Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/de1e6af3-8042-363f-b93d-62873ae6e8f2.roa
File: de1e6af3-8042-363f-b93d-62873ae6e8f2.roa (raw, json)
Hash identifier: /r7Op8mZOIoqlFfs9mz2+Zt+9xGPVxDHeloYwW36KHk=
Subject key identifier: E8:30:AD:AD:1C:12:34:61:94:AA:66:1F:3F:65:D8:5C:B4:11:44:07
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285848C264D40BE1409227C0DDCA80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/de1e6af3-8042-363f-b93d-62873ae6e8f2.roa
Signing time: Mon 03 Feb 2025 11:16:52 +0000
ROA not before: Mon 03 Feb 2025 11:16:52 +0000
ROA not after: Sun 04 May 2025 10:16:52 +0000
asID: 30036
IP address blocks: 2604:2e8a:800::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 13 Apr 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c2:64:d4:0b:e1:40:92:27:c0:dd:ca:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 3 11:16:52 2025 GMT
Not After : May 4 10:16:52 2025 GMT
Subject: CN=712795c9-b6b2-44b5-83ac-2af41caa6633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:fc:3d:9d:08:24:b2:3e:f3:99:06:fe:06:69:
de:1a:9c:d2:84:7a:d8:1b:60:70:72:77:b5:e7:eb:
46:5a:ac:e6:7d:63:bd:79:a3:e7:de:9a:43:76:bf:
ee:5a:e0:5d:3b:b7:46:68:3f:0a:31:3a:90:dd:99:
55:a9:67:e8:23:6f:69:b1:6d:15:c5:61:a3:8d:ef:
2f:eb:23:8a:cb:78:38:64:88:03:4b:62:1d:99:21:
e0:f0:2a:3e:ec:27:ea:3c:c9:48:1e:7c:f2:b9:a1:
a1:20:9a:bc:23:4c:27:57:e4:75:82:84:3b:11:73:
03:8e:22:59:cf:91:0e:d5:7b:16:95:f7:dc:f7:3d:
f5:cd:4c:dd:f2:94:78:a5:22:b2:65:fb:2a:25:8a:
e4:79:25:db:47:dd:84:bc:d4:49:8d:3f:d2:dc:47:
f6:01:92:d3:a7:41:30:5a:4e:3e:e1:37:a8:c0:f8:
fd:cb:b3:de:e3:ac:da:93:f8:56:bf:06:cd:b4:78:
86:2d:f3:7c:cf:81:a6:ac:2e:b4:a5:c9:bf:16:c3:
bc:19:87:65:c8:60:12:55:c4:bb:2e:19:75:58:30:
34:ec:74:a5:07:f5:2d:67:2a:cf:3c:0f:43:ef:f2:
ef:37:37:b3:1e:39:70:1a:6b:fe:bb:26:7a:cf:78:
e9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:30:AD:AD:1C:12:34:61:94:AA:66:1F:3F:65:D8:5C:B4:11:44:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/de1e6af3-8042-363f-b93d-62873ae6e8f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8a:800::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:52:19:b8:fe:b9:f0:c9:81:b3:9f:d1:2a:4f:6b:f6:d2:ef:
56:bf:55:4c:7b:fb:a2:5b:06:d1:02:e4:78:69:4e:90:32:6e:
b5:32:17:e5:7e:d3:3d:7e:87:bd:63:de:ed:57:1a:a5:7c:44:
52:ce:8d:b1:f5:f1:44:d9:89:f7:2d:70:8c:57:14:c6:60:15:
fd:be:fa:af:2a:86:1b:ff:a8:a7:c2:b9:f6:a4:d2:a8:ea:79:
76:c0:8e:3f:ef:3f:33:f2:7e:6a:85:9f:0b:91:58:57:de:cc:
6a:43:ff:9a:1b:b8:91:24:98:36:03:d2:24:1e:de:5e:1c:49:
d3:52:06:4d:a2:9f:ed:16:45:5a:7e:51:af:af:1b:95:3d:78:
82:22:c5:d4:4f:7b:99:bc:f9:82:28:ff:3c:3c:01:19:ec:73:
b5:15:7c:6e:79:13:06:89:12:aa:18:13:89:53:c3:03:bd:9d:
20:4c:70:7d:ed:fa:7d:47:7d:7f:08:03:01:42:75:6b:3b:0a:
27:5f:40:27:9c:b7:7e:25:fd:1f:ea:8b:f3:4f:30:05:45:d9:
79:7e:3c:d1:77:11:e7:af:ec:d7:0f:27:06:6a:40:0f:48:b1:
af:7e:76:47:6f:60:26:7f:dd:20:42:63:c5:90:a6:96:f3:b2:
72:da:3f:ee
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjCZNQL4UCSJ8DdyoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDIwMzExMTY1MloXDTI1MDUwNDEwMTY1MlowLzEtMCsGA1UEAxMk
NzEyNzk1YzktYjZiMi00NGI1LTgzYWMtMmFmNDFjYWE2NjMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/w9nQgksj7zmQb+BmneGpzShHrYG2Bwcne1
5+tGWqzmfWO9eaPn3ppDdr/uWuBdO7dGaD8KMTqQ3ZlVqWfoI29psW0VxWGjje8v
6yOKy3g4ZIgDS2IdmSHg8Co+7CfqPMlIHnzyuaGhIJq8I0wnV+R1goQ7EXMDjiJZ
z5EO1XsWlffc9z31zUzd8pR4pSKyZfsqJYrkeSXbR92EvNRJjT/S3Ef2AZLTp0Ew
Wk4+4TeowPj9y7Pe46zak/hWvwbNtHiGLfN8z4GmrC60pcm/FsO8GYdlyGASVcS7
Lhl1WDA07HSlB/UtZyrPPA9D7/LvNzezHjlwGmv+uyZ6z3jpLwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFOgwra0cEjRhlKpmHz9l2Fy0EUQHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZGUxZTZhZjMtODA0Mi0z
NjNmLWI5M2QtNjI4NzNhZTZlOGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiggw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAGFIZuP658MmBs5/RKk9r9tLvVr9VTHv7olsG0QLkeGlOkDJutTIX
5X7TPX6HvWPe7VcapXxEUs6NsfXxRNmJ9y1wjFcUxmAV/b76ryqGG/+op8K59qTS
qOp5dsCOP+8/M/J+aoWfC5FYV97MakP/mhu4kSSYNgPSJB7eXhxJ01IGTaKf7RZF
Wn5Rr68blT14giLF1E97mbz5gij/PDwBGexztRV8bnkTBokSqhgTiVPDA72dIExw
fe36fUd9fwgDAUJ1azsKJ19AJ5y3fiX9H+qL808wBUXZeX480XcR56/s1w8nBmpA
D0ixr352R29gJn/dIEJjxZCmlvOycto/7g==
-----END CERTIFICATE-----
Generated at Sat Apr 12 17:05:17 2025 by rpki-client