Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/96ae1564-8251-3665-8123-7c77a9039f2f.roa
File: 96ae1564-8251-3665-8123-7c77a9039f2f.roa (raw, json)
Hash identifier: DF2dJFMH3WtEHYqrxXBG4ppYi7BJR26QToaXIY5fxfw=
Subject key identifier: 03:FD:22:94:89:EE:67:73:B3:00:F8:4F:60:8F:43:E6:15:8B:B0:E2
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CAEF99B0DB41BF01652B400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/96ae1564-8251-3665-8123-7c77a9039f2f.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33659
IP address blocks: 2603:301b:800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:ae:f9:9b:0d:b4:1b:f0:16:52:b4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=58a689c0-53b0-4a6b-bc13-5a3b91fca4b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:41:e5:6e:22:06:db:8e:98:fb:3b:5d:62:fd:
8f:03:33:cc:32:cf:c3:20:3d:d7:28:03:95:1f:6d:
80:9b:64:59:c5:3c:42:6d:83:4b:c0:2b:65:2b:f4:
52:a1:e0:d6:49:83:d2:09:fd:0f:23:00:4f:68:6a:
6f:3d:95:2c:a0:4e:da:93:3b:b2:fb:a8:42:04:7a:
1c:06:54:ae:39:20:de:92:3a:b1:d8:e5:2d:b3:07:
c1:b7:9d:a2:1c:ea:63:aa:58:6b:7e:95:e9:25:12:
13:31:cd:92:89:0c:72:90:4d:8a:b1:b7:2c:f2:bb:
4c:fb:de:a6:f7:5e:cd:ee:9c:6d:e8:46:16:3d:e4:
fa:96:b0:f9:93:5f:72:fd:48:d2:7c:d9:23:8a:f2:
b7:0c:3e:57:3b:d6:ef:5d:d9:dc:72:2f:c0:17:c6:
e6:3a:63:7b:65:17:df:4c:96:e2:1f:7c:5f:a0:98:
14:c5:b1:c5:2b:60:ff:24:d2:09:b7:f6:10:68:78:
29:12:91:2a:73:37:6d:42:26:a8:1f:89:0b:0c:44:
d6:11:85:e2:1e:8d:a5:a5:5e:f3:2a:7c:c4:28:a6:
65:07:f3:ad:35:f1:48:9d:9f:36:af:57:f1:d3:51:
b3:98:ff:b5:9c:c0:c7:b5:b7:ba:fe:1d:be:c6:1c:
34:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:FD:22:94:89:EE:67:73:B3:00:F8:4F:60:8F:43:E6:15:8B:B0:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/96ae1564-8251-3665-8123-7c77a9039f2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:301b:800::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:e8:27:c7:4a:61:87:ed:31:d2:07:b1:8b:e3:ee:c1:0e:5f:
2f:5a:c5:d6:94:06:84:e0:71:5b:b2:01:52:ea:b6:52:1e:8f:
0c:ec:7a:6f:16:ea:57:1d:06:3f:81:65:f0:da:af:50:73:e4:
c6:69:3e:82:98:3c:6d:f7:57:f8:53:74:f6:1f:be:47:bf:b0:
24:1d:6a:39:1f:67:d8:37:74:0d:1d:8b:7d:1f:e3:98:45:5f:
7a:86:8d:02:85:ea:c7:d5:3b:e5:ab:1a:f2:20:df:f7:c6:62:
c0:2b:ec:ee:3b:f3:ea:86:00:58:eb:97:eb:7b:d7:fe:b7:9b:
9c:0f:9c:38:9d:ae:c4:73:bc:7e:dd:c0:81:2e:9c:5a:b5:65:
0a:5c:52:75:e8:71:a3:72:06:1e:98:62:8b:2d:e8:c3:4b:86:
b9:d1:63:07:cc:30:f7:f0:3a:7f:4d:bb:21:77:4c:ec:e0:53:
54:1b:db:ed:f0:78:0f:92:22:df:bf:b9:d0:4d:12:7a:31:df:
e5:50:1b:45:60:4e:92:d8:36:18:4a:be:86:74:16:8b:6c:60:
02:74:d1:a9:b7:4f:4c:ab:74:60:f5:e0:df:54:16:b9:3b:f3:
11:ae:4b:f8:ac:9f:6f:e0:36:0b:0e:08:0a:02:69:c2:5e:e0:
13:ee:6e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 10:36:47 2025 by rpki-client