Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c598a5fe-5f5b-30e4-8a1b-ad42b0ca61ef.roa
File: c598a5fe-5f5b-30e4-8a1b-ad42b0ca61ef.roa (raw, json)
Hash identifier: VxPb84E0o2kcLVFhhu2goeu+UFCQIR7Nu1WXICQpACE=
Subject key identifier: 53:90:BC:46:03:BC:67:3A:DC:CA:8A:23:4A:CE:D5:DD:3A:B3:1E:4E
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285848BE125CB0280F4ECF1E2077C0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c598a5fe-5f5b-30e4-8a1b-ad42b0ca61ef.roa
Signing time: Sat 01 Feb 2025 22:07:28 +0000
ROA not before: Sat 01 Feb 2025 22:07:28 +0000
ROA not after: Fri 02 May 2025 21:07:28 +0000
asID: 30036
IP address blocks: 2604:2e8d:a800::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 13 Apr 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:be:12:5c:b0:28:0f:4e:cf:1e:20:77:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 1 22:07:28 2025 GMT
Not After : May 2 21:07:28 2025 GMT
Subject: CN=b026b794-1a5f-4c47-ab02-174763477ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:40:b4:a7:95:49:ed:8a:d7:a1:69:45:65:77:
63:47:7a:59:3c:70:72:47:15:02:eb:a6:6f:28:91:
a0:4b:cd:61:01:b6:29:e9:07:b8:0c:94:3a:23:30:
1d:b7:2b:2a:5b:18:7e:a9:68:95:ff:5f:39:2c:8a:
96:2a:b6:b6:7a:87:74:37:80:83:f7:0c:83:4c:88:
59:51:d5:cf:ef:53:af:10:97:e1:69:04:65:fe:d0:
99:82:4f:9d:a9:82:79:ed:20:a9:bf:0d:f8:22:05:
6f:db:33:28:91:8f:49:51:ab:9e:8b:85:87:f7:94:
b7:e9:4c:68:eb:fe:17:f9:7e:1a:db:8a:8f:c8:1d:
2b:14:72:6c:f3:10:fa:f5:de:e8:f8:8e:c5:a2:98:
7b:b0:9d:f7:9b:3b:f5:21:dd:5f:ac:96:07:9e:d8:
a5:e0:00:e2:9d:46:7e:a8:8f:92:66:da:7c:88:bb:
ac:8f:64:bd:02:5a:97:96:9e:b9:0d:c6:e4:92:33:
35:8c:5e:34:61:08:15:9b:68:d9:ad:6f:11:0e:8d:
c8:9a:03:43:92:49:22:8e:e8:1f:3e:fe:b1:38:25:
f9:72:a7:f9:8b:b1:2f:cc:46:68:2d:e3:8d:ef:73:
b1:98:7d:39:23:8c:63:72:3a:b8:b4:97:62:ba:a7:
4d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:90:BC:46:03:BC:67:3A:DC:CA:8A:23:4A:CE:D5:DD:3A:B3:1E:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c598a5fe-5f5b-30e4-8a1b-ad42b0ca61ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8d:a800::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:c2:6e:df:73:8b:9b:56:b4:1b:3f:e0:21:55:ea:ae:f7:81:
bc:f9:49:72:8a:9a:5a:4c:bd:de:3c:e1:cc:bc:8e:57:c6:9e:
2f:7f:70:76:2a:24:b2:83:5a:a8:01:fa:03:ae:0f:72:bb:88:
32:54:5a:53:3a:f8:19:94:b1:47:ea:61:02:bc:4c:63:be:e6:
e4:6d:96:74:b7:89:38:05:47:d4:dd:f0:49:43:f5:73:fb:c7:
82:4e:a3:7b:28:b6:10:c8:9f:fd:ec:e8:26:f5:46:0e:4b:ce:
fd:bd:23:bf:a3:e3:0f:89:2f:23:48:b5:ae:37:d6:0e:14:86:
05:62:ef:dd:5e:eb:30:d9:06:72:2f:0b:28:0c:c3:b1:86:0e:
74:70:66:e1:67:5c:89:e3:2c:a6:5d:62:71:80:0e:c9:e0:11:
c6:aa:ba:46:ea:5f:38:f0:7b:78:50:81:d6:6e:2e:81:d0:6e:
00:d9:8f:2e:5e:cc:2b:66:3f:5c:7e:49:b2:df:f8:41:5e:e3:
1e:18:72:66:4a:49:31:16:82:a7:8d:26:2a:9e:5f:49:85:97:
06:a2:e4:84:a0:b5:2f:86:6e:7b:ab:17:3a:37:37:90:f2:25:
18:fe:97:22:40:0d:9b:23:0a:7b:5c:ca:a5:e9:11:3d:9f:3a:
65:84:5d:33
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEi+ElywKA9Ozx4gd8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDIwMTIyMDcyOFoXDTI1MDUwMjIxMDcyOFowLzEtMCsGA1UEAxMk
YjAyNmI3OTQtMWE1Zi00YzQ3LWFiMDItMTc0NzYzNDc3Y2U4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUC0p5VJ7YrXoWlFZXdjR3pZPHByRxUC66Zv
KJGgS81hAbYp6Qe4DJQ6IzAdtysqWxh+qWiV/185LIqWKra2eod0N4CD9wyDTIhZ
UdXP71OvEJfhaQRl/tCZgk+dqYJ57SCpvw34IgVv2zMokY9JUauei4WH95S36Uxo
6/4X+X4a24qPyB0rFHJs8xD69d7o+I7Foph7sJ33mzv1Id1frJYHntil4ADinUZ+
qI+SZtp8iLusj2S9AlqXlp65DcbkkjM1jF40YQgVm2jZrW8RDo3ImgNDkkkijugf
Pv6xOCX5cqf5i7EvzEZoLeON73OxmH05I4xjcjq4tJdiuqdNlQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFFOQvEYDvGc63MqKI0rO1d06sx5OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYzU5OGE1ZmUtNWY1Yi0z
MGU0LThhMWItYWQ0MmIwY2E2MWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujagw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAeMJu33OLm1a0Gz/gIVXqrveBvPlJcoqaWky93jzhzLyOV8aeL39w
dioksoNaqAH6A64PcruIMlRaUzr4GZSxR+phArxMY77m5G2WdLeJOAVH1N3wSUP1
c/vHgk6jeyi2EMif/ezoJvVGDkvO/b0jv6PjD4kvI0i1rjfWDhSGBWLv3V7rMNkG
ci8LKAzDsYYOdHBm4WdcieMspl1icYAOyeARxqq6RupfOPB7eFCB1m4ugdBuANmP
Ll7MK2Y/XH5Jst/4QV7jHhhyZkpJMRaCp40mKp5fSYWXBqLkhKC1L4Zue6sXOjc3
kPIlGP6XIkANmyMKe1zKpekRPZ86ZYRdMw==
-----END CERTIFICATE-----
Generated at Sat Apr 12 15:13:09 2025 by rpki-client