Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2983b0e1-7bdb-38e2-ae61-8d4756ff3946.roa
File: 2983b0e1-7bdb-38e2-ae61-8d4756ff3946.roa (raw, json)
Hash identifier: nm7fGiiG5rY0ORqhyWdevMcO9XmCW2Ga8fyB+XyUVCY=
Subject key identifier: EB:B9:EB:8E:04:61:2B:2E:AF:D4:34:D8:E4:BB:9C:3B:B6:04:E7:EB
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6CC0C722A1836DC58F89C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2983b0e1-7bdb-38e2-ae61-8d4756ff3946.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33659
IP address blocks: 2001:559:82b9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6c:c0:c7:22:a1:83:6d:c5:8f:89:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=23bd3926-f81a-4e2f-8e1c-d751e27ba664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c3:ad:d5:6b:93:e9:0f:68:cd:2e:cf:1c:d5:
a7:2e:58:5e:40:8b:0e:fb:84:28:bd:71:86:78:e2:
2c:ef:d2:75:c8:1b:0a:3a:b0:13:b5:fa:99:b2:99:
eb:54:32:6e:cd:6d:27:3c:5d:94:32:de:a5:42:16:
b2:a0:88:43:ed:52:e9:9d:8e:88:3d:f3:41:85:1f:
7e:15:ad:47:09:dd:4c:b8:13:a6:75:33:3e:99:59:
91:0a:cb:7a:21:c4:cd:04:e8:a4:3a:8f:8a:94:80:
cc:63:d7:f7:4f:c0:9b:d3:cf:f2:81:3d:92:ac:fd:
9c:31:9b:2a:84:b6:b3:48:94:bc:85:ec:8a:d0:06:
11:a2:b8:c4:01:f3:df:39:32:af:dd:b3:db:a0:2b:
85:66:ee:18:13:a8:16:a5:ea:d3:70:be:c7:82:2b:
60:e0:94:e6:3d:1e:14:ff:fe:5f:cf:4d:3f:3d:9c:
6e:67:fa:ba:7f:ee:2e:6f:97:26:3c:0c:b5:6f:5f:
83:38:aa:87:1b:91:f2:91:9e:aa:9a:a9:c0:8e:49:
c9:4e:71:36:25:b8:1a:49:bf:99:f9:1f:b8:c5:ba:
d6:33:80:91:8c:37:82:a8:a1:ac:d8:a2:1a:66:87:
f8:6e:11:63:20:ee:90:67:c9:ae:28:6b:bc:54:59:
1b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B9:EB:8E:04:61:2B:2E:AF:D4:34:D8:E4:BB:9C:3B:B6:04:E7:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2983b0e1-7bdb-38e2-ae61-8d4756ff3946.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:82b9::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:de:22:6a:99:40:6a:53:57:25:7a:b8:4c:59:87:9c:e4:75:
06:de:3a:5a:e6:0d:6e:24:76:d3:d9:a7:3a:42:bb:ff:23:a1:
ae:79:72:92:0b:1a:ce:a4:71:73:58:3f:a0:fb:ba:09:c7:60:
54:07:67:5e:a3:1e:d6:85:c0:b7:cc:70:be:b6:9b:c3:9f:e9:
28:3e:3c:0c:ac:c4:4f:b6:06:2a:8c:9e:ae:a4:ed:8f:be:c0:
58:77:8e:8d:d6:57:1b:f7:71:3d:c1:4d:d8:d7:52:d5:89:0f:
56:ed:c6:5f:5b:23:c4:a6:9a:cd:1d:43:8c:67:be:1a:bd:0e:
14:61:03:17:90:b0:17:da:2e:87:8f:d9:66:60:74:36:ae:62:
1b:e7:71:c1:65:9a:e0:61:4a:c4:ff:b0:b1:5c:4c:2a:27:61:
54:23:5f:64:62:83:5b:3a:fd:ce:8f:11:0b:03:af:32:92:5c:
a7:ff:13:55:aa:cb:6b:52:9a:e9:68:61:df:41:94:30:94:8b:
c6:79:3d:32:35:a2:bc:7b:26:d3:e5:d0:9f:a0:67:af:d1:d4:
98:5d:12:20:bc:4b:c3:78:2e:dd:f8:96:d5:b0:66:16:c7:51:
43:5d:88:d4:20:65:c5:51:9c:e6:df:69:95:ad:78:ec:c8:44:
96:20:91:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:58:29 2025 by rpki-client