Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/aa0f5431-5fce-36d0-84a8-0a19f7a03198.roa
File: aa0f5431-5fce-36d0-84a8-0a19f7a03198.roa (raw, json)
Hash identifier: tAisGTzx0VTv3QquEuPAdUEUmWukwRDTZlX2qUN7rn8=
Subject key identifier: DF:17:A2:7E:97:67:0C:D6:DE:BF:15:85:CE:FF:F3:41:59:5C:4A:28
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285848C577CFA2214D3AA261CA2040
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/aa0f5431-5fce-36d0-84a8-0a19f7a03198.roa
Signing time: Tue 04 Feb 2025 13:42:32 +0000
ROA not before: Tue 04 Feb 2025 13:42:32 +0000
ROA not after: Mon 05 May 2025 12:42:32 +0000
asID: 30036
IP address blocks: 2604:2e8a:7400::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 13 Apr 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:77:cf:a2:21:4d:3a:a2:61:ca:20:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 4 13:42:32 2025 GMT
Not After : May 5 12:42:32 2025 GMT
Subject: CN=c15f2a98-ada3-4290-a14c-dbac0b9774de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0c:23:6b:f8:b0:c3:0f:fb:8b:06:d7:9b:27:
26:f7:19:af:1f:10:0e:6e:5f:77:f8:40:2a:6e:04:
fd:46:d5:f2:50:e3:58:dc:86:30:b1:01:eb:4a:da:
15:bb:dd:5f:82:ec:1c:13:42:14:d6:b8:96:ac:88:
73:e1:6f:8f:73:ae:0e:85:50:b6:40:0c:2b:a9:a2:
39:0c:aa:71:72:17:9e:24:d5:bc:ac:f6:56:46:28:
c7:e7:6e:7d:6d:44:33:1f:e1:8c:1b:a0:92:23:23:
60:80:22:69:e1:81:6d:bd:49:05:c3:c5:4f:0c:75:
d6:bd:96:95:0e:1a:ba:64:bb:01:f8:83:bb:89:43:
92:51:5d:ab:bf:4c:c5:85:99:59:d3:6d:57:de:11:
74:4e:11:32:f8:0a:8b:84:b2:57:55:bc:85:6a:4f:
7b:90:66:56:84:c0:1c:c5:fb:5c:43:04:55:2b:b1:
ab:4e:96:8c:24:d8:aa:39:97:b5:03:68:16:69:83:
cd:5d:09:72:13:4e:01:11:7e:54:32:68:2d:0d:05:
37:13:dc:5d:6f:30:06:61:f8:21:d8:08:31:c4:40:
ce:b0:72:a1:11:c6:df:47:61:8e:9f:3c:76:ae:cc:
4c:fd:7a:8b:2d:7b:2b:5d:e9:50:d0:fd:59:55:ff:
e8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:17:A2:7E:97:67:0C:D6:DE:BF:15:85:CE:FF:F3:41:59:5C:4A:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/aa0f5431-5fce-36d0-84a8-0a19f7a03198.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8a:7400::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:4c:e7:44:92:53:86:96:3e:03:9c:00:43:1a:52:25:3f:45:
13:e3:02:1f:2a:68:40:f5:bb:9d:3a:12:1b:bd:bf:f1:ea:da:
a9:46:99:39:fe:67:c2:0c:fd:b5:17:86:f6:51:dd:11:c3:8f:
49:ba:24:08:d4:65:05:a6:05:1b:ba:89:b6:10:dd:2a:4b:84:
04:94:57:92:09:f6:db:f7:1e:85:69:9f:ef:00:cf:c1:e0:b1:
2e:a4:c4:42:47:df:42:57:0f:66:73:b7:11:78:55:d8:e1:cd:
4c:36:a4:3a:36:4d:6e:32:36:10:a1:8f:5b:01:d0:62:54:8e:
21:1d:d4:9e:11:ff:b0:95:16:92:be:f5:fd:cd:67:08:40:e9:
c2:74:14:57:8b:ba:b6:32:61:cc:e0:cf:f5:ae:48:51:e2:ee:
1b:d4:d5:c2:d5:a2:06:b8:cc:36:a5:cc:da:cd:de:f3:d8:d8:
4b:7e:45:f2:f9:e6:0e:e1:63:15:46:f3:12:8e:38:00:87:3d:
f5:0b:71:98:73:0c:ff:b6:8b:ef:67:3d:10:80:bd:0a:b9:96:
4f:17:1f:e9:60:33:ee:75:ff:79:71:ce:d0:41:b6:f1:b0:7f:
ee:83:d2:df:fa:85:a5:99:61:f0:95:20:46:74:ae:06:3e:a7:
c4:9f:f5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:01:45 2025 by rpki-client