Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/15473ffa-826e-3e8c-85d0-fa62985717f5.roa
File: 15473ffa-826e-3e8c-85d0-fa62985717f5.roa (raw, json)
Hash identifier: xPxf1RniTTI4MzVEluJccEtw/6QrAe+rNyNsI/OGfF4=
Subject key identifier: A5:C0:80:33:33:20:D3:43:5A:3C:37:A2:9F:94:77:8A:25:2E:5B:66
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858493243F2A55367CAB024E0A060
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/15473ffa-826e-3e8c-85d0-fa62985717f5.roa
Signing time: Sat 15 Mar 2025 13:00:52 +0000
ROA not before: Sat 15 Mar 2025 13:00:52 +0000
ROA not after: Fri 13 Jun 2025 13:00:52 +0000
asID: 40647
IP address blocks: 2001:502:cbe4::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 18 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:32:43:f2:a5:53:67:ca:b0:24:e0:a0:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 15 13:00:52 2025 GMT
Not After : Jun 13 13:00:52 2025 GMT
Subject: CN=c987444d-d4da-43d9-a67c-4e9c7253e85a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:57:e5:58:31:e8:1f:49:19:0f:85:63:e9:82:
b3:db:40:d3:d8:50:12:d4:b9:a4:1e:b2:fe:9a:d2:
94:3e:72:bf:e4:c8:b9:c0:84:a3:3e:86:f5:fe:79:
cc:1d:7a:8c:fe:c1:ba:c8:93:4d:b3:51:11:91:f8:
43:3a:82:b2:8f:2f:48:c7:4f:dc:24:58:19:cc:bb:
dc:78:48:b7:b8:d4:f5:b2:0a:66:ae:53:38:aa:78:
5a:4e:e6:b4:73:0a:4f:41:d7:de:1c:08:84:2d:52:
ef:33:fa:4b:43:c6:8e:e2:b6:8e:5f:9c:b5:b3:87:
2c:d8:0e:cf:78:12:59:c8:89:5f:cf:33:29:68:ec:
09:43:3d:d9:bd:30:6a:16:ee:d2:ad:50:68:4d:4a:
87:25:b7:c3:f2:60:2a:e4:29:0e:36:19:f0:ba:ba:
00:fc:18:a2:84:56:e8:81:c4:d2:f3:2a:92:d9:ca:
47:8e:a0:a1:ae:d1:44:0e:8d:86:bc:8f:ae:0c:eb:
b7:8d:7c:29:b0:5d:ee:33:c6:f6:23:e2:b0:15:cc:
b8:7e:f8:8a:32:40:a9:98:22:59:33:f3:24:92:16:
dc:84:6d:5a:6c:eb:6c:a8:d3:35:17:eb:77:35:ba:
15:5c:24:32:af:d5:94:a7:62:4e:f7:6d:87:ce:7a:
95:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C0:80:33:33:20:D3:43:5A:3C:37:A2:9F:94:77:8A:25:2E:5B:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/15473ffa-826e-3e8c-85d0-fa62985717f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:cbe4:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:8e:6c:1e:ca:c3:80:5a:b4:f9:f6:1f:48:d5:11:6b:0a:f1:
92:64:56:66:17:3e:bf:10:4c:e6:38:f5:91:e7:da:9b:6f:2c:
43:7e:7a:91:3c:cd:68:07:89:81:4f:ae:c7:36:3e:3b:31:aa:
ab:09:39:36:df:5c:ef:2f:2d:01:a0:0d:92:d8:40:18:a1:2d:
23:6d:58:4c:6d:46:2a:5f:46:41:0c:e0:3c:d4:07:59:11:5e:
b7:72:1d:0c:7f:11:7c:0c:b3:ce:57:7d:76:32:fd:ce:7d:1c:
b2:8c:bc:fd:38:dc:7e:2d:94:0f:a2:ac:6a:9d:60:5b:32:be:
63:2b:79:0a:31:af:85:9a:a8:4d:1a:d7:2d:0b:87:8d:a0:f9:
dc:65:65:30:db:54:4c:87:cb:a4:61:ce:de:af:73:19:a8:47:
73:9d:b1:d2:86:b9:9d:fa:3e:e8:c5:22:4c:33:08:39:8a:c6:
79:28:af:07:f8:01:19:d5:1e:bf:c6:12:8f:17:b6:8c:0c:9c:
c5:0b:76:4f:28:24:ea:76:b5:1e:c9:83:1f:cb:93:0b:ac:fd:
90:5f:d9:88:8b:d7:3b:ed:f2:25:cf:bf:b1:07:c4:6c:fe:e3:
4a:8a:80:2b:50:e8:47:17:c6:c4:af:ce:fd:d0:49:96:f5:6d:
4b:61:3e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 20:25:54 2025 by rpki-client