Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cd4bfe42-e547-395e-a177-c3a90f9b7116.roa
File: cd4bfe42-e547-395e-a177-c3a90f9b7116.roa (raw, json)
Hash identifier: Ci980D5C3DcvifgGeEKTbUjWLpgfsNV8hgIOtBM654I=
Subject key identifier: 32:92:D7:BA:90:04:83:D5:D1:51:3B:14:41:6F:FE:EA:43:C4:FD:D2
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285848C264F893AE555C3EE2F55080
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cd4bfe42-e547-395e-a177-c3a90f9b7116.roa
Signing time: Mon 03 Feb 2025 11:17:09 +0000
ROA not before: Mon 03 Feb 2025 11:17:09 +0000
ROA not after: Sun 04 May 2025 10:17:09 +0000
asID: 30036
IP address blocks: 2604:2e8b:f000::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 13 Apr 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c2:64:f8:93:ae:55:5c:3e:e2:f5:50:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 3 11:17:09 2025 GMT
Not After : May 4 10:17:09 2025 GMT
Subject: CN=1cd1f639-b2b0-4f9e-bf2b-f88e42f29a6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:81:c6:e5:97:c2:41:a5:a2:9d:5d:3b:c6:e7:
c1:89:e2:0f:ff:4e:90:c0:17:cd:91:14:0e:1a:ac:
04:14:01:d1:e9:55:aa:35:5e:64:57:66:a0:00:a5:
2f:cf:90:b7:2e:0a:97:76:dc:50:dc:47:ee:14:ec:
9d:0d:11:fb:cd:4d:fb:48:db:a3:5a:8b:b9:2e:21:
d1:03:c4:6f:b9:16:3e:05:b3:e8:30:8a:4f:5e:2d:
f8:27:47:1a:2f:1a:1a:97:14:e6:e6:5f:9c:0f:70:
75:32:71:c0:e9:2a:c9:12:da:6c:53:3d:d6:d1:8a:
27:f7:cb:30:78:b4:c7:6c:35:d2:50:34:1f:21:fb:
ec:9a:bf:74:7e:27:05:a8:39:01:10:d7:58:aa:0f:
d5:04:84:72:4a:f4:32:d4:98:4f:0c:6f:c8:d4:84:
cb:f4:50:a6:d6:31:d4:d9:24:c3:71:da:7a:33:85:
7d:b5:00:35:26:a6:52:58:a8:3c:e1:fa:6d:a1:b6:
76:0e:f7:23:93:38:a8:21:67:c3:1a:64:f6:f1:5a:
27:5b:c1:26:d7:3d:7d:a5:74:10:b6:c7:c3:06:7a:
74:d8:ee:02:9c:5a:1c:fb:a4:4a:85:be:fe:3c:fc:
84:86:3d:c0:10:4b:b5:6f:9d:9b:bf:7c:24:6f:25:
d9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:92:D7:BA:90:04:83:D5:D1:51:3B:14:41:6F:FE:EA:43:C4:FD:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cd4bfe42-e547-395e-a177-c3a90f9b7116.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8b:f000::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:8a:e1:bc:07:7a:f4:8a:b1:07:6d:69:18:26:a9:43:45:03:
00:ce:1c:ac:f7:01:94:e4:de:b5:cf:ad:f8:e9:d5:f0:8e:6a:
ef:80:c0:5d:fb:38:61:40:b2:52:02:17:e7:c2:78:22:e6:e6:
4a:53:0c:42:12:ee:7a:53:99:31:35:c9:3f:ec:7d:52:30:c6:
14:f1:da:1b:07:91:fe:a9:2c:ea:8c:4f:5e:b1:05:b3:1f:fe:
16:ed:07:8d:5c:ae:79:e0:3c:cc:f1:e2:df:c4:bc:44:a6:10:
8e:8c:2a:38:ad:50:48:32:42:00:5c:8e:de:45:3e:7d:d2:a0:
5f:d6:0e:eb:ac:08:2d:7c:a0:ad:25:8f:8b:f1:11:13:13:0c:
56:7c:d8:35:23:0a:14:f3:0b:b2:2e:cc:11:b8:ed:1a:26:26:
83:84:72:5e:aa:e6:0f:d9:19:e8:8b:64:a5:aa:ca:37:12:dd:
34:db:f9:fd:b9:e9:19:59:d6:f2:02:99:a9:8c:02:13:0d:92:
8b:cd:d3:0b:98:2c:d2:3a:51:25:f2:a1:5c:f2:fc:e5:1c:2e:
ad:e1:a4:51:f4:97:79:bc:3d:39:25:af:27:d6:34:79:29:d5:
e8:9b:97:53:25:84:3e:b6:e4:d1:44:f4:74:64:7e:85:e7:fd:
f3:61:ac:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 17:43:34 2025 by rpki-client