:c1:bc:70:b2:cb:01:25:a0:87:
24:e4:d5:31:9a:68:86:d1:33:10:5f:f3:99:c1:15:eb:e5:02:
05:cc:99:cf:ef:64:98:c1:76:fa:72:0c:62:ee:3c:52:cd:7b:
9f:e2:7b:11:3b:c1:86:89:67:b1:5e:a3:74:78:f2:23:21:d3:
27:92:64:c5:26:f1:f8:96:d3:10:18:1c:46:7d:50:f7:8c:3b:
f3:be:bb:13:10:da:71:5f:39:99:6a:e2:d7:25:ba:ad:29:e4:
88:ef:c1:17:45:4b:4a:58:ff:f1:9f:93:ee:22:4d:d5:67:81:
1f:c2:cf:a2:66:9e:4e:0e:40:21:76:9d:99:64:15:83:66:3a:
90:4d:df:93:48:29:93:ab:35:71:6b:01:f5:10:70:37:55:b7:
ef:7e:86:7c:da:66:ce:05:f3:62:cb:21:f6:5d:6a:ce:1f:58:
a8:16:78:b5:e7:20:16:85:cc:5d:c6:21:4e:fa:e8:07:fd:1c:
73:c2:28:99:4f:20:5b:1c:51:0a:3c:fe:b1:9f:91:f6:e5:7a:
cf:c5:25:28
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEi1WPxrbENw/mjMYeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDEyOTE5MDczMFoXDTI1MDQyOTE4MDczMFowLzEtMCsGA1UEAxMk
ODY0ZTkyNTMtODVkZS00YzRlLTgzMzktZmQ5Mzc1Zjc4ZDNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAol1+ncy+fQWCRBqkk0vw97id8U56XNQXsqux
kuKIUJWskhZYmcSr8l+V2i4Db/NeW3QLimI7aNRHh9PYnejUZgj737J9k2Veb8ti
y5hEpsn2ik/8BhlvsGmP9My/Wl9SVzwlt0Kig9tus8XL+LLGoyBrt9tTS4uPrn6/
an4edy7EnB2967qw+s8CExWa+MnKbe3N77GFSGPbNcS8+XWFip/rMEgfr/K/b7Dp
Np96zm1VgGeaC2K+ibt8gsHEIDEsRU3qjhCUxspqs6/kYgUks1r+ECsnWyDPw7OW
TKSBzOQUYap4JBv+5bLKcD3GdjzfsgmEZesIdyWtId91voxryQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFDpmetJMAVsJzhnfvjB+E+YQlaIaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNmZiYjI5YTQtYWM4Yi0z
ZjdlLWJmMmYtMWQ5OTA4NTBlN2I4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujaAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAJdvQWgNcCStzq7d/BVr5KV2dFVBQcEmFJuFH78X9bM/L0oU2N6m4
zWy2Umi8wbxwsssBJaCHJOTVMZpohtEzEF/zmcEV6+UCBcyZz+9kmMF2+nIMYu48
Us17n+J7ETvBholnsV6jdHjyIyHTJ5JkxSbx+JbTEBgcRn1Q94w78767ExDacV85
mWri1yW6rSnkiO/BF0VLSlj/8Z+T7iJN1WeBH8LPomaeTg5AIXadmWQVg2Y6kE3f
k0gpk6s1cWsB9RBwN1W3736GfNpmzgXzYssh9l1qzh9YqBZ4tecgFoXMXcYhTvro
B/0cc8IomU8gWxxRCjz+sZ+R9uV6z8UlKA==
-----END CERTIFICATE-----
Generated at Sat Apr 12 09:33:48 2025 by rpki-client