Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b94d8eea-67f0-3d33-aae5-fbd2a7d43aad.roa
File: b94d8eea-67f0-3d33-aae5-fbd2a7d43aad.roa (raw, json)
Hash identifier: Y9aZK/A9Ww2LbSG50JEmZCB4ngpFU7Si71AG7yGWBiE=
Subject key identifier: 7C:54:71:C7:FE:DE:2B:10:5C:9B:67:95:DF:EE:B4:A6:77:39:96:59
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6CC0BA22AD1D7ED4EB1600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b94d8eea-67f0-3d33-aae5-fbd2a7d43aad.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33659
IP address blocks: 2001:559:8200::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6c:c0:ba:22:ad:1d:7e:d4:eb:16:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=6f816e05-d82e-4acb-8092-0abb96bbbc7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:51:51:45:de:d9:04:ae:24:8b:75:15:b9:f7:
2b:a7:4f:1c:1e:9d:5c:82:54:31:33:a4:7b:ee:a0:
ff:de:45:09:e9:7a:5e:28:ab:2b:0e:81:7f:5e:66:
e8:8b:81:dc:07:ce:67:40:c5:fc:69:a1:1d:3f:dd:
a6:6b:ce:e0:58:b1:8e:b0:85:30:33:67:f9:03:0c:
1c:57:08:c1:c5:ad:cd:03:27:84:a2:9b:ed:de:56:
18:cb:1d:1e:a9:2b:12:88:74:37:85:57:25:17:40:
ff:e4:d8:a0:db:56:89:1e:92:4b:d1:dd:61:1b:42:
f1:09:aa:47:a4:81:58:04:29:17:99:23:79:31:5b:
bb:6e:8a:6a:75:f4:7c:a9:eb:ea:c6:6b:b6:af:be:
c5:8f:94:fb:52:da:3c:f2:38:6c:b9:c7:75:b9:16:
12:0e:d1:ed:df:79:99:18:74:e1:dc:64:8e:98:a9:
c7:6f:91:5d:b2:f7:10:9f:77:b7:93:8e:14:f8:37:
b3:8a:28:ea:7a:90:77:d1:20:bf:24:00:98:ca:df:
79:6c:af:b9:fd:53:55:2d:b9:68:eb:42:14:f8:c1:
3d:ec:e8:30:39:d6:e3:0a:0b:aa:bc:6d:1f:5f:ea:
12:d6:e1:7f:18:84:2c:2d:7a:a2:53:bb:1d:e5:ac:
23:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:54:71:C7:FE:DE:2B:10:5C:9B:67:95:DF:EE:B4:A6:77:39:96:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b94d8eea-67f0-3d33-aae5-fbd2a7d43aad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:8200::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:f5:85:1a:22:ba:5f:66:3e:fd:85:e8:93:d7:18:11:b2:6c:
48:66:79:08:9e:63:0c:fb:07:ac:7b:ab:ab:34:cc:26:69:c2:
4a:7a:2e:0d:08:7b:1c:81:d1:fb:85:05:1d:ac:c7:95:ac:f9:
fb:94:1b:f8:c4:d0:01:cc:91:ab:ca:e7:05:4c:ec:ad:ab:86:
a9:bd:52:58:36:62:a0:9d:6e:ea:b7:24:9e:f6:a1:8c:83:52:
5b:bd:1a:ae:ba:19:11:57:b1:12:f7:b3:c6:f9:1d:da:d9:9a:
09:1d:af:5f:fe:0a:f0:ea:76:d6:8f:90:8c:39:25:a6:b1:e2:
d6:3d:ae:56:09:ce:8f:59:2c:c6:fc:01:e1:eb:a9:43:16:7d:
8a:55:53:5e:0d:28:cc:8c:8d:dc:ea:56:dd:08:99:12:b6:d9:
98:aa:67:2e:3f:2c:eb:ce:ed:8a:9f:9d:ac:fc:36:67:3b:09:
90:07:d3:89:8e:6d:83:c6:df:ad:17:ae:c4:ad:23:ea:cc:aa:
58:05:55:cf:2f:ad:3b:2b:5e:54:ca:8b:33:42:a3:c7:0c:e4:
90:03:71:1d:ac:88:12:a1:9c:e1:a6:bd:e6:77:f1:0e:eb:af:
5d:85:42:03:96:2e:a0:d7:76:b2:e5:e1:7d:93:49:86:e0:f1:
7f:10:17:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:29:47 2025 by rpki-client