Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ccc480b2-9563-3e36-9156-86ffe6b7c2cb.roa
File: ccc480b2-9563-3e36-9156-86ffe6b7c2cb.roa (raw, json)
Hash identifier: ay9OVTevXlAo7moO+oaImdZaKqyl7vtwY9eR8Y9ioMM=
Subject key identifier: 94:1D:FC:DB:44:F0:0C:B6:E0:12:D1:48:5D:47:71:96:DB:9E:27:26
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F432858493FC6640874E2689E6C210C00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ccc480b2-9563-3e36-9156-86ffe6b7c2cb.roa
Signing time: Thu 20 Mar 2025 09:09:29 +0000
ROA not before: Thu 20 Mar 2025 09:09:29 +0000
ROA not after: Wed 18 Jun 2025 09:09:29 +0000
asID: 30036
IP address blocks: 2604:2e8b:4400::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3f:c6:64:08:74:e2:68:9e:6c:21:0c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Mar 20 09:09:29 2025 GMT
Not After : Jun 18 09:09:29 2025 GMT
Subject: CN=fd523c7d-b2c7-4a2d-80bc-7c84a3bab3dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:15:d0:8e:30:4f:58:9f:51:6c:2b:f6:6d:37:
a8:66:7f:c3:25:3c:05:e5:e7:fc:d5:ee:c5:96:e1:
3e:4d:99:3a:16:3b:9b:5f:b8:e8:1b:e2:23:e4:29:
21:15:f6:d2:65:19:c6:f6:40:2e:c0:36:83:6f:52:
16:32:5a:bb:2c:12:5a:5a:ea:9b:40:80:3a:a6:52:
4b:71:89:eb:0b:91:db:ef:e0:a3:0d:6f:1f:44:95:
0a:71:6b:77:97:39:19:77:20:85:2b:53:8e:35:1b:
5b:3d:37:51:3d:74:e1:6f:5e:fa:a8:11:33:0b:3d:
0d:43:db:1f:a4:90:fa:d0:3d:df:f5:ca:5b:fc:8f:
90:de:e6:4d:58:62:6b:9e:40:33:f7:e0:f5:17:76:
e3:c9:58:aa:26:5e:b1:58:c7:ca:25:e5:e9:78:09:
63:3e:8d:58:7e:61:c3:84:5c:3b:6f:14:89:a9:a7:
d0:6a:58:d5:1e:65:10:b5:0f:be:eb:e5:46:c9:6a:
67:fc:e6:a0:38:08:7b:30:5c:ef:2a:ec:18:92:81:
38:9e:91:66:82:ae:a7:f6:dc:ae:bb:43:98:c2:d8:
cd:d9:db:c3:58:6b:6b:34:68:56:c7:cd:5a:5f:2e:
2f:d6:a7:d1:a0:42:1a:50:b3:14:04:87:12:89:58:
9b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:1D:FC:DB:44:F0:0C:B6:E0:12:D1:48:5D:47:71:96:DB:9E:27:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ccc480b2-9563-3e36-9156-86ffe6b7c2cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8b:4400::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:98:e2:08:8f:0d:e9:59:49:91:c0:a7:15:86:4c:1e:33:94:
c3:a7:d0:f9:df:f1:4b:cb:01:b8:44:ef:70:12:92:7e:eb:1a:
7f:ea:ac:78:d5:de:ce:3c:fa:dc:ac:aa:14:b1:c4:73:84:11:
49:78:62:55:25:13:67:dc:44:ad:53:71:a3:22:8d:db:30:10:
35:b5:b5:78:40:f3:39:36:1f:f4:31:2d:c3:34:ab:67:b4:28:
44:c3:4a:86:25:f6:e1:18:40:64:a7:eb:f2:71:41:ba:a5:58:
de:4f:15:99:cd:78:ce:e4:d9:9d:70:c6:63:7c:e6:4a:ef:9c:
93:13:d7:36:8a:77:7b:23:77:85:0d:e7:44:b7:d1:1c:57:0e:
45:84:13:5d:69:00:93:1f:f7:ca:a1:50:37:3b:3b:fb:22:4b:
9f:f1:e7:44:a5:a8:f1:2e:a8:fe:f9:37:d2:a5:8a:72:5d:5c:
10:5a:de:5f:22:c2:f2:35:8c:ba:c4:fb:0c:77:d2:46:1a:2a:
9a:83:30:31:fe:38:0f:69:b1:3a:1b:95:f4:79:60:96:62:c2:
33:03:bc:3f:ec:83:5e:2e:79:34:10:8c:e4:89:26:3c:66:b9:
d3:ca:e8:fa:91:bc:81:54:79:71:b8:d7:16:f5:64:cd:91:0b:
cd:80:b3:86
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEk/xmQIdOJonmwhDAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDMyMDA5MDkyOVoXDTI1MDYxODA5MDkyOVowLzEtMCsGA1UEAxMk
ZmQ1MjNjN2QtYjJjNy00YTJkLTgwYmMtN2M4NGEzYmFiM2RjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRXQjjBPWJ9RbCv2bTeoZn/DJTwF5ef81e7F
luE+TZk6FjubX7joG+Ij5CkhFfbSZRnG9kAuwDaDb1IWMlq7LBJaWuqbQIA6plJL
cYnrC5Hb7+CjDW8fRJUKcWt3lzkZdyCFK1OONRtbPTdRPXThb176qBEzCz0NQ9sf
pJD60D3f9cpb/I+Q3uZNWGJrnkAz9+D1F3bjyViqJl6xWMfKJeXpeAljPo1YfmHD
hFw7bxSJqafQaljVHmUQtQ++6+VGyWpn/OagOAh7MFzvKuwYkoE4npFmgq6n9tyu
u0OYwtjN2dvDWGtrNGhWx81aXy4v1qfRoEIaULMUBIcSiVibLwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFJQd/NtE8Ay24BLRSF1HcZbbnicmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvY2NjNDgwYjItOTU2My0z
ZTM2LTkxNTYtODZmZmU2YjdjMmNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQui0Qw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAeJjiCI8N6VlJkcCnFYZMHjOUw6fQ+d/xS8sBuETvcBKSfusaf+qs
eNXezjz63KyqFLHEc4QRSXhiVSUTZ9xErVNxoyKN2zAQNbW1eEDzOTYf9DEtwzSr
Z7QoRMNKhiX24RhAZKfr8nFBuqVY3k8Vmc14zuTZnXDGY3zmSu+ckxPXNop3eyN3
hQ3nRLfRHFcORYQTXWkAkx/3yqFQNzs7+yJLn/HnRKWo8S6o/vk30qWKcl1cEFre
XyLC8jWMusT7DHfSRhoqmoMwMf44D2mxOhuV9HlglmLCMwO8P+yDXi55NBCM5Ikm
PGa508ro+pG8gVR5cbjXFvVkzZELzYCzhg==
-----END CERTIFICATE-----
Generated at Sun Apr 13 00:45:44 2025 by rpki-client